Authentication & Authorization — entry 001 of 4

Auth0

Verified Jul 2026

Auth0 (an Okta company) is an identity platform providing hosted login, social and enterprise SSO, and adaptive multi-factor authentication for web, mobile, and API-first applications. Both its Authentication API and Management API are secured exclusively through OAuth 2.0 / OIDC bearer tokens issued via a tenant's /oauth/token endpoint — there is no standalone API-key scheme. It bills per monthly active user, with a free tier for small projects and paid Essentials/Professional/Enterprise plans for scale.

authenticationoauthidentityssomfa
AuthenticationOAuthRequires an OAuth flow; expect app registration.
HTTPSSupportedTraffic is encrypted in transit.
CORSEnabledCallable directly from browser JavaScript.
PricingFreemiumA usable free tier exists, with paid plans for more volume.
FormatsJSONResponses can be requested as JSON.

GreatAPIs Score

Score74out of 100
Authentication8/25OAuth flow required
Pricing17/20Freemium tier available
Docs20/20Machine-readable spec file bundled
Formats9/15Single response format
Freshness20/20Verified within 6 months

Embed this badge

Scored 74 on greatapis.com
<a href="https://greatapis.com/api/auth0/"><img src="https://greatapis.com/badge/auth0.svg" alt="Scored 74 on greatapis.com"></a>

Auth quickstart

  1. Register an app / run the OAuth flow to obtain a bearer token.
  2. Send it as an Authorization headerAuthorization: Bearer <token>
Stored keyNo key stored

Your key is stored only in this browser (localStorage) and sent directly to the API — never to greatapis.

Endpoints

Servers
https://{tenantDomain}/api/v2
Auth
bearerAuthoAuth2ClientCredentials
actions24
GET/actions/actionsGet actions
Parameters
NameInRequiredType
triggerIdqueryno
actionNamequerynostring
deployedquerynoboolean
pagequerynointeger
per_pagequerynointeger
installedquerynoboolean
Responses
StatusDescriptionSchema
200The actions were retrieved.ListActionsPaginatedResponseContent
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope, expected: read:actions.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
POST/actions/actionsCreate an action
Request body

application/jsonCreateActionRequestContent

Responses
StatusDescriptionSchema
201Action successfully created.CreateActionResponseContent
400Invalid Request Body.
401Invalid token.
403Insufficient scope, expected: create:actions.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/actions/actions/{actionId}/versionsGet an action's versions
Parameters
NameInRequiredType
actionIdpathyesstring
pagequerynointeger
per_pagequerynointeger
Responses
StatusDescriptionSchema
200The action versions were retrieved.ListActionVersionsPaginatedResponseContent
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope, expected: read:actions.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/actions/actions/{actionId}/versions/{id}Get a specific version of an action
Parameters
NameInRequiredType
actionIdpathyesstring
idpathyesstring
Responses
StatusDescriptionSchema
200The action version was retrieved.GetActionVersionResponseContent
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope, expected: read:actions.
404The action version does not exist.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
POST/actions/actions/{actionId}/versions/{id}/deployRoll back to a previous action version
Parameters
NameInRequiredType
idpathyesstring
actionIdpathyesstring
Request body

application/jsonDeployActionVersionRequestContent

Responses
StatusDescriptionSchema
202Request to create action version was accepted.DeployActionVersionResponseContent
400Invalid Request Body.
401Invalid token.
403Insufficient scope, expected: create:actions.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/actions/actions/{id}Get an action
Parameters
NameInRequiredType
idpathyesstring
Responses
StatusDescriptionSchema
200The action was retrieved.GetActionResponseContent
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope, expected: read:actions.
404The action does not exist.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
PATCH/actions/actions/{id}Update an action
Parameters
NameInRequiredType
idpathyesstring
Request body

application/jsonUpdateActionRequestContent

Responses
StatusDescriptionSchema
200Action successfully updated.UpdateActionResponseContent
400Invalid Request Body.
401Invalid token.
403Insufficient scope, expected: update:actions.
404Action not found and cannot be updated.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
DELETE/actions/actions/{id}Delete an action
Parameters
NameInRequiredType
idpathyesstring
forcequerynoboolean
Responses
StatusDescriptionSchema
204Action successfully deleted.
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope, expected: delete:actions.
404The action version does not exist.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
POST/actions/actions/{id}/deployDeploy an action
Parameters
NameInRequiredType
idpathyesstring
Responses
StatusDescriptionSchema
202Request to create action version was accepted.DeployActionResponseContent
400Invalid Request Body.
401Invalid token.
403Insufficient scope, expected: create:actions.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
POST/actions/actions/{id}/testTest an Action
Parameters
NameInRequiredType
idpathyesstring
Request body

