# Tencent Cloud Security Token Service API

> Tencent Cloud Security Token Service API on Apizie: 7 endpoints (Assume Role, Assume Role With SAML, Assume Role With Web Identity, Get Caller Identity, …) returned as clean JSON through one API key. Send your own provider key in the x-upstream-key header. Call it over REST at https://zieapi.vercel.app/v1/cloud:tencent-sts/{endpoint} or from Claude, ChatGPT and Cursor through the Apizie MCP server. Free plan: 1,000 requests a month.

- Project key: `cloud:tencent-sts`
- Category: Cloud
- Status: byok
- Source: https://www.tencentcloud.com/document/api
- Page: https://zieapi.vercel.app/api/cloud/tencent-sts
- OpenAPI: https://zieapi.vercel.app/api/cloud/tencent-sts/openapi.json

Tencent Cloud API 3.0 for Security Token Service (sts). Every call is signed with TC3-HMAC-SHA256 using your SecretId and SecretKey.

## Endpoints

### Assume Role
`POST https://zieapi.vercel.app/v1/cloud:tencent-sts/assume-role` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| X-TC-Region | string | no | Region for regional products, for example ap-singapore, ap-guangzhou, na-siliconvalley |
| RoleArn | string | yes |  |
| RoleSessionName | string | yes |  |
| DurationSeconds | integer | no |  |
| Policy | string | no |  |
| ExternalId | string | no |  |
| Tags | array | no |  |
| SourceIdentity | string | no |  |
| SerialNumber | string | no |  |
| TokenCode | string | no |  |

### Assume Role With SAML
`POST https://zieapi.vercel.app/v1/cloud:tencent-sts/assume-role-with-saml` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| X-TC-Region | string | no | Region for regional products, for example ap-singapore, ap-guangzhou, na-siliconvalley |
| SAMLAssertion | string | yes |  |
| PrincipalArn | string | yes |  |
| RoleArn | string | yes |  |
| RoleSessionName | string | yes |  |
| DurationSeconds | integer | no |  |

### Assume Role With Web Identity
`POST https://zieapi.vercel.app/v1/cloud:tencent-sts/assume-role-with-web-identity` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| X-TC-Region | string | no | Region for regional products, for example ap-singapore, ap-guangzhou, na-siliconvalley |
| ProviderId | string | yes |  |
| WebIdentityToken | string | yes |  |
| RoleArn | string | yes |  |
| RoleSessionName | string | yes |  |
| DurationSeconds | integer | no |  |

### Get Caller Identity
`POST https://zieapi.vercel.app/v1/cloud:tencent-sts/get-caller-identity` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| X-TC-Region | string | no | Region for regional products, for example ap-singapore, ap-guangzhou, na-siliconvalley |

### Get Federation Token
`POST https://zieapi.vercel.app/v1/cloud:tencent-sts/get-federation-token` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| X-TC-Region | string | no | Region for regional products, for example ap-singapore, ap-guangzhou, na-siliconvalley |
| Name | string | yes |  |
| Policy | string | yes |  |
| DurationSeconds | integer | no |  |

### Get Session Token
`POST https://zieapi.vercel.app/v1/cloud:tencent-sts/get-session-token` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| X-TC-Region | string | no | Region for regional products, for example ap-singapore, ap-guangzhou, na-siliconvalley |
| SerialNumber | string | yes |  |
| TokenCode | string | yes |  |
| DurationSeconds | integer | no |  |

### Query Api Key
`POST https://zieapi.vercel.app/v1/cloud:tencent-sts/query-api-key` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| X-TC-Region | string | no | Region for regional products, for example ap-singapore, ap-guangzhou, na-siliconvalley |
| TargetUin | integer | no |  |

## Example
```
curl "https://zieapi.vercel.app/v1/cloud:tencent-sts/assume-role" \
  -H "x-api-key: $APIZIE_KEY" \
  -H "x-upstream-key: $PROVIDER_KEY"
```

## FAQ

### How do I call the Tencent Cloud Security Token Service API?
Create a free Apizie key, then send POST https://zieapi.vercel.app/v1/cloud:tencent-sts/assume-role with the header x-api-key. Every endpoint returns { project, data, timestamp }.

### Is the Tencent Cloud Security Token Service API free on Apizie?
Yes. The Free plan includes 1,000 requests a month at 100 requests a minute, no credit card. Tencent Cloud Security Token Service itself also needs your own key from tencentcloudapi.com.

### Can AI agents use the Tencent Cloud Security Token Service API?
Yes. Add the Apizie MCP server (https://zieapi.vercel.app/mcp) to Claude, ChatGPT, Cursor or VS Code, then ask in plain language. The agent calls run_scraper with project key cloud:tencent-sts.

### What is the status of the Tencent Cloud Security Token Service API?
Needs your own provider key (bring your own key)