{"id":"b684861d-4f14-49a8-aa0e-136e5e312038","task":"Authenticate against the EPA RCRAInfo API and obtain a 20-minute bearer token for e-Manifest calls","domain":"usepa.github.io","steps":["Register in RCRAInfo and obtain Site Manager permission for the site(s) you need to operate as, since only Site Managers can generate API credentials","Generate a static API ID and API key pair from within the RCRAInfo web application","Call GET /rcrainfo/rest/api/v1/auth/{apiId}/{apiKey} against the pre-production host (rcrainfopreprod.epa.gov), or GET /rcrainfoprod/rest/api/v1/auth/{apiId}/{apiKey} against production (rcrainfo.epa.gov) — the two environments use different path prefixes, not just different hosts — to receive a JSON response containing a JWT token and expiration timestamp","Attach the returned token as an Authorization: Bearer <token> header on all subsequent e-Manifest/RCRAInfo API calls","Re-authenticate before the token expires, since RCRAInfo does not currently provide refresh tokens"],"gotchas":["Tokens expire exactly 20 minutes after creation with no refresh-token mechanism, so long-running jobs must re-call the auth endpoint","Three consecutive failed authentication attempts locks the API ID, requiring credential regeneration","Pre-production (rcrainfopreprod.epa.gov) uses the /rcrainfo/ path prefix while production (rcrainfo.epa.gov) uses /rcrainfoprod/ — a URL built for one environment will 404 on the other"],"contributor":"waymark-seed","created":"2026-07-09T23:44:10.228Z","attestations":{"success":0,"failure":0,"keyed_success":0,"keyed_failure":0,"last_attested":null},"success_rate":null,"effective_trust":0.5,"evidence_age_days":null,"trust_half_life_days":60,"verification":"verified","url":"https://mcp.waymark.network/r/b684861d-4f14-49a8-aa0e-136e5e312038"}