Provider Credentials

Use these endpoints to attach provider credentials to a Leaf user. The base path is consistent, but the request body and supported helper endpoints vary by provider, so this page is best used as a path matrix rather than a single normalized contract. For setup requirements and request-body examples, see the provider-specific guides under Connecting Providers.

Base URL

https://api.withleaf.io/services/usermanagement/api

Credential path matrix

Provider	Credential path	Notes	Documentation
John Deere	`john-deere-credentials`	OAuth credentials	John Deere
CLAAS	`claas-credentials`	OAuth with `clientKey` / `clientSecret` and grower `refreshToken`; `clientEnvironment` supports `STAGE` and `PRODUCTION`	CLAAS
Climate FieldView	`climate-field-view-credentials`	OAuth credentials	Climate FieldView
CNHI (AFS Connect - Legacy)	`cnhi-credentials`	Requires `clientEnvironment`; legacy AFS Connect API	CNHI (AFS Connect)
CNHI FieldOps	`cnhi-field-ops-credentials`	Requires `clientEnvironment`; existing CNHI keys do not work	CNHI FieldOps
Trimble	`trimble-credentials`	OAuth credentials	Trimble
AgLeader	`ag-leader-credentials`	Uses app keys plus grower refresh token	AgLeader
Stara	`stara-credentials`	Uses `apiKey`, `accessToken`, `accessTokenClient`, and `refreshToken`	Stara
Raven	`raven-credentials`	OAuth credentials for grower, farm, and field data	Raven
Raven Slingshot	`raven-slingshot-credentials`	API key for machine file ingestion	Raven Slingshot
Sentera	`sentera-credentials`	Username/password credentials	Sentera
AgVance	`agvance-credentials`	API key plus account credentials	AgVance
Panorama	`panorama-credentials`	Precision Planting Panorama	Panorama
Lindsay	`lindsay-credentials`	OAuth credentials with `clientEnvironment`	Lindsay
Valley	`valley-credentials`	API key plus account credentials	Valley

Common path shape

The credential endpoints always start with the Leaf user:

/users/{leafUserId}/{credential-path}

Examples:

GET /users/{leafUserId}/john-deere-credentials
POST /users/{leafUserId}/ag-leader-credentials
DELETE /users/{leafUserId}/panorama-credentials

Most providers also expose a credential events endpoint:

/users/{leafUserId}/{credential-path}/events

Use the provider-specific documentation to confirm the exact request body and any provider-specific fields.

Example: get stored credentials

curl -X GET \
  -H 'Authorization: Bearer YOUR_TOKEN' \
  'https://api.withleaf.io/services/usermanagement/api/users/{leafUserId}/john-deere-credentials'

import requests

TOKEN = "YOUR_TOKEN"
endpoint = "https://api.withleaf.io/services/usermanagement/api/users/{leafUserId}/john-deere-credentials"
headers = {"Authorization": f"Bearer {TOKEN}"}

response = requests.get(endpoint, headers=headers)
print(response.json())

const axios = require("axios");
const TOKEN = "YOUR_TOKEN";

const endpoint =
  "https://api.withleaf.io/services/usermanagement/api/users/{leafUserId}/john-deere-credentials";
const headers = { Authorization: `Bearer ${TOKEN}` };

axios.get(endpoint, { headers })
  .then((res) => console.log(res.data))
  .catch(console.error);

Events endpoint

Many provider credential endpoints expose /events for troubleshooting authentication failures, token refreshes, and sync-related issues. When available, these endpoints support:

Parameter	Type	Description
`page`	integer	Page number (default `0`)
`size`	integer	Page size (default `20`)
`sort`	string	Sort order such as `createdDate,desc`

What to do next

Use Connecting Providers to choose the right provider flow.
Use the provider-specific guides for request-body schemas and setup details.
Use Leaf users to create the Leaf user before attaching credentials.

Authentication

Configuration

Leaf Users

Alerts

Providers

Data Hierarchy

Machine data

Satellite imagery

Weather

Soil Sampling

Leaf Lake

UI components

MCP server

Irrigation

Usage tracking

Beta

Base URL

Credential path matrix

Common path shape

Example: get stored credentials

Events endpoint

What to do next

​Base URL

​Credential path matrix

​Common path shape

​Example: get stored credentials

​Events endpoint

​What to do next

Base URL

Credential path matrix

Common path shape

Example: get stored credentials

Events endpoint

What to do next