application/jsonTestActionRequestContent

Responses
StatusDescriptionSchema
200Test action version successfully created.TestActionResponseContent
400Invalid Request Body.
401Invalid token.
403Insufficient scope, expected: create:actions.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/actions/executions/{id}Get an execution
Parameters
NameInRequiredType
idpathyesstring
Responses
StatusDescriptionSchema
200The execution was retrieved.GetActionExecutionResponseContent
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope, expected: read:actions.
404The execution does not exist.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/actions/modulesList Actions Modules
Parameters
NameInRequiredType
pagequerynointeger
per_pagequerynointeger
Responses
StatusDescriptionSchema
200The action modules were retrieved.GetActionModulesResponseContent
400Invalid request query string. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope, expected: read:actions.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
POST/actions/modulesCreate a new Actions Module
Request body

application/jsonCreateActionModuleRequestContent

Responses
StatusDescriptionSchema
201The action module was created.CreateActionModuleResponseContent
400Invalid request body. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope, expected: create:actions.
409An action module with the same name already exists.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/actions/modules/{id}Get a specific Actions Module by ID
Parameters
NameInRequiredType
idpathyesstring
Responses
StatusDescriptionSchema
200The action module was retrieved.GetActionModuleResponseContent
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope, expected: read:actions.
404The action module does not exist.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
PATCH/actions/modules/{id}Update a specific Actions Module
Parameters
NameInRequiredType
idpathyesstring
Request body

application/jsonUpdateActionModuleRequestContent

Responses
StatusDescriptionSchema
200The action module was updated.UpdateActionModuleResponseContent
400Invalid request body. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope, expected: update:actions.
404The action module does not exist.
409An action module with the same name already exists.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
DELETE/actions/modules/{id}Delete a specific Actions Module by ID
Parameters
NameInRequiredType
idpathyesstring
Responses
StatusDescriptionSchema
204The Actions Module was deleted.
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope, expected: delete:actions.
404The Actions Module does not exist.
412The Actions Module cannot be deleted because it is in use by one or more actions.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/actions/modules/{id}/actionsList all actions using an Actions Module
Parameters
NameInRequiredType
idpathyesstring
pagequerynointeger
per_pagequerynointeger
Responses
StatusDescriptionSchema
200The actions were retrieved.GetActionModuleActionsResponseContent
400Invalid request query string. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope, expected: read:actions.
404No module exists with the specified ID.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
POST/actions/modules/{id}/rollbackRollback an Actions Module to a previous version
Parameters
NameInRequiredType
idpathyesstring
Request body

application/jsonRollbackActionModuleRequestContent

Responses
StatusDescriptionSchema
200The rollback was successful.RollbackActionModuleResponseContent
400Invalid request URI or body. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope, expected: update:actions.
404The module or version does not exist.
409The specified version is already the current draft version.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/actions/modules/{id}/versionsList all versions of an Actions Module
Parameters
NameInRequiredType
idpathyesstring
pagequerynointeger
per_pagequerynointeger
Responses
StatusDescriptionSchema
200The module versions were retrieved.GetActionModuleVersionsResponseContent
400Invalid request query string. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope, expected: read:actions.
404No module exists with the specified ID.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
POST/actions/modules/{id}/versionsCreate a new version of an Actions Module
Parameters
NameInRequiredType
idpathyesstring
Responses
StatusDescriptionSchema
200The action module version was created.CreateActionModuleVersionResponseContent
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope, expected: update:actions.
404The action module does not exist.
409No draft version is available to publish.
412Maximum number of module versions reached. Consolidate versions used in actions before creating new ones.
GET/actions/modules/{id}/versions/{versionId}Get a specific version of an Actions Module
Parameters
NameInRequiredType
idpathyesstring
versionIdpathyesstring
Responses
StatusDescriptionSchema
200The module version was retrieved.GetActionModuleVersionResponseContent
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope, expected: read:actions.
404The module or version does not exist.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/actions/triggersGet triggers
Responses
StatusDescriptionSchema
200The triggers were retrieved.ListActionTriggersResponseContent
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope, expected: read:actions.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/actions/triggers/{triggerId}/bindingsGet trigger bindings
Parameters
NameInRequiredType
triggerIdpathyes
pagequerynointeger
per_pagequerynointeger
Responses
StatusDescriptionSchema
200The bindings were retrieved.ListActionBindingsPaginatedResponseContent
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope, expected: read:actions.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
PATCH/actions/triggers/{triggerId}/bindingsUpdate trigger bindings
Parameters
NameInRequiredType
triggerIdpathyes
Request body

