npm package discovery and stats viewer.

Discover Tips

  • General search

    [free text search, go nuts!]

  • Package details

    pkg:[package-name]

  • User packages

    @[username]

Sponsor

Optimize Toolset

I’ve always been into building performant and accessible sites, but lately I’ve been taking it extremely seriously. So much so that I’ve been building a tool to help me optimize and monitor the sites that I build to make sure that I’m making an attempt to offer the best experience to those who visit them. If you’re into performant, accessible and SEO friendly sites, you might like it too! You can check it out at Optimize Toolset.

About

Hi, 👋, I’m Ryan Hefner  and I built this site for me, and you! The goal of this site was to provide an easy way for me to check the stats on my npm packages, both for prioritizing issues and updates, and to give me a little kick in the pants to keep up on stuff.

As I was building it, I realized that I was actually using the tool to build the tool, and figured I might as well put this out there and hopefully others will find it to be a fast and useful way to search and browse npm packages as I have.

If you’re interested in other things I’m working on, follow me on Twitter or check out the open source projects I’ve been publishing on GitHub.

I am also working on a Twitter bot for this site to tweet the most popular, newest, random packages from npm. Please follow that account now and it will start sending out packages soon–ish.

Open Software & Tools

This site wouldn’t be possible without the immense generosity and tireless efforts from the people who make contributions to the world and share their work via open source initiatives. Thank you 🙏

© 2026 – Pkg Stats / Ryan Hefner

@lumoauth/api-client

v1.0.0

Published

OpenAPI client for @lumoauth/api-client

Readme

GENERATED CLIENT — raw API coverage. This package is generated from the LumoAuth OpenAPI spec (api-clients/openapi.json) by the sdk-codegen pipeline. It covers the full REST surface with typed models but no framework sugar. An ergonomic, hand-maintained wrapper is the next step — where one already exists (@lumoauth/client / @lumoauth/backend and friends on npm, lumoauth on PyPI, github.com/lumoauth/lumo-auth-go), prefer it. Do not edit by hand: changes are overwritten on the next regeneration.

@lumoauth/[email protected]

This generator creates TypeScript/JavaScript client that utilizes axios. The generated Node module can be used in the following environments:

Environment

  • Node.js
  • Webpack
  • Browserify

Language level

  • ES5 - you must have a Promises/A+ library installed
  • ES6

Module system

  • CommonJS
  • ES6 module system

It can be used in both TypeScript and JavaScript. In TypeScript, the definition will be automatically resolved via package.json. (Reference)

Building

To build and compile the typescript sources to javascript use:

npm install
npm run build

Publishing

First build the package then run npm publish

Consuming

navigate to the folder of your consuming project and run one of the following commands.

published:

npm install @lumoauth/[email protected] --save

unPublished (not recommended):

