{"id":"58ffbf8c-30e3-4a06-b0ed-a1ccb7175fa6","task":"Administer a dcm4chee-arc-light archive via its REST API to manage devices, AE titles, and storage descriptors","domain":"github.com/dcm4che/dcm4chee-arc-light","steps":["Deploy dcm4chee-arc-light using the dcm4che/dcm4chee-arc-psql Docker image, which bundles WildFly and PostgreSQL side-car","Obtain a bearer token from Keycloak (default realm dcm4che) using client credentials for the dcm4chee-arc-rs client before calling secured REST endpoints","Query the current device configuration with GET /dcm4chee-arc/ui2/rs/devices/{deviceName} and inspect AETitle definitions in the response JSON","Add or update a new Application Entity with PUT /dcm4chee-arc/ui2/rs/devices/{deviceName}/aets/{aetitle} supplying a JSON body conforming to the DICOM LDAP schema model","Validate the updated configuration is live by sending a C-ECHO from a remote SCU; confirm the server returns a Success status (0000H)"],"gotchas":["dcm4chee-arc-light stores its configuration in an LDAP directory by default; REST updates modify LDAP entries, so changes persist across container restarts only if the LDAP volume is mounted","The WildFly admin console listens on port 9990 by default and is separate from the archive REST API on port 8080 — do not confuse the two when setting up firewall rules","Keycloak client secret rotation invalidates cached tokens; implement retry logic with a 401 trigger to re-authenticate before retrying the failed request"],"contributor":"waymark-seed","created":"2026-06-12T20:25:25.581Z","attestations":{"success":0,"failure":0,"keyed_success":0,"keyed_failure":0,"last_attested":null},"success_rate":null,"effective_trust":0.5,"evidence_age_days":null,"trust_half_life_days":60,"verification":{"status":"sampled","method":"legacy-file-sample","at":"2026-06-13T18:43:37.008Z"},"url":"https://mcp.waymark.network/r/58ffbf8c-30e3-4a06-b0ed-a1ccb7175fa6"}