application/jsonUpdateActionBindingsRequestContent

Responses
StatusDescriptionSchema
200The bindings were updated.UpdateActionBindingsResponseContent
400Invalid Request Body.
401Invalid token.
403Insufficient scope, expected: update:actions.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
anomaly2
GET/anomaly/blocks/ips/{id}Check if an IP address is blocked
Parameters
NameInRequiredType
idpathyes
Responses
StatusDescriptionSchema
200IP address specified is currently blocked.
400Connection does not exist.
401Invalid token.
403Insufficient scope; expected any of: get:anomaly_block.
404IP address specified is not currently blocked.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
DELETE/anomaly/blocks/ips/{id}Remove the blocked IP address
Parameters
NameInRequiredType
idpathyes
Responses
StatusDescriptionSchema
204IP address specified successfully unblocked.
400Connection does not exist.
401Invalid token.
403Insufficient scope; expected any of: delete:anomaly_block.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
attack-protection12
GET/attack-protection/bot-detectionGet Bot Detection settings
Responses
StatusDescriptionSchema
200Bot detection configuration retrieved successfully.GetBotDetectionSettingsResponseContent
401Invalid token.
403Please upgrade your subscription to use bot detection
404Bot detection configuration not found.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
PATCH/attack-protection/bot-detectionUpdate Bot Detection settings
Request body

application/jsonUpdateBotDetectionSettingsRequestContent

Responses
StatusDescriptionSchema
200Bot detection configuration successfully updated.UpdateBotDetectionSettingsResponseContent
400Invalid request body. The message will vary depending on the cause.
401Invalid token.
403Please upgrade your subscription to use bot detection
404Bot detection configuration not found.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/attack-protection/breached-password-detectionGet Breached Password Detection settings
Responses
StatusDescriptionSchema
200Breached password detection settings successfully retrieved.GetBreachedPasswordDetectionSettingsResponseContent
401Invalid token.
403Insufficient scope; expected any of: read:attack_protection.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
PATCH/attack-protection/breached-password-detectionUpdate Breached Password Detection settings
Request body

application/jsonUpdateBreachedPasswordDetectionSettingsRequestContent

Responses
StatusDescriptionSchema
200Breached password detection settings successfully updated.UpdateBreachedPasswordDetectionSettingsResponseContent
400Invalid request body. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: update:attack_protection.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/attack-protection/brute-force-protectionGet Brute-force settings
Responses
StatusDescriptionSchema
200Brute force configuration successfully retrieved.GetBruteForceSettingsResponseContent
401Invalid token.
403Insufficient scope; expected any of: read:attack_protection.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
PATCH/attack-protection/brute-force-protectionUpdate Brute-force settings
Request body

application/jsonUpdateBruteForceSettingsRequestContent

Responses
StatusDescriptionSchema
200Brute force configuration successfully updated.UpdateBruteForceSettingsResponseContent
400Invalid request body. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: update:attack_protection.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/attack-protection/captchaGet the CAPTCHA configuration for a tenant
Responses
StatusDescriptionSchema
200Captcha configuration successfully retrieved.GetAttackProtectionCaptchaResponseContent
401Invalid token.
403Please upgrade your subscription to use bot detection
404Captcha configuration not found.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
PATCH/attack-protection/captchaPartial Update for CAPTCHA Configuration
Request body

application/jsonUpdateAttackProtectionCaptchaRequestContent

Responses
StatusDescriptionSchema
200Captcha configuration successfully retrieved.UpdateAttackProtectionCaptchaResponseContent
401Invalid token.
403Please upgrade your subscription to use bot detection
404Captcha configuration not found.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/attack-protection/phone-provider-protectionGet Phone Provider Protection settings
Responses
StatusDescriptionSchema
200Phone provider protection configuration successfully retrieved.GetPhoneProviderProtectionResponseContent
401Invalid token.
403Exponential backoff is not enabled for this tenant.
404Phone provider protection configuration not found.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
PATCH/attack-protection/phone-provider-protectionUpdate Phone Provider Protection settings
Request body

