> ## Documentation Index
> Fetch the complete documentation index at: https://docs.blindsight.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Submit Deployment

> Finish onboarding: create the primary App, seed its component graph, mint
an SDK token, and persist the deployment config. Idempotent.



## OpenAPI

````yaml /api-reference/openapi.json put /api/onboarding/deployment
openapi: 3.1.0
info:
  title: Blindsight API
  version: 0.1.0
  description: >-
    The full Blindsight REST surface, generated from the running application.
    Replace the server host with your own deployment.


    For the Runtime Security integration surface (scan, proxy, tool calls) see
    the Runtime Security spec, which is hand written and carries worked
    examples.
servers:
  - url: https://api.your-blindsight.com
    description: Your Blindsight deployment
security: []
paths:
  /api/onboarding/deployment:
    put:
      tags:
        - onboarding
      summary: Submit Deployment
      description: >-
        Finish onboarding: create the primary App, seed its component graph,
        mint

        an SDK token, and persist the deployment config. Idempotent.
      operationId: submit_deployment_api_onboarding_deployment_put
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/DeploymentSubmit'
        required: true
      responses:
        '200':
          description: Successful Response
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/DeploymentSubmitResponse'
        '422':
          description: Validation Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/HTTPValidationError'
components:
  schemas:
    DeploymentSubmit:
      properties:
        capabilities:
          items:
            $ref: '#/components/schemas/Capability'
          type: array
          minItems: 1
          title: Capabilities
        primary_app_name:
          anyOf:
            - type: string
              maxLength: 128
              minLength: 1
            - type: 'null'
          title: Primary App Name
      additionalProperties: false
      type: object
      required:
        - capabilities
      title: DeploymentSubmit
      description: Payload for ``PUT /api/onboarding/deployment``.
    DeploymentSubmitResponse:
      properties:
        onboarding_complete:
          type: boolean
          title: Onboarding Complete
          default: false
        schema_version:
          type: integer
          title: Schema Version
          default: 2
        capabilities:
          items:
            type: string
          type: array
          title: Capabilities
        selected_components:
          items:
            type: string
          type: array
          title: Selected Components
        enabled_feature_keys:
          items:
            type: string
          type: array
          title: Enabled Feature Keys
        primary_app_uuid:
          anyOf:
            - type: string
            - type: 'null'
          title: Primary App Uuid
        completed_at:
          anyOf:
            - type: string
              format: date-time
            - type: 'null'
          title: Completed At
        updated_at:
          anyOf:
            - type: string
              format: date-time
            - type: 'null'
          title: Updated At
        app_token:
          anyOf:
            - type: string
            - type: 'null'
          title: App Token
      type: object
      title: DeploymentSubmitResponse
      description: >-
        Onboarding submit response, carries the one-time app token secret.


        ``app_token`` is the minted attribution token in plaintext, returned
        once

        so the SDK/proxy snippets can use a real key. It is ``None`` when no
        token

        was minted (e.g. a Data-Security-only or Compliance-only deployment).
    HTTPValidationError:
      properties:
        detail:
          items:
            $ref: '#/components/schemas/ValidationError'
          type: array
          title: Detail
      type: object
      title: HTTPValidationError
    Capability:
      type: string
      enum:
        - runtime_security
        - rag
        - shadow_ai
        - dlp
        - data_security
        - mcp_tools
        - compliance
        - agentic_guardrails
        - api_proxy
      title: Capability
      description: >-
        Top-level capabilities offered on the first onboarding step.


        Selecting one drives its own guided setup (see SETUP_KIND in

        app.services.deployment) and unlocks its nav/features (subject to
        license).
    ValidationError:
      properties:
        loc:
          items:
            anyOf:
              - type: string
              - type: integer
          type: array
          title: Location
        msg:
          type: string
          title: Message
        type:
          type: string
          title: Error Type
      type: object
      required:
        - loc
        - msg
        - type
      title: ValidationError

````