npm install PATH_TO_GENERATED_PACKAGE --save

Documentation for API Endpoints

All URIs are relative to https://app.lumoauth.dev

Class | Method | HTTP request | Description ------------ | ------------- | ------------- | ------------- AAuthApi | authorizeAgent | GET /orgs/{orgId}/api/v1/aauth/agent/auth | Agent Auth Endpoint - redirects to user consent page. AAuthApi | getAgentJwks | GET /orgs/{orgId}/api/v1/aauth/agents/{agentId}/jwks.json | Agent JWKS endpoint AAuthApi | getAgentMetadata | GET /orgs/{orgId}/api/v1/.well-known/aauth-agent | Agent Metadata (Section 8.1) Published at /.well-known/aauth-agent for registered agents. AAuthApi | getAgentMetadataById | GET /orgs/{orgId}/api/v1/aauth/agents/{agentId}/metadata | Individual Agent Metadata AAuthApi | getIssuerJwks | GET /orgs/{orgId}/api/v1/aauth/jwks.json | Auth Server JWKS endpoint for AAuth. AAuthApi | getIssuerMetadata | GET /orgs/{orgId}/api/v1/.well-known/aauth-issuer | Auth Server Metadata (Section 8.2) Published at /.well-known/aauth-issuer for each tenant. AAuthApi | getResourceJwks | GET /orgs/{orgId}/api/v1/aauth/resources/{resourceId}/jwks.json | Resource JWKS endpoint AAuthApi | getResourceMetadata | GET /orgs/{orgId}/api/v1/.well-known/aauth-resource | Resource Metadata (Section 8.3) AAuthApi | getResourceMetadataById | GET /orgs/{orgId}/api/v1/aauth/resources/{resourceId}/metadata | Individual Resource Metadata AAuthApi | issueAgentToken | POST /orgs/{orgId}/api/v1/aauth/agent/token | Agent Token Endpoint AAuthApi | issueDelegateToken | POST /orgs/{orgId}/api/v1/aauth/agent/issue | Issue an agent token to a delegate. AAuthApi | issuePlatformToken | POST /orgs/{orgId}/api/v1/aauth/agent/platform-token | AAuthApi | issueResourceToken | POST /orgs/{orgId}/api/v1/aauth/resource/token | Resource Token Endpoint (Section 6) AAuthApi | revokeAgentToken | POST /orgs/{orgId}/api/v1/aauth/token/revoke | Revoke an auth token or refresh token. AAuthApi | verifyAuthToken | POST /orgs/{orgId}/api/v1/aauth/auth/token/verify | Auth Token Verification endpoint. AAuthApi | verifyResourceToken | POST /orgs/{orgId}/api/v1/aauth/resource/token/verify | Resource Token Verification (for resources to validate their own tokens). AdminAbacApi | abacAttributesCreate | POST /orgs/{orgId}/api/v1/abac/attributes | Create an attribute definition AdminAbacApi | abacAttributesDelete | DELETE /orgs/{orgId}/api/v1/abac/attributes/{id} | Delete an attribute definition AdminAbacApi | abacAttributesGet | GET /orgs/{orgId}/api/v1/abac/attributes/{id} | Get an attribute definition AdminAbacApi | abacAttributesList | GET /orgs/{orgId}/api/v1/abac/attributes | List attribute definitions AdminAbacApi | abacPoliciesCreate | POST /orgs/{orgId}/api/v1/abac/policies | Create an ABAC policy AdminAbacApi | abacPoliciesDelete | DELETE /orgs/{orgId}/api/v1/abac/policies/{id} | Delete an ABAC policy AdminAbacApi | abacPoliciesGet | GET /orgs/{orgId}/api/v1/abac/policies/{id} | Get an ABAC policy AdminAbacApi | abacPoliciesList | GET /orgs/{orgId}/api/v1/abac/policies | List ABAC policies AdminAbacApi | abacPoliciesToggle | POST /orgs/{orgId}/api/v1/abac/policies/{id}/toggle | Toggle a policy between active and inactive AdminAbacApi | patchAbacAttributesUpdate | PATCH /orgs/{orgId}/api/v1/abac/attributes/{id} | Partially update an attribute definition AdminAbacApi | patchAbacPoliciesUpdate | PATCH /orgs/{orgId}/api/v1/abac/policies/{id} | Partially update an ABAC policy AdminAbacApi | putAbacAttributesUpdate | PUT /orgs/{orgId}/api/v1/abac/attributes/{id} | Update an attribute definition AdminAbacApi | putAbacPoliciesUpdate | PUT /orgs/{orgId}/api/v1/abac/policies/{id} | Update an ABAC policy AdminAgentsApi | adminAgentsActivate | POST /orgs/{orgId}/api/v1/admin/agents/{agentId}/activate | Activate an agent AdminAgentsApi | adminAgentsAgentsDisable | POST /orgs/{orgId}/api/v1/admin/agents/{agentId}/disable | Disable agent AdminAgentsApi | adminAgentsAgentsEnable | POST /orgs/{orgId}/api/v1/admin/agents/{agentId}/enable | Enable agent AdminAgentsApi | adminAgentsAgentsRotateKey | POST /orgs/{orgId}/api/v1/admin/agents/{agentId}/rotate-key | Rotate agent API key AdminAgentsApi | adminAgentsCreate | POST /orgs/{orgId}/api/v1/admin/agents | Create a new agent AdminAgentsApi | adminAgentsDeactivate | POST /orgs/{orgId}/api/v1/admin/agents/{agentId}/deactivate | Deactivate an agent AdminAgentsApi | adminAgentsDelete | DELETE /orgs/{orgId}/api/v1/admin/agents/{agentId} | Delete an agent AdminAgentsApi | adminAgentsGenerateToken | POST /orgs/{orgId}/api/v1/admin/agents/{agentId}/token | Generate a token for the agent AdminAgentsApi | adminAgentsGet | GET /orgs/{orgId}/api/v1/admin/agents/{agentId} | Get a single agent by ID or agentId AdminAgentsApi | adminAgentsGetScopes | GET /orgs/{orgId}/api/v1/admin/agents/{agentId}/scopes | Get agent scopes/capabilities AdminAgentsApi | adminAgentsList | GET /orgs/{orgId}/api/v1/admin/agents | List all agents in the tenant AdminAgentsApi | adminAgentsRevokeKey | POST /orgs/{orgId}/api/v1/admin/agents/{agentId}/revoke-key | Revoke agent API key (nullify it so it can no longer authenticate) AdminAgentsApi | adminAgentsRotateCredentials | POST /orgs/{orgId}/api/v1/admin/agents/{agentId}/rotate-credentials | Rotate agent credentials AdminAgentsApi | adminAgentsSetScopes | PUT /orgs/{orgId}/api/v1/admin/agents/{agentId}/scopes | Update agent scopes/capabilities AdminAgentsApi | patchAdminAgentsUpdate | PATCH /orgs/{orgId}/api/v1/admin/agents/{agentId} | Update an existing agent AdminAgentsApi | putAdminAgentsUpdate | PUT /orgs/{orgId}/api/v1/admin/agents/{agentId} | Update an existing agent AdminAuditLogsApi | adminAuditLogsActions | GET /orgs/{orgId}/api/v1/admin/audit-logs/actions | List the distinct audit action types recorded for the tenant AdminAuditLogsApi | adminAuditLogsExport | GET /orgs/{orgId}/api/v1/admin/audit-logs/export | Export audit logs as CSV (default) or JSON AdminAuditLogsApi | adminAuditLogsGet | GET /orgs/{orgId}/api/v1/admin/audit-logs/{logId} | Get an audit log entry AdminAuditLogsApi | adminAuditLogsList | GET /orgs/{orgId}/api/v1/admin/audit-logs | List audit log entries AdminAuditLogsApi | adminAuditLogsRetention | GET /orgs/{orgId}/api/v1/admin/audit-logs/retention | Get audit log retention settings AdminAuditLogsApi | adminAuditLogsStats | GET /orgs/{orgId}/api/v1/admin/audit-logs/stats | Audit log statistics for a period (default: last 30 days) AdminAuditLogsApi | patchAdminAuditLogsRetentionUpdate | PATCH /orgs/{orgId}/api/v1/admin/audit-logs/retention | Update audit log retention settings AdminAuditLogsApi | putAdminAuditLogsRetentionUpdate | PUT /orgs/{orgId}/api/v1/admin/audit-logs/retention | Update audit log retention settings AdminEmailApi | adminEmailTemplatesDelete | DELETE /orgs/{orgId}/api/v1/admin/email-templates/{type} | Remove the custom email template so the built-in default is used AdminEmailApi | adminEmailTemplatesGet | GET /orgs/{orgId}/api/v1/admin/email-templates/{type} | Get an email template (custom or built-in default) AdminEmailApi | adminEmailTemplatesList | GET /orgs/{orgId}/api/v1/admin/email-templates | List every email template type with its current (custom or built-in) template AdminEmailApi | adminEmailTemplatesPreview | POST /orgs/{orgId}/api/v1/admin/email-templates/{type}/preview | Render an email template with sample data AdminEmailApi | adminEmailTemplatesUpsert | PUT /orgs/{orgId}/api/v1/admin/email-templates/{type} | Create or replace the custom email template for a type AdminEmailApi | adminEmailTemplatesVariables | GET /orgs/{orgId}/api/v1/admin/email-templates/{type}/variables | List the placeholders available to an email template type AdminGroupsApi | adminGroupsAddMembers | POST /orgs/{orgId}/api/v1/admin/groups/{groupId}/members | Add member(s) to group AdminGroupsApi | adminGroupsAddRole | POST /orgs/{orgId}/api/v1/admin/groups/{groupId}/roles | Add a single role to a group AdminGroupsApi | adminGroupsCreate | POST /orgs/{orgId}/api/v1/admin/groups | Create a new group AdminGroupsApi | adminGroupsDelete | DELETE /orgs/{orgId}/api/v1/admin/groups/{groupId} | Delete a group AdminGroupsApi | adminGroupsGet | GET /orgs/{orgId}/api/v1/admin/groups/{groupId} | Get a single group by ID or slug AdminGroupsApi | adminGroupsGetMembers | GET /orgs/{orgId}/api/v1/admin/groups/{groupId}/members | Get group members AdminGroupsApi | adminGroupsGroupsGetRoles | GET /orgs/{orgId}/api/v1/admin/groups/{groupId}/roles | Get group roles AdminGroupsApi | adminGroupsList | GET /orgs/{orgId}/api/v1/admin/groups | List all groups in the tenant AdminGroupsApi | adminGroupsRemoveMember | DELETE /orgs/{orgId}/api/v1/admin/groups/{groupId}/members/{userId} | Remove member from group AdminGroupsApi | adminGroupsRemoveRole | DELETE /orgs/{orgId}/api/v1/admin/groups/{groupId}/roles/{roleId} | Remove a role from a group AdminGroupsApi | adminGroupsUpdateRoles | PUT /orgs/{orgId}/api/v1/admin/groups/{groupId}/roles | Update group roles (replaces all existing roles) AdminGroupsApi | patchAdminGroupsUpdate | PATCH /orgs/{orgId}/api/v1/admin/groups/{groupId} | Update an existing group AdminGroupsApi | putAdminGroupsUpdate | PUT /orgs/{orgId}/api/v1/admin/groups/{groupId} | Update an existing group AdminIdentityProvidersApi | adminSocialProvidersAvailable | GET /orgs/{orgId}/api/v1/admin/social-providers/available | List the available social login provider types AdminIdentityProvidersApi | adminSocialProvidersCallbackUrls | GET /orgs/{orgId}/api/v1/admin/social-providers/callback-urls | Get the OAuth callback URL of every configured provider AdminIdentityProvidersApi | adminSocialProvidersCreate | POST /orgs/{orgId}/api/v1/admin/social-providers | Create a social login provider AdminIdentityProvidersApi | adminSocialProvidersDelete | DELETE /orgs/{orgId}/api/v1/admin/social-providers/{providerId} | Delete a social login provider AdminIdentityProvidersApi | adminSocialProvidersDisable | POST /orgs/{orgId}/api/v1/admin/social-providers/{providerId}/disable | Disable a social login provider AdminIdentityProvidersApi | adminSocialProvidersEnable | POST /orgs/{orgId}/api/v1/admin/social-providers/{providerId}/enable | Enable a social login provider AdminIdentityProvidersApi | adminSocialProvidersGet | GET /orgs/{orgId}/api/v1/admin/social-providers/{providerId} | Get a social login provider AdminIdentityProvidersApi | adminSocialProvidersList | GET /orgs/{orgId}/api/v1/admin/social-providers | List social login providers AdminIdentityProvidersApi | adminSocialProvidersTypes | GET /orgs/{orgId}/api/v1/admin/social-providers/types | List the available social login provider types AdminIdentityProvidersApi | patchAdminSocialProvidersUpdate | PATCH /orgs/{orgId}/api/v1/admin/social-providers/{providerId} | Update a social login provider AdminIdentityProvidersApi | putAdminSocialProvidersUpdate | PUT /orgs/{orgId}/api/v1/admin/social-providers/{providerId} | Create or replace a social login provider AdminMcpApi | adminMcpServersCreate | POST /orgs/{orgId}/api/v1/admin/mcp/servers | Register an MCP server AdminMcpApi | adminMcpServersDelete | DELETE /orgs/{orgId}/api/v1/admin/mcp/servers/{serverId} | Delete an MCP server AdminMcpApi | adminMcpServersGet | GET /orgs/{orgId}/api/v1/admin/mcp/servers/{serverId} | Get an MCP server AdminMcpApi | adminMcpServersList | GET /orgs/{orgId}/api/v1/admin/mcp/servers | List MCP servers AdminMfaApi | deleteUserAuthenticator | DELETE /orgs/{orgId}/api/v1/admin/users/{userId}/authenticators/{authenticatorId} | Remove one of a user's authenticators AdminMfaApi | getMfaCoverageReport | GET /orgs/{orgId}/api/v1/admin/reports/mfa-coverage | MFA enrollment coverage AdminMfaApi | getMfaPolicy | GET /orgs/{orgId}/api/v1/admin/policies/mfa | Get the MFA policy AdminMfaApi | issueTemporaryAccessCode | POST /orgs/{orgId}/api/v1/admin/users/{userId}/temporary-access-code | Issue a temporary access code AdminMfaApi | listUserAuthenticators | GET /orgs/{orgId}/api/v1/admin/users/{userId}/authenticators | List a user's authenticators AdminMfaApi | updateMfaPolicy | PUT /orgs/{orgId}/api/v1/admin/policies/mfa | Update the MFA policy AdminOAuthClientsApi | createClient | POST /orgs/{orgId}/api/v1/admin/clients | Create an OAuth client AdminOAuthClientsApi | deleteClient | DELETE /orgs/{orgId}/api/v1/admin/clients/{clientId} | Delete an OAuth client AdminOAuthClientsApi | disableClient | POST /orgs/{orgId}/api/v1/admin/clients/{clientId}/disable | Disable an OAuth client AdminOAuthClientsApi | enableClient | POST /orgs/{orgId}/api/v1/admin/clients/{clientId}/enable | Enable an OAuth client AdminOAuthClientsApi | getClient | GET /orgs/{orgId}/api/v1/admin/clients/{clientId} | Get an OAuth client AdminOAuthClientsApi | listClientScopes | GET /orgs/{orgId}/api/v1/admin/clients/{clientId}/scopes | List the scopes granted to an OAuth client AdminOAuthClientsApi | listClients | GET /orgs/{orgId}/api/v1/admin/clients | List OAuth clients AdminOAuthClientsApi | patchClient | PATCH /orgs/{orgId}/api/v1/admin/clients/{clientId} | Update an OAuth client AdminOAuthClientsApi | rotateClientSecret | POST /orgs/{orgId}/api/v1/admin/clients/{clientId}/rotate-secret | Rotate an OAuth client secret AdminOAuthClientsApi | setClientScopes | PUT /orgs/{orgId}/api/v1/admin/clients/{clientId}/scopes | Replace the scopes granted to an OAuth client AdminOAuthClientsApi | updateClient | PUT /orgs/{orgId}/api/v1/admin/clients/{clientId} | Replace an OAuth client AdminOrganizationsApi | adminOrgInvitationsCreate | POST /orgs/{orgId}/api/v1/admin/organizations/{organizationId}/invitations | Invite a user to an organization AdminOrganizationsApi | adminOrgInvitationsList | GET /orgs/{orgId}/api/v1/admin/organizations/{organizationId}/invitations | List organization invitations AdminOrganizationsApi | adminOrgInvitationsResend | POST /orgs/{orgId}/api/v1/admin/organizations/{organizationId}/invitations/{invId}/resend | Resend an invitation AdminOrganizationsApi | adminOrgInvitationsRevoke | DELETE /orgs/{orgId}/api/v1/admin/organizations/{organizationId}/invitations/{invId} | Revoke an invitation AdminOrganizationsApi | adminOrgMembersAdd | POST /orgs/{orgId}/api/v1/admin/organizations/{organizationId}/members | Add a member to an organization AdminOrganizationsApi | adminOrgMembersList | GET /orgs/{orgId}/api/v1/admin/organizations/{organizationId}/members | List organization members AdminOrganizationsApi | adminOrgMembersRemove | DELETE /orgs/{orgId}/api/v1/admin/organizations/{organizationId}/members/{userId} | Remove a member from an organization AdminOrganizationsApi | adminOrgRolesCreate | POST /orgs/{orgId}/api/v1/admin/organizations/{organizationId}/roles | Create an organization role AdminOrganizationsApi | adminOrgRolesDelete | DELETE /orgs/{orgId}/api/v1/admin/organizations/{organizationId}/roles/{roleId} | Delete an organization role AdminOrganizationsApi | adminOrgRolesList | GET /orgs/{orgId}/api/v1/admin/organizations/{organizationId}/roles | List organization roles AdminOrganizationsApi | adminOrganizationsCreate | POST /orgs/{orgId}/api/v1/admin/organizations | Create an organization AdminOrganizationsApi | adminOrganizationsDelete | DELETE /orgs/{orgId}/api/v1/admin/organizations/{organizationId} | Delete an organization AdminOrganizationsApi | adminOrganizationsGet | GET /orgs/{orgId}/api/v1/admin/organizations/{organizationId} | Get an organization AdminOrganizationsApi | adminOrganizationsList | GET /orgs/{orgId}/api/v1/admin/organizations | List organizations AdminOrganizationsApi | patchAdminOrgMembersUpdate | PATCH /orgs/{orgId}/api/v1/admin/organizations/{organizationId}/members/{userId} | Update a member's role or status AdminOrganizationsApi | patchAdminOrgRolesUpdate | PATCH /orgs/{orgId}/api/v1/admin/organizations/{organizationId}/roles/{roleId} | Update an organization role AdminOrganizationsApi | patchAdminOrganizationsUpdate | PATCH /orgs/{orgId}/api/v1/admin/organizations/{organizationId} | Update an organization AdminOrganizationsApi | putAdminOrgMembersUpdate | PUT /orgs/{orgId}/api/v1/admin/organizations/{organizationId}/members/{userId} | Update a member's role or status AdminOrganizationsApi | putAdminOrgRolesUpdate | PUT /orgs/{orgId}/api/v1/admin/organizations/{organizationId}/roles/{roleId} | Update an organization role AdminOrganizationsApi | putAdminOrganizationsUpdate | PUT /orgs/{orgId}/api/v1/admin/organizations/{organizationId} | Update an organization AdminPermissionsApi | adminPermissionsCreate | POST /orgs/{orgId}/api/v1/admin/permissions | Create a custom permission for the tenant AdminPermissionsApi | adminPermissionsDelete | DELETE /orgs/{orgId}/api/v1/admin/permissions/{permissionId} | Delete a custom permission AdminPermissionsApi | adminPermissionsGet | GET /orgs/{orgId}/api/v1/admin/permissions/{permissionId} | Get a single permission AdminPermissionsApi | adminPermissionsList | GET /orgs/{orgId}/api/v1/admin/permissions | List all available permissions for the tenant AdminPermissionsApi | adminPermissionsUpdate | PATCH /orgs/{orgId}/api/v1/admin/permissions/{permissionId} | Update a permission AdminPermissionsApi | adminPermissionsUsage | GET /orgs/{orgId}/api/v1/admin/permissions/{permissionId}/usage | Get permission usage (roles assigned to this permission) AdminPermissionsApi | adminScopesCreate | POST /orgs/{orgId}/api/v1/admin/scopes | Create a custom OAuth scope AdminPermissionsApi | adminScopesDelete | DELETE /orgs/{orgId}/api/v1/admin/scopes/{scopeId} | Delete a custom OAuth scope AdminPermissionsApi | adminScopesList | GET /orgs/{orgId}/api/v1/admin/scopes | List OAuth scopes AdminRolesApi | adminRolesAddPermissions | POST /orgs/{orgId}/api/v1/admin/roles/{roleId}/permissions | Add permission(s) to a role AdminRolesApi | adminRolesAddUser | POST /orgs/{orgId}/api/v1/admin/roles/{roleId}/users | Assign a user to a role AdminRolesApi | adminRolesCreate | POST /orgs/{orgId}/api/v1/admin/roles | Create a new role AdminRolesApi | adminRolesDelete | DELETE /orgs/{orgId}/api/v1/admin/roles/{roleId} | Delete a role AdminRolesApi | adminRolesGet | GET /orgs/{orgId}/api/v1/admin/roles/{roleId} | Get a single role by ID or slug AdminRolesApi | adminRolesGetPermissions | GET /orgs/{orgId}/api/v1/admin/roles/{roleId}/permissions | Get role permissions AdminRolesApi | adminRolesGetUsers | GET /orgs/{orgId}/api/v1/admin/roles/{roleId}/users | Get users assigned to a role AdminRolesApi | adminRolesList | GET /orgs/{orgId}/api/v1/admin/roles | List all roles in the tenant AdminRolesApi | adminRolesRemovePermission | DELETE /orgs/{orgId}/api/v1/admin/roles/{roleId}/permissions/{permissionId} | Remove a permission from a role AdminRolesApi | adminRolesRemoveUser | DELETE /orgs/{orgId}/api/v1/admin/roles/{roleId}/users/{userId} | Remove a user from a role AdminRolesApi | adminRolesUpdatePermissions | PUT /orgs/{orgId}/api/v1/admin/roles/{roleId}/permissions | Update role permissions (replaces all) AdminRolesApi | patchAdminRolesUpdate | PATCH /orgs/{orgId}/api/v1/admin/roles/{roleId} | Update an existing role AdminRolesApi | putAdminRolesUpdate | PUT /orgs/{orgId}/api/v1/admin/roles/{roleId} | Update an existing role AdminSandboxApi | adminSandboxDestroy | POST /orgs/{orgId}/api/v1/admin/sandbox/{sandboxSlug}/destroy | Destroy a sandbox tenant AdminSandboxApi | adminSandboxList | GET /orgs/{orgId}/api/v1/admin/sandbox | List the caller's sandbox tenants AdminSandboxApi | adminSandboxSpawn | POST /orgs/{orgId}/api/v1/admin/sandbox/spawn | Spawn a sandbox tenant AdminSessionsApi | adminClientTokensRevokeAll | DELETE /orgs/{orgId}/api/v1/admin/clients/{clientId}/tokens | Revoke all tokens of a client AdminSessionsApi | adminClientTokensRevokePost | POST /orgs/{orgId}/api/v1/admin/clients/{clientId}/tokens/revoke | Revoke all tokens of a client (POST alias) AdminSessionsApi | adminSessionsCount | GET /orgs/{orgId}/api/v1/admin/sessions/count | Active session count AdminSessionsApi | adminSessionsList | GET /orgs/{orgId}/api/v1/admin/sessions | List active sessions AdminSessionsApi | adminSessionsRevoke | DELETE /orgs/{orgId}/api/v1/admin/sessions/{sessionId} | Revoke a session AdminSessionsApi | adminSessionsRevokeAll | POST /orgs/{orgId}/api/v1/admin/sessions/revoke-all | Revoke every session in the tenant AdminSessionsApi | adminSessionsStats | GET /orgs/{orgId}/api/v1/admin/sessions/stats | Session statistics AdminSessionsApi | adminTokensList | GET /orgs/{orgId}/api/v1/admin/tokens | List access tokens AdminSessionsApi | adminTokensRevoke | DELETE /orgs/{orgId}/api/v1/admin/tokens/{tokenId} | Revoke a token AdminSessionsApi | adminUserSessionsList | GET /orgs/{orgId}/api/v1/admin/users/{userId}/sessions | List a user's active sessions AdminSessionsApi | adminUserSessionsRevokeAll | DELETE /orgs/{orgId}/api/v1/admin/users/{userId}/sessions | Revoke all sessions of a user AdminSessionsApi | adminUserSessionsRevokePost | POST /orgs/{orgId}/api/v1/admin/users/{userId}/sessions/revoke | Revoke all sessions of a user (POST alias) AdminSessionsApi | adminUserTokensRevokeAll | DELETE /orgs/{orgId}/api/v1/admin/users/{userId}/tokens | Revoke all tokens of a user AdminSessionsApi | adminUserTokensRevokePost | POST /orgs/{orgId}/api/v1/admin/users/{userId}/tokens/revoke | Revoke all tokens of a user (POST alias) AdminSettingsApi | adminAnalyticsDashboard | GET /orgs/{orgId}/api/v1/admin/analytics/dashboard | Get dashboard analytics AdminSettingsApi | adminAnalyticsLogins | GET /orgs/{orgId}/api/v1/admin/analytics/logins | Get login analytics AdminSettingsApi | adminAnalyticsUsers | GET /orgs/{orgId}/api/v1/admin/analytics/users | Get user growth analytics AdminSettingsApi | adminOrganizationGet | GET /orgs/{orgId}/api/v1/admin/organization | Get organization (tenant) profile AdminSettingsApi | adminSettingsAll | GET /orgs/{orgId}/api/v1/admin/settings | Get all settings (combined) AdminSettingsApi | adminSettingsAuthGet | GET /orgs/{orgId}/api/v1/admin/settings/auth | Get authentication settings AdminSettingsApi | adminSettingsAuthenticationGet | GET /orgs/{orgId}/api/v1/admin/settings/authentication | Get authentication settings (alias for settings/auth) AdminSettingsApi | adminSettingsBrandingGet | GET /orgs/{orgId}/api/v1/admin/settings/branding | Get branding/login page settings AdminSettingsApi | adminSettingsEmailGet | GET /orgs/{orgId}/api/v1/admin/settings/email | Get email settings AdminSettingsApi | adminSettingsGeneralGet | GET /orgs/{orgId}/api/v1/admin/settings/general | Get general settings AdminSettingsApi | adminSettingsScimGet | GET /orgs/{orgId}/api/v1/admin/settings/scim | Get SCIM settings AdminSettingsApi | adminSettingsSecurityGet | GET /orgs/{orgId}/api/v1/admin/settings/security | Get security settings AdminSettingsApi | adminTenantGet | GET /orgs/{orgId}/api/v1/admin/tenant | Get organization (tenant) profile AdminSettingsApi | patchAdminOrganizationUpdate | PATCH /orgs/{orgId}/api/v1/admin/organization | Update organization (tenant) name and settings AdminSettingsApi | patchAdminSettingsAuthUpdate | PATCH /orgs/{orgId}/api/v1/admin/settings/auth | Update authentication settings AdminSettingsApi | patchAdminSettingsAuthenticationUpdate | PATCH /orgs/{orgId}/api/v1/admin/settings/authentication | Update authentication settings (alias for settings/auth) AdminSettingsApi | patchAdminSettingsBrandingUpdate | PATCH /orgs/{orgId}/api/v1/admin/settings/branding | Update branding/login page settings AdminSettingsApi | patchAdminSettingsEmailUpdate | PATCH /orgs/{orgId}/api/v1/admin/settings/email | Update email settings AdminSettingsApi | patchAdminSettingsGeneralUpdate | PATCH /orgs/{orgId}/api/v1/admin/settings/general | Update general settings AdminSettingsApi | patchAdminSettingsScimUpdate | PATCH /orgs/{orgId}/api/v1/admin/settings/scim | Update SCIM settings AdminSettingsApi | patchAdminSettingsSecurityUpdate | PATCH /orgs/{orgId}/api/v1/admin/settings/security | Update security settings AdminSettingsApi | patchAdminTenantUpdate | PATCH /orgs/{orgId}/api/v1/admin/tenant | Update organization (tenant) name and settings AdminSettingsApi | putAdminOrganizationUpdate | PUT /orgs/{orgId}/api/v1/admin/organization | Update organization (tenant) name and settings AdminSettingsApi | putAdminSettingsAuthUpdate | PUT /orgs/{orgId}/api/v1/admin/settings/auth | Update authentication settings AdminSettingsApi | putAdminSettingsAuthenticationUpdate | PUT /orgs/{orgId}/api/v1/admin/settings/authentication | Update authentication settings (alias for settings/auth) AdminSettingsApi | putAdminSettingsBrandingUpdate | PUT /orgs/{orgId}/api/v1/admin/settings/branding | Update branding/login page settings AdminSettingsApi | putAdminSettingsEmailUpdate | PUT /orgs/{orgId}/api/v1/admin/settings/email | Update email settings AdminSettingsApi | putAdminSettingsGeneralUpdate | PUT /orgs/{orgId}/api/v1/admin/settings/general | Update general settings AdminSettingsApi | putAdminSettingsScimUpdate | PUT /orgs/{orgId}/api/v1/admin/settings/scim | Update SCIM settings AdminSettingsApi | putAdminSettingsSecurityUpdate | PUT /orgs/{orgId}/api/v1/admin/settings/security | Update security settings AdminSettingsApi | putAdminTenantUpdate | PUT /orgs/{orgId}/api/v1/admin/tenant | Update organization (tenant) name and settings AdminUsersApi | addUserGroup | POST /orgs/{orgId}/api/v1/admin/users/{userId}/groups | Add a user to a group AdminUsersApi | addUserPermission | POST /orgs/{orgId}/api/v1/admin/users/{userId}/permissions | Assign a permission to a user AdminUsersApi | addUserRole | POST /orgs/{orgId}/api/v1/admin/users/{userId}/roles | Assign a role to a user AdminUsersApi | adminIdentitiesLegacySamlRelink | POST /orgs/{orgId}/api/v1/admin/identities/legacy-saml | Relink legacy SAML users to an IdP AdminUsersApi | adminIdentitiesLegacySamlReport | GET /orgs/{orgId}/api/v1/admin/identities/legacy-saml | Legacy SAML bindings report AdminUsersApi | adminIdentitiesLink | POST /orgs/{orgId}/api/v1/admin/users/{userId}/identities | Link a SAML or LDAP identity to a user AdminUsersApi | adminIdentitiesList | GET /orgs/{orgId}/api/v1/admin/users/{userId}/identities | List a user's federated identity links AdminUsersApi | adminIdentitiesUnlink | DELETE /orgs/{orgId}/api/v1/admin/users/{userId}/identities/{type} | Unlink a user's SAML, LDAP or social identity AdminUsersApi | blockUser | POST /orgs/{orgId}/api/v1/admin/users/{userId}/block | Block a user AdminUsersApi | createUser | POST /orgs/{orgId}/api/v1/admin/users | Create a user AdminUsersApi | deleteUser | DELETE /orgs/{orgId}/api/v1/admin/users/{userId} | Delete a user AdminUsersApi | getUser | GET /orgs/{orgId}/api/v1/admin/users/{userId} | Get a user AdminUsersApi | listUserGroups | GET /orgs/{orgId}/api/v1/admin/users/{userId}/groups | List a user's groups AdminUsersApi | listUserPermissions | GET /orgs/{orgId}/api/v1/admin/users/{userId}/permissions | List a user's direct permissions AdminUsersApi | listUserRoles | GET /orgs/{orgId}/api/v1/admin/users/{userId}/roles | List a user's roles AdminUsersApi | listUsers | GET /orgs/{orgId}/api/v1/admin/users | List users AdminUsersApi | markUserVerified | POST /orgs/{orgId}/api/v1/admin/users/{userId}/mark-verified | Mark a user's email as verified AdminUsersApi | patchUser | PATCH /orgs/{orgId}/api/v1/admin/users/{userId} | Update a user AdminUsersApi | removeUserGroup | DELETE /orgs/{orgId}/api/v1/admin/users/{userId}/groups/{groupId} | Remove a user from a group AdminUsersApi | removeUserPermission | DELETE /orgs/{orgId}/api/v1/admin/users/{userId}/permissions/{permissionId} | Remove a permission from a user AdminUsersApi | removeUserRole | DELETE /orgs/{orgId}/api/v1/admin/users/{userId}/roles/{roleId} | Remove a role from a user AdminUsersApi | resetUserMfa | POST /orgs/{orgId}/api/v1/admin/users/{userId}/mfa/reset | Reset MFA (removed) AdminUsersApi | sendUserVerificationEmail | POST /orgs/{orgId}/api/v1/admin/users/{userId}/verify-email | Send a verification email AdminUsersApi | setUserPassword | PUT /orgs/{orgId}/api/v1/admin/users/{userId}/password | Set a user's password AdminUsersApi | setUserPasswordPost | POST /orgs/{orgId}/api/v1/admin/users/{userId}/password | Set a user's password AdminUsersApi | triggerUserPasswordReset | POST /orgs/{orgId}/api/v1/admin/users/{userId}/password-reset | Send a password reset email AdminUsersApi | unblockUser | POST /orgs/{orgId}/api/v1/admin/users/{userId}/unblock | Unblock a user AdminUsersApi | updateUser | PUT /orgs/{orgId}/api/v1/admin/users/{userId} | Update a user AdminUsersApi | updateUserGroups | PUT /orgs/{orgId}/api/v1/admin/users/{userId}/groups | Replace a user's groups AdminUsersApi | updateUserRoles | PUT /orgs/{orgId}/api/v1/admin/users/{userId}/roles | Replace a user's roles AdminWebhooksApi | adminWebhooksCreate | POST /orgs/{orgId}/api/v1/admin/webhooks | Create a webhook AdminWebhooksApi | adminWebhooksDelete | DELETE /orgs/{orgId}/api/v1/admin/webhooks/{webhookId} | Delete a webhook AdminWebhooksApi | adminWebhooksDeliveriesList | GET /orgs/{orgId}/api/v1/admin/webhooks/{webhookId}/deliveries | List recent deliveries AdminWebhooksApi | adminWebhooksDeliveryReplay | POST /orgs/{orgId}/api/v1/admin/webhooks/{webhookId}/deliveries/{deliveryId}/replay | Replay a delivery AdminWebhooksApi | adminWebhooksDeliveryShow | GET /orgs/{orgId}/api/v1/admin/webhooks/{webhookId}/deliveries/{deliveryId} | Get a delivery AdminWebhooksApi | adminWebhooksEvents | GET /orgs/{orgId}/api/v1/admin/webhooks/events | List available webhook event types AdminWebhooksApi | adminWebhooksGet | GET /orgs/{orgId}/api/v1/admin/webhooks/{webhookId} | Get a webhook AdminWebhooksApi | adminWebhooksList | GET /orgs/{orgId}/api/v1/admin/webhooks | List webhooks AdminWebhooksApi | adminWebhooksRotateSecret | POST /orgs/{orgId}/api/v1/admin/webhooks/{webhookId}/rotate-secret | Rotate the signing secret AdminWebhooksApi | adminWebhooksTest | POST /orgs/{orgId}/api/v1/admin/webhooks/{webhookId}/test | Send a test delivery AdminWebhooksApi | adminWebhooksTunnelStart | POST /orgs/{orgId}/api/v1/admin/webhooks/tunnel/start | Start a webhook tunnel AdminWebhooksApi | adminWebhooksTunnelStop | POST /orgs/{orgId}/api/v1/admin/webhooks/tunnel/{webhookId}/stop | Stop a webhook tunnel AdminWebhooksApi | adminWebhooksTunnelStream | GET /orgs/{orgId}/api/v1/admin/webhooks/tunnel/{webhookId}/stream | Stream tunnel deliveries (SSE) AdminWebhooksApi | adminWebhooksWebhooksDisable | POST /orgs/{orgId}/api/v1/admin/webhooks/{webhookId}/disable | Disable a webhook AdminWebhooksApi | adminWebhooksWebhooksEnable | POST /orgs/{orgId}/api/v1/admin/webhooks/{webhookId}/enable | Enable a webhook AdminWebhooksApi | patchAdminWebhooksUpdate | PATCH /orgs/{orgId}/api/v1/admin/webhooks/{webhookId} | Partially update a webhook AdminWebhooksApi | putAdminWebhooksUpdate | PUT /orgs/{orgId}/api/v1/admin/webhooks/{webhookId} | Update a webhook AgentsApi | ask | POST /orgs/{orgId}/api/v1/agents/ask | Agent-friendly permission check (Natural Language style) AgentsApi | attest | POST /orgs/{orgId}/api/v1/agents/{agentId}/attest | Workload attestation: exchange a cloud OIDC token for an agent access token AgentsApi | authorizeMcp | POST /orgs/{orgId}/api/v1/agents/me/mcp/authorize | Per-MCP-tool authorization for the authenticated agent (dx B3). AgentsApi | createApproval | POST /orgs/{orgId}/api/v1/agents/me/approvals | AgentsApi | getAgentCard | GET /orgs/{orgId}/api/v1/agents/{agentId}/agent-card | Signed A2A agent card AgentsApi | getApprovalStatus | GET /orgs/{orgId}/api/v1/agents/me/approvals/{token}/status | AgentsApi | getCurrentAgent | GET /orgs/{orgId}/api/v1/agents/me | Get details about the currently authenticated agent AgentsApi | registerAgent | POST /orgs/{orgId}/api/v1/agents/register | Register (or re-register) an agent AgentsApi | verifyAgentCard | POST /orgs/{orgId}/api/v1/agents/agent-card/verify | Verify a signed A2A agent card AuthorizationApi | checkAbac | POST /orgs/{orgId}/api/v1/abac/check | Evaluate an ABAC policy decision for the caller AuthorizationApi | checkAbacBulk | POST /orgs/{orgId}/api/v1/abac/check-bulk | Evaluate up to 100 ABAC checks for the caller in one call AuthorizationApi | checkAllPermissions | POST /api/v1/authz/check-all | Check whether the subject holds all of the permissions AuthorizationApi | checkAnyPermission | POST /api/v1/authz/check-any | Check whether the subject holds any of the permissions AuthorizationApi | checkPermission | POST /api/v1/authz/check | Check one permission AuthorizationApi | checkPermissionsBulk | POST /api/v1/authz/check-bulk | Check up to 100 permissions in one call AuthorizationApi | checkRelation | POST /api/v1/authz/zanzibar/check | Zanzibar relationship check AuthorizationApi | checkRelationScoped | POST /orgs/{orgId}/api/v1/zanzibar/check | Zanzibar relationship check AuthorizationApi | evaluate | POST /api/v1/authz/v1/evaluation | AuthZEN 1.0 access evaluation AuthorizationApi | evaluateBatch | POST /api/v1/authz/v1/evaluations | AuthZEN 1.0 boxcarred access evaluations AuthorizationApi | expandRelation | POST /api/v1/authz/zanzibar/expand | Zanzibar-style userset expansion: every subject that satisfies `object#relation`, as a tree that mirrors the namespace rewrites. AuthorizationApi | expandRelationScoped | POST /orgs/{orgId}/api/v1/zanzibar/expand | Zanzibar Expand: the userset tree of every subject satisfying `object#relation`. Always reveals other subjects, so it requires the oracle privilege (`authz.check` permission or `authz:check` scope). AuthorizationApi | getMyAttributes | GET /orgs/{orgId}/api/v1/abac/my-attributes | The caller's ABAC subject attributes AuthorizationApi | getResourceAttributes | GET /orgs/{orgId}/api/v1/abac/resources/{resourceType}/{resourceId}/attributes | Attributes stored for a resource AuthorizationApi | listAttributeDefinitions | GET /orgs/{orgId}/api/v1/abac/attribute-definitions | Attribute definitions available to the organization AuthorizationApi | listPermissions | GET /api/v1/authz/permissions | List the caller's effective permissions AuthorizationApi | setResourceAttribute | PUT /orgs/{orgId}/api/v1/abac/resources/{resourceType}/{resourceId}/attributes/{attributeSlug} | Set a resource attribute AuthorizationApi | setUserAttribute | PUT /orgs/{orgId}/api/v1/abac/users/{userId}/attributes/{attributeSlug} | Set a user attribute IdentityApi | getMe | GET /orgs/{orgId}/api/v1/me | Who am I JitApi | approveRequest | POST /orgs/{orgId}/api/v1/jit/approve/{requestId} | HITL: Approve a pending JIT request (requires user auth). JitApi | completeTask | POST /orgs/{orgId}/api/v1/jit/task/{taskId}/complete | Complete a task and cleanup resources. JitApi | createTask | POST /orgs/{orgId}/api/v1/jit/task | Create a new ephemeral task/persona for an agent. JitApi | denyRequest | POST /orgs/{orgId}/api/v1/jit/deny/{requestId} | HITL: Deny a pending JIT request (requires user auth). JitApi | evaluateTask | POST /orgs/{orgId}/api/v1/jit/task/{taskId}/evaluate | CAEP: Trigger continuous access evaluation for a task. JitApi | getRequestStatus | GET /orgs/{orgId}/api/v1/jit/request/{requestId}/status | Get the status of a JIT permission request. JitApi | getRequestToken | POST /orgs/{orgId}/api/v1/jit/request/{requestId}/token | Exchange an approved JIT request for a downscoped token. JitApi | listPendingRequests | GET /orgs/{orgId}/api/v1/jit/pending | Get pending HITL requests for the tenant. JitApi | requestPermission | POST /orgs/{orgId}/api/v1/jit/request | Request a JIT permission using RFC 9396 authorization_details. McpApi | getProtectedResourceMetadata | GET /orgs/{orgId}/api/v1/.well-known/oauth-protected-resource/mcp/{serverId} | MCP server protected resource metadata (RFC 9728) McpApi | getProtectedResourceMetadataRoot | GET /orgs/{orgId}/api/v1/.well-known/oauth-protected-resource | Organization-level protected resource metadata (RFC 9728) McpApi | getServer | GET /orgs/{orgId}/api/v1/mcp/servers/{serverId} | REST API: Get a specific MCP server. McpApi | getServerChallenge | GET /orgs/{orgId}/api/v1/mcp/{serverId}/challenge | Simulated MCP server authorization challenge McpApi | listServers | GET /orgs/{orgId}/api/v1/mcp/servers | REST API: List MCP servers for a tenant. McpApi | postServerChallenge | POST /orgs/{orgId}/api/v1/mcp/{serverId}/challenge | Simulated MCP server authorization challenge (POST) MfaApi | createMfaChallenge | POST /orgs/{orgId}/api/v1/mfa/challenges | Start an MFA challenge MfaApi | deleteAuthenticator | DELETE /orgs/{orgId}/api/v1/me/authenticators/{id} | Remove an authenticator MfaApi | enrollAuthenticator | POST /orgs/{orgId}/api/v1/me/authenticators/{type}/enroll | Start enrolling an authenticator MfaApi | generateRecoveryCodes | POST /orgs/{orgId}/api/v1/me/recovery-codes | Generate recovery codes MfaApi | getMfaChallenge | GET /orgs/{orgId}/api/v1/mfa/challenges/{id} | Get challenge status MfaApi | getRecoveryCodeStatus | GET /orgs/{orgId}/api/v1/me/recovery-codes | Recovery-code status MfaApi | listMyAuthenticators | GET /orgs/{orgId}/api/v1/me/authenticators | List my authenticators MfaApi | listTrustedDevices | GET /orgs/{orgId}/api/v1/me/trusted-devices | List trusted devices MfaApi | revokeTrustedDevice | DELETE /orgs/{orgId}/api/v1/me/trusted-devices/{id} | Revoke a trusted device MfaApi | updateAuthenticator | PATCH /orgs/{orgId}/api/v1/me/authenticators/{id} | Rename an authenticator or make it the default MfaApi | verifyAuthenticator | POST /orgs/{orgId}/api/v1/me/authenticators/{id}/verify | Verify a pending authenticator MfaApi | verifyMfaChallenge | POST /orgs/{orgId}/api/v1/mfa/challenges/{id}/verify | Answer a challenge OAuthApi | authorize | GET /orgs/{orgId}/api/v1/oauth/authorize | OAuth 2.1 / OIDC authorization endpoint OAuthApi | backchannelAuthorize | POST /orgs/{orgId}/api/v1/oauth/bc-authorize | CIBA backchannel authentication request OAuthApi | deviceAuthorization | POST /orgs/{orgId}/api/v1/oauth/device_authorization | Device authorization request (RFC 8628) OAuthApi | getClientConfiguration | GET /orgs/{orgId}/api/v1/connect/register/{clientId} | Read a dynamically registered client (RFC 7592 / OIDC DCR §4) OAuthApi | getDeviceVerification | GET /orgs/{orgId}/api/v1/oauth/device | Device verification page (RFC 8628 §3.3) OAuthApi | getOrgSelection | GET /orgs/{orgId}/api/v1/oauth/org-select | Organization selector page OAuthApi | introspect | POST /orgs/{orgId}/api/v1/oauth/introspect | Token introspection (RFC 7662) OAuthApi | par | POST /orgs/{orgId}/api/v1/oauth/par | Pushed authorization request (RFC 9126) OAuthApi | passkeyLogin | GET /orgs/{orgId}/api/v1/oauth/passkey-login | Passkey login entry point OAuthApi | registerClient | POST /orgs/{orgId}/api/v1/connect/register | Dynamic client registration (RFC 7591 / OIDC DCR) OAuthApi | revoke | POST /orgs/{orgId}/api/v1/oauth/revoke | Token revocation (RFC 7009) OAuthApi | socialCallback | GET /orgs/{orgId}/api/v1/oauth/social/{provider}/callback | Social / enterprise identity-provider callback OAuthApi | socialCallbackPost | POST /orgs/{orgId}/api/v1/oauth/social/{provider}/callback | Social / enterprise identity-provider callback (form_post) OAuthApi | socialLogin | GET /orgs/{orgId}/api/v1/oauth/social/{provider} | Start social / enterprise identity-provider login OAuthApi | submitAuthorization | POST /orgs/{orgId}/api/v1/oauth/authorize | OAuth 2.1 / OIDC authorization endpoint (form submission) OAuthApi | submitDeviceVerification | POST /orgs/{orgId}/api/v1/oauth/device | Submit device verification OAuthApi | submitLogin | POST /orgs/{orgId}/api/v1/oauth/login/submit | Hosted login form submission OAuthApi | submitLoginJson | POST /orgs/{orgId}/api/v1/oauth/login/json | Programmatic (JSON) login for the authorization flow OAuthApi | submitOrgSelection | POST /orgs/{orgId}/api/v1/oauth/org-select | Submit organization selection OAuthApi | token | POST /orgs/{orgId}/api/v1/oauth/token | OAuth 2.1 token endpoint OIDCApi | checkSession | GET /orgs/{orgId}/api/v1/oauth/check_session | OP session-check iframe (OIDC Session Management 1.0) OIDCApi | logout | GET /orgs/{orgId}/api/v1/oauth/logout | RP-initiated logout (OIDC RP-Initiated Logout 1.0) OIDCApi | logoutPost | POST /orgs/{orgId}/api/v1/oauth/logout | RP-initiated logout (confirmation submission) OIDCApi | userinfo | GET /orgs/{orgId}/api/v1/oauth/userinfo | OpenID Connect UserInfo endpoint OIDCApi | userinfoPost | POST /orgs/{orgId}/api/v1/oauth/userinfo | OpenID Connect UserInfo endpoint (POST) SsfApi | createStreamConfig | POST /orgs/{orgId}/api/v1/ssf/stream | Create an SSF stream SsfApi | deleteStreamConfig | DELETE /orgs/{orgId}/api/v1/ssf/stream | Delete an SSF stream SsfApi | getStreamConfig | GET /orgs/{orgId}/api/v1/ssf/stream | Read SSF stream configuration(s) SsfApi | verifyStream | POST /orgs/{orgId}/api/v1/ssf/verify | Request a stream verification event TokenVaultApi | getConnectionToken | POST /orgs/{orgId}/api/v1/agents/me/connections/{connectionId}/token | Fetch a live third-party access token for a connection TokenVaultApi | listConnections | GET /orgs/{orgId}/api/v1/agents/me/connections | List the outbound connections this agent may use WellKnownApi | getAuthorizationServerMetadata | GET /orgs/{orgId}/api/v1/.well-known/oauth-authorization-server | OAuth 2.0 authorization server metadata (RFC 8414) WellKnownApi | getJwks | GET /orgs/{orgId}/api/v1/.well-known/jwks.json | JSON Web Key Set (RFC 7517) WellKnownApi | getOpenidConfiguration | GET /orgs/{orgId}/api/v1/.well-known/openid-configuration | OpenID Provider configuration (OIDC Discovery 1.0) WellKnownApi | getSsfConfiguration | GET /orgs/{orgId}/api/v1/.well-known/ssf-configuration | SSF transmitter configuration metadata

Documentation For Models