application/jsonPatchPhoneProviderProtectionRequestContent

Responses
StatusDescriptionSchema
200Phone provider protection configuration successfully updated.PatchPhoneProviderProtectionResponseContent
401Invalid token.
403Exponential backoff is not enabled for this tenant.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/attack-protection/suspicious-ip-throttlingGet Suspicious IP Throttling settings
Responses
StatusDescriptionSchema
200Suspicious IP throttling configuration successfully retrieved.GetSuspiciousIPThrottlingSettingsResponseContent
401Invalid token.
403Insufficient scope; expected any of: read:attack_protection.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
PATCH/attack-protection/suspicious-ip-throttlingUpdate Suspicious IP Throttling settings
Request body

application/jsonUpdateSuspiciousIPThrottlingSettingsRequestContent

Responses
StatusDescriptionSchema
200Suspicious IP throttling configuration successfully updated.UpdateSuspiciousIPThrottlingSettingsResponseContent
400Invalid request body. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: update:attack_protection.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
branding23
GET/brandingGet branding settings
Responses
StatusDescriptionSchema
200Branding settings successfully retrieved.GetBrandingResponseContent
401Invalid token.
403The specified client cannot perform the requested operation.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
PATCH/brandingUpdate branding settings
Request body

application/jsonUpdateBrandingRequestContent

Responses
StatusDescriptionSchema
200Branding settings successfully updated.UpdateBrandingResponseContent
400Invalid request body. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: update:branding.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/branding/phone/providersGet a list of phone providers
Parameters
NameInRequiredType
disabledquerynoboolean
Responses
StatusDescriptionSchema
200Phone providers have been successfully retrieved.ListBrandingPhoneProvidersResponseContent
400Invalid request query string. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: read:phone_provider.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
POST/branding/phone/providersConfigure the phone provider
Request body

application/jsonCreateBrandingPhoneProviderRequestContent

Responses
StatusDescriptionSchema
201Phone notification provider successfully created.CreateBrandingPhoneProviderResponseContent
400Invalid request body. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: create:phone_provider.
409Custom phone provider conflict.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/branding/phone/providers/{id}Get a phone provider
Parameters
NameInRequiredType
idpathyesstring
Responses
StatusDescriptionSchema
200Phone provider successfully retrieved.GetBrandingPhoneProviderResponseContent
400Invalid id for provider.
401Invalid token.
403Insufficient scope; expected any of: read:phone_provider.
404Phone provider has not been configured.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
PATCH/branding/phone/providers/{id}Update the phone provider
Parameters
NameInRequiredType
idpathyesstring
Request body

application/jsonUpdateBrandingPhoneProviderRequestContent

Responses
StatusDescriptionSchema
200Phone provider successfully updated.UpdateBrandingPhoneProviderResponseContent
400Invalid request body. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: update:phone_provider.
404Phone provider has not been configured.
409Custom phone provider conflict.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
DELETE/branding/phone/providers/{id}Deletes a Phone Provider
Parameters
NameInRequiredType
idpathyesstring
Responses
StatusDescriptionSchema
204Phone provider successfully deleted.
401Invalid token.
403Insufficient scope; expected any of: delete:phone_provider.
404Phone provider has not been configured.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
POST/branding/phone/providers/{id}/trySend a test phone notification for the configured provider
Parameters
NameInRequiredType
idpathyesstring
Request body

application/jsonCreatePhoneProviderSendTestRequestContent

Responses
StatusDescriptionSchema
202Phone notification sent.CreatePhoneProviderSendTestResponseContent
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope, expected: create:phone_provider.
404Phone provider has not been configured.
409Custom phone provider conflict.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/branding/phone/templatesGet a list of phone notification templates
Parameters
NameInRequiredType
disabledquerynoboolean
Responses
StatusDescriptionSchema
200The phone notification templates were retrieved.ListPhoneTemplatesResponseContent
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope, expected any of: read:phone_templates
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
POST/branding/phone/templatesCreate a phone notification template
Request body

