Fusion Automation API
To run scripts
Install this extension
Navigate to Settings > Extensions > Fusion Automation API to configure:
- Activity ID
- Fusion environment
- Auth mode (
3lo recommended; pat is deprecated)
Use VSCode commands (type in the top centre bar, or ctrl + shift + p on Windows) to configure:
Have a .ts file open and focused (click inside the editor)
The Run Locally and Run Remote buttons should appear in the top right
Authentication
Use setting fusion-automation-api.authMode:
3lo (default)
The extension opens your browser to sign in to Autodesk Platform Services. After consent, APS redirects back to a private VSCode URL — vscode://Autodesk.fusion-automation-api/callback — which your operating system hands to VSCode and the extension picks up directly. No local HTTP server is involved. The access token is sent as adsk3LeggedToken on the workitem. Tokens are stored in VSCode secret storage and refreshed until the refresh token expires.
Sign-in is integrated with VSCode's native authentication API. The first time you run a script remotely you will be prompted to sign in automatically. After that, look for Autodesk Platform Services (Production), (Staging), and (Development) under the Accounts icon at the bottom of the activity bar; each one represents a separate session and can be signed in or out independently from there.
One-time APS app setup
You must register the extension's redirect URL on your APS app, otherwise sign-in fails with a redirect_uri mismatch error.
Open https://aps.autodesk.com/myapps and select your app (or create one).
Under Callback URL, add — exactly, character-for-character:
vscode://Autodesk.fusion-automation-api/callback
Save the app. If you previously had http://localhost:8080/ registered for an earlier version of this extension, you can remove it.
Copy the app's Client ID and Client Secret and set them in VSCode via the Set Client ID and Set Client Secret commands.
Sign-in is supported in desktop VSCode only — VSCode Remote / Web is not supported in this version because the OAuth redirect URL must be a fixed, pre-registered string.
pat (deprecated)
Legacy mode: set a Personal Access Token with Set Personal Access Token (deprecated). The token is sent as PersonalAccessToken.
