Set shared storage
const url = 'https://qinto-api.blotout.io/teams/7b8d1a52-6c1e-4b6f-9a30-2f8a54d1c3e9/storage-links/a1b2c3d4-e5f6-4a7b-8c9d-0e1f2a3b4c5d/children/3f2a9c81-5d47-4e0b-8c66-91b2a7f04d15/resources';const options = { method: 'PUT', headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'}, body: '{"resources":[{"appId":"5a6b7c8d-9e0f-4a1b-8c2d-3e4f5a6b7c8d","identifier":"cache","type":"kv"}]}'};
try { const response = await fetch(url, options); const data = await response.json(); console.log(data);} catch (error) { console.error(error);}curl --request PUT \ --url https://qinto-api.blotout.io/teams/7b8d1a52-6c1e-4b6f-9a30-2f8a54d1c3e9/storage-links/a1b2c3d4-e5f6-4a7b-8c9d-0e1f2a3b4c5d/children/3f2a9c81-5d47-4e0b-8c66-91b2a7f04d15/resources \ --header 'Authorization: Bearer <token>' \ --header 'Content-Type: application/json' \ --data '{ "resources": [ { "appId": "5a6b7c8d-9e0f-4a1b-8c2d-3e4f5a6b7c8d", "identifier": "cache", "type": "kv" } ] }'Replaces what a child shares from the parent. Send the complete set: anything omitted flips back to the child’s own storage, and anything added sets the child’s own object aside until it is unlinked.
How it works
The identity graph is shared as a whole — the three appId: null rows anon, global and alias together, or partial_identity_graph is returned. Any other site-level row, a resource the child does not declare, or one the parent cannot satisfy yet fails with not_shareable. redeploy reports whether the immediate redeploys landed; the sync retries any that did not.
Required permissions
team:manage_storage_links:writeon the team
Authorizations
Section titled “Authorizations”Parameters
Section titled “Parameters”Path Parameters
Section titled “Path Parameters”Unique id (UUID) of the team that owns the addressed resources, as shown in the team settings on the Blotout platform.
Example
7b8d1a52-6c1e-4b6f-9a30-2f8a54d1c3e9Unique id (UUID) of the team that owns the addressed resources, as shown in the team settings on the Blotout platform.
Unique id (UUID) of the storage link configuration.
Example
a1b2c3d4-e5f6-4a7b-8c9d-0e1f2a3b4c5dUnique id (UUID) of the storage link configuration.
Unique id (UUID) of the child site.
Example
3f2a9c81-5d47-4e0b-8c66-91b2a7f04d15Unique id (UUID) of the child site.
Request Bodyrequired
Section titled “Request Bodyrequired”The complete selection.
object
The complete set the child shares from the parent. The identity graph is the three appId: null rows anon, global and alias together.
object
The app that declares the resource, or null for the site’s identity graph.
Example
5a6b7c8d-9e0f-4a1b-8c2d-3e4f5a6b7c8dThe resource identifier from the app manifest, or anon, global, alias for the identity graph.
Example
cacheThe kind of storage object.
Example
kvResponses
Section titled “Responses”The selection was saved.
object
Whether the selection differed from what was stored.
Outcome of the immediate redeploys; a failed one is retried by the sync, so the change is saved either way.
object
Whether every affected site was redeployed at once.
Why a redeploy was left to the sync, or null.
Example
{ "changed": true, "redeploy": { "redeployed": true, "reason": null }}invalid_params — A path parameter failed validation (for example a malformed UUID); details pinpoints the offending parameter. invalid_body — The JSON body is unparseable or failed schema validation; details pinpoints the offending fields when the body could be parsed.
object
Machine-readable error slug; switch on this value rather than on the HTTP status alone.
Field-level validation errors: a tree keyed by input property, each node carrying an errors array of human-readable messages. Render it to help the caller correct the request.
object
Example
{ "error": "invalid_params", "details": { "errors": [], "properties": { "teamId": { "errors": [ "Invalid UUID" ] } } }}unauthenticated — The Authorization: Bearer token is missing, malformed, or no longer valid. Generate a team API token or obtain a new OAuth access token.
object
Machine-readable error slug; switch on this value rather than on the HTTP status alone.
Example
{ "error": "unauthenticated"}forbidden — The bearer credential lacks the required permission or belongs to another team, or its user lacks the organization role a developer operation needs. Update its policies, use a credential bound to the addressed team, or ask an organization owner for the role; message states the reason when one is known.
object
Machine-readable error slug; switch on this value rather than on the HTTP status alone.
Human-readable reason for this specific failure, intended for display — do not parse it programmatically.
Example
{ "error": "forbidden", "message": "The Cloudflare API token is invalid or expired."}not_found — The addressed resource does not exist within this team; check the id and retry.
object
Machine-readable error slug; switch on this value rather than on the HTTP status alone.
Example
{ "error": "not_found"}partial_identity_graph — The identity graph is shared as a whole; send the three appId: null rows anon, global and alias together, or none of them. not_shareable — A selected resource cannot be shared: it is a site-level object other than the identity graph, the child does not declare it, or the parent cannot satisfy it yet. message names it.
object
Machine-readable error slug; switch on this value rather than on the HTTP status alone.
Example
{ "error": "partial_identity_graph"}internal — Unexpected server error. Nothing is guaranteed to have been persisted; idempotent operations are safe to retry.
object
Machine-readable error slug; switch on this value rather than on the HTTP status alone.
Example
{ "error": "internal"}