application/jsonCreatePhoneTemplateRequestContent

Responses
StatusDescriptionSchema
201The phone notification template was created.CreatePhoneTemplateResponseContent
400Invalid request body. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope, expected any of: create:phone_templates
409Phone template already configured for tenant
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/branding/phone/templates/{id}Get a phone notification template
Parameters
NameInRequiredType
idpathyesstring
Responses
StatusDescriptionSchema
200The phone notification template were retrieved.GetPhoneTemplateResponseContent
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope, expected any of: read:phone_templates
404Phone template does not exist
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
PATCH/branding/phone/templates/{id}Update a phone notification template
Parameters
NameInRequiredType
idpathyesstring
Request body

application/jsonUpdatePhoneTemplateRequestContent

Responses
StatusDescriptionSchema
200The phone notification template was updated.UpdatePhoneTemplateResponseContent
400Invalid request body. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope, expected any of: update:phone_templates
404Phone template does not exist
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
DELETE/branding/phone/templates/{id}Delete a phone notification template
Parameters
NameInRequiredType
idpathyesstring
Responses
StatusDescriptionSchema
204The phone notification template was deleted.
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope, expected any of: delete:phone_templates
404Phone template does not exist
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
PATCH/branding/phone/templates/{id}/resetResets a phone notification template values
Parameters
NameInRequiredType
idpathyesstring
Request body

application/jsonResetPhoneTemplateRequestContent

Responses
StatusDescriptionSchema
200The phone notification template was reset.ResetPhoneTemplateResponseContent
400Invalid request body. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope, expected any of: create:phone_templates
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
POST/branding/phone/templates/{id}/trySend a test phone notification for the configured template
Parameters
NameInRequiredType
idpathyesstring
auth0-custom-domainheadernostring
Request body

application/jsonCreatePhoneTemplateTestNotificationRequestContent

Responses
StatusDescriptionSchema
202The phone testing notification for the template was sentCreatePhoneTemplateTestNotificationResponseContent
400Invalid request body. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope, expected any of: create:phone_templates
404Phone template does not exist
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/branding/templates/universal-loginGet template for New Universal Login Experience
Responses
StatusDescriptionSchema
200Template successfully retrieved.GetUniversalLoginTemplateResponseContent
401Invalid token.
402A paid subscription is required for this feature.
403Insufficient scope; expected: read:branding
404Template does not exist.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
PUT/branding/templates/universal-loginSet template for New Universal Login Experience
Request body

application/jsonUpdateUniversalLoginTemplateRequestContent

Responses
StatusDescriptionSchema
201Template successfully created.
204Template successfully updated.
400Payload content length greater than maximum allowed: 102400.
401Invalid token.
402A paid subscription is required for this feature.
403Insufficient scope; expected: update:branding.
409Template update conflict.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
DELETE/branding/templates/universal-loginDelete template for New Universal Login Experience
Responses
StatusDescriptionSchema
204Template successfully deleted.
401Invalid token.
402A paid subscription is required for this feature.
403Insufficient scope; expected: delete:branding.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
POST/branding/themesCreate branding theme
Request body

application/jsonCreateBrandingThemeRequestContent

Responses
StatusDescriptionSchema
200Branding settings successfully updated.CreateBrandingThemeResponseContent
400Invalid request body. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: update:branding.
409There was an error updating branding settings: The theme already exists
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/branding/themes/defaultGet default branding theme
Responses
StatusDescriptionSchema
200Branding theme successfully retrieved.GetBrandingDefaultThemeResponseContent
401Invalid token.
403The specified client cannot perform the requested operation.
404There was an error retrieving branding settings: invalid theme ID
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/branding/themes/{themeId}Get branding theme
Parameters
NameInRequiredType
themeIdpathyesstring
Responses
StatusDescriptionSchema
200Branding theme successfully retrieved.GetBrandingThemeResponseContent
401Invalid token.
403The specified client cannot perform the requested operation.
404There was an error retrieving branding settings: invalid theme ID
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
PATCH/branding/themes/{themeId}Update branding theme
Parameters
NameInRequiredType
themeIdpathyesstring
Request body

