Skip to main content
POST
Create managed runner

Authorizations

Authorization
string
header
default:Bearer {API_ACCESS_TOKEN}
required

CoreWeave API access token sent as a bearer token.

Query Parameters

requestId
string

Optional idempotency token, at most 128 UTF-8 bytes. Reusing a token returns the same runner. A different request body or a deleted original runner returns ALREADY_EXISTS.

Body

application/json

ManagedRunner is an admin-owned runner deployment.

identity
object
required

Core runner identity. Required on create; immutable identity fields cannot be changed afterward.

policy
object
required

The policy governing sandboxes on this runner. v1 managed-runner creation requires an explicit policy. An empty policy supplies no base defaults or explicit constraints. Platform safety gates still apply, and an absent runtime-class allowlist permits no concrete runtimeClass pin.

displayName
string

Human-readable name for the runner, at most 256 characters.

spec
object

Desired managed-runner configuration.

profileBindings
object[]

Legacy profile bindings. Not accepted by v1 managed-runner writes; configure policy instead.

etag
string

Opaque revision token for policy updates. Clients must send the value returned by GetManagedRunner when updating policy. A stale value causes FAILED_PRECONDITION and no mutation is applied.

Response

OK

ManagedRunner is an admin-owned runner deployment.

identity
object
required

Core runner identity. Required on create; immutable identity fields cannot be changed afterward.

policy
object
required

The policy governing sandboxes on this runner. v1 managed-runner creation requires an explicit policy. An empty policy supplies no base defaults or explicit constraints. Platform safety gates still apply, and an absent runtime-class allowlist permits no concrete runtimeClass pin.

displayName
string

Human-readable name for the runner, at most 256 characters.

spec
object

Desired managed-runner configuration.

installStatus
enum<string>
read-only

Current installation status. RUNNER_INSTALL_STATUS_UNSPECIFIED means no installation status is specified.

Available options:
RUNNER_INSTALL_STATUS_UNSPECIFIED,
RUNNER_INSTALL_STATUS_PENDING,
RUNNER_INSTALL_STATUS_PROVISIONING,
RUNNER_INSTALL_STATUS_READY,
RUNNER_INSTALL_STATUS_FAILED,
RUNNER_INSTALL_STATUS_DELETING
connectionStatus
enum<string>
read-only

Live connection status. RUNNER_CONNECTION_STATUS_UNSPECIFIED means no connection status is specified.

Available options:
RUNNER_CONNECTION_STATUS_UNSPECIFIED,
RUNNER_CONNECTION_STATUS_CONNECTED,
RUNNER_CONNECTION_STATUS_DISCONNECTED
activeConfigVersion
string
read-only

Active configuration version running on the runner.

activeProfileSpecVersion
string
read-only

Active profile spec version running on the runner.

activeRevision
integer<int32>
read-only

Active revision number currently running on the runner.

targetRevision
integer<int32>
read-only

Target revision number that should be rolled out.

deploymentSpec
object

Resolved deployment spec for the runner.

updateAvailable
boolean
read-only

Whether an update is available on this runner's release channel.

createTime
string<date-time>
read-only
updateTime
string<date-time>
read-only
lastHeartbeatTime
string<date-time>
read-only
profileBindings
object[]

Legacy profile bindings. Not accepted by v1 managed-runner writes; configure policy instead.

installError
object

Populated when install_status == FAILED.

rolloutInProgress
boolean
read-only

True when target_revision is newer than active_revision.

etag
string

Opaque revision token for policy updates. Clients must send the value returned by GetManagedRunner when updating policy. A stale value causes FAILED_PRECONDITION and no mutation is applied.

dataPlaneStatus
object

Observed direct data-plane endpoint state.