application/jsonUpdateBrandingThemeRequestContent

Responses
StatusDescriptionSchema
200Branding settings successfully updated.UpdateBrandingThemeResponseContent
400Invalid request body. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: update:branding.
404There was an error updating branding settings: invalid theme ID
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
DELETE/branding/themes/{themeId}Delete branding theme
Parameters
NameInRequiredType
themeIdpathyesstring
Responses
StatusDescriptionSchema
204Branding theme successfully deleted.
401Invalid token.
403The specified client cannot perform the requested operation.
404There was an error deleting branding settings: invalid theme ID
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
client-grants6
GET/client-grantsGet client grants
Parameters
NameInRequiredType
per_pagequerynointeger
pagequerynointeger
include_totalsquerynoboolean
fromquerynostring
takequerynointeger
audiencequerynostring
client_idquerynostring
allow_any_organizationqueryno
subject_typequeryno
default_forqueryno
Responses
StatusDescriptionSchema
200Client grants successfully retrieved.ListClientGrantResponseContent
401Invalid token.
403Insufficient scope; expected any of: read:client_grants.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
POST/client-grantsCreate client grant
Request body

application/jsonCreateClientGrantRequestContent

Responses
StatusDescriptionSchema
201Client grant successfully created.CreateClientGrantResponseContent
400Invalid request body. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: create:client_grants.
404Resource server not found
409A resource server with the same identifier already exists.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/client-grants/{id}Get client grant
Parameters
NameInRequiredType
idpathyesstring
Responses
StatusDescriptionSchema
200Client grant successfully retrieved.GetClientGrantResponseContent
401Invalid token.
403Insufficient scope; expected any of: read:client_grants.
404The grant does not exist.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
PATCH/client-grants/{id}Update client grant
Parameters
NameInRequiredType
idpathyesstring
Request body

application/jsonUpdateClientGrantRequestContent

Responses
StatusDescriptionSchema
200Client grant successfully updated.UpdateClientGrantResponseContent
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: update:client_grants.
404The client grant does not exist.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
DELETE/client-grants/{id}Delete client grant
Parameters
NameInRequiredType
idpathyesstring
Responses
StatusDescriptionSchema
204Client grant successfully deleted.
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: delete:client_grants.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/client-grants/{id}/organizationsGet the organizations associated to a client grant
Parameters
NameInRequiredType
idpathyesstring
pagequerynointeger
per_pagequerynointeger
include_totalsquerynoboolean
fromquerynostring
takequerynointeger
Responses
StatusDescriptionSchema
200Organizations successfully retrieved.ListClientGrantOrganizationsResponseContent
400Invalid request query string. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: read:organization_client_grants.
404The grant does not exist.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
clients14
GET/clientsGet clients
Parameters
NameInRequiredType
fieldsquerynostring
include_fieldsquerynoboolean
pagequerynointeger
per_pagequerynointeger
include_totalsquerynoboolean
fromquerynostring
takequerynointeger
is_globalquerynoboolean
is_first_partyquerynoboolean
app_typequerynostring
external_client_idquerynostring
qquerynostring
Responses
StatusDescriptionSchema
200Clients successfully retrieved.
400Invalid request query string. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: read:clients, read:client_keys, read:client_summary
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
POST/clientsCreate a client
Request body

application/jsonCreateClientRequestContent

Responses
StatusDescriptionSchema
201Client successfully created.CreateClientResponseContent
400Invalid request body. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: create:clients.
404The Client ID for Invitations could not be found.
409Another client exists with the same alias.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
POST/clients/cimd/previewPreview and validate Client ID Metadata Document
Request body

application/jsonPreviewCimdMetadataRequestContent

Responses
StatusDescriptionSchema
200Metadata successfully fetched and validated, or retrieval error returned with errors array.PreviewCimdMetadataResponseContent
400Invalid external_client_id. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: create:clients, update:clients.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
500An internal server error occurred.
POST/clients/cimd/registerRegister or update a CIMD client via metadata URI
Request body

application/jsonRegisterCimdClientRequestContent

Responses
StatusDescriptionSchema
200CIMD client successfully updated (idempotent).RegisterCimdClientResponseContent
201CIMD client successfully created.RegisterCimdClientResponseContent
400Invalid request body. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: create:clients, update:clients.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
500An internal server error occurred.
GET/clients/{client_id}/credentialsGet client credentials
Parameters
NameInRequiredType
client_idpathyesstring
Responses
StatusDescriptionSchema
200Credentials successfully retrieved.
401Invalid token.
403Insufficient scope; expected any of: read:client_credentials.
404Client not found.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
POST/clients/{client_id}/credentialsCreate a client credential
Parameters
NameInRequiredType
client_idpathyesstring
Request body

application/jsonPostClientCredentialRequestContent

Responses
StatusDescriptionSchema
201Credential successfully created.PostClientCredentialResponseContent
400Invalid request body. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: create:client_credentials.
404Client not found.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/clients/{client_id}/credentials/{credential_id}Get client credential details
Parameters
NameInRequiredType
client_idpathyesstring
credential_idpathyesstring
Responses
StatusDescriptionSchema
200Credential successfully retrieved.GetClientCredentialResponseContent
401Invalid token.
403Insufficient scope; expected any of: read:client_credentials.
404Client not found.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
PATCH/clients/{client_id}/credentials/{credential_id}Update a client credential
Parameters
NameInRequiredType
client_idpathyesstring
credential_idpathyesstring
Request body

application/jsonPatchClientCredentialRequestContent

Responses
StatusDescriptionSchema
201Credential successfully updated.PatchClientCredentialResponseContent
400Invalid request body. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: update:client_credentials.
404Client not found.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
DELETE/clients/{client_id}/credentials/{credential_id}Delete a client credential
Parameters
NameInRequiredType
client_idpathyesstring
credential_idpathyesstring
Responses
StatusDescriptionSchema
204Credential successfully deleted.
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: delete:client_credentials.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/clients/{id}Get client by ID
Parameters
NameInRequiredType
idpathyesstring
fieldsquerynostring
include_fieldsquerynoboolean
Responses
StatusDescriptionSchema
200Client successfully retrieved.GetClientResponseContent
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: read:clients, read:client_keys, read:client_credentials, read:client_summary.
404Client not found.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
PATCH/clients/{id}Update a client
Parameters
NameInRequiredType
idpathyesstring
Request body

application/jsonUpdateClientRequestContent

Responses
StatusDescriptionSchema
200Client successfully updated.UpdateClientResponseContent
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: update:clients, update:client_keys.
404Client not found.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
DELETE/clients/{id}Delete a client
Parameters
NameInRequiredType
idpathyesstring
Responses
StatusDescriptionSchema
204Client successfully deleted.
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: delete:clients.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/clients/{id}/connectionsGet enabled connections for a client
Parameters
NameInRequiredType
idpathyesstring
strategyquerynoarray
fromquerynostring
takequerynointeger
fieldsquerynostring
include_fieldsquerynoboolean
Responses
StatusDescriptionSchema
200SuccessListClientConnectionsResponseContent
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected: read:connections and any of: read:clients or read:client_summary.
404Client does not exist.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
POST/clients/{id}/rotate-secretRotate a client secret
Parameters
NameInRequiredType
idpathyesstring
Responses
StatusDescriptionSchema
200Secret successfully rotated.RotateClientSecretResponseContent
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: update:client_keys.
404Client not found.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
connection-profiles7
GET/connection-profilesGet Connection Profiles
Parameters
NameInRequiredType
fromquerynostring
takequerynointeger
Responses
StatusDescriptionSchema
200Connection Profiles successfully retrieved.ListConnectionProfilesPaginatedResponseContent
400Invalid request query string. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: read:connection_profiles.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
POST/connection-profilesCreate a connection profile
Request body

application/jsonCreateConnectionProfileRequestContent

Responses
StatusDescriptionSchema
201Connection profile successfully created.CreateConnectionProfileResponseContent
400Invalid request body. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: create:connection_profiles.
409Connection profile conflict.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/connection-profiles/templatesGet Connection Profile Templates
Responses
StatusDescriptionSchema
200Connection Profile Templates successfully retrieved.ListConnectionProfileTemplateResponseContent
401Invalid token.
403Insufficient scope; expected any of: read:connection_profiles.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/connection-profiles/templates/{id}Get Connection Profile Template
Parameters
NameInRequiredType
idpathyesstring
Responses
StatusDescriptionSchema
200Connection Profile Template successfully retrieved.GetConnectionProfileTemplateResponseContent
401Invalid token.
403Insufficient scope; expected any of: read:connection_profiles.
404Connection profile template not found.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/connection-profiles/{id}Get Connection Profile
Parameters
NameInRequiredType
idpathyesstring
Responses
StatusDescriptionSchema
200Record for existing connection profile.GetConnectionProfileResponseContent
401Invalid token.
403Insufficient scope; expected any of: read:connection-profiles.
404Connection profile not found.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
PATCH/connection-profiles/{id}Modify a Connection Profile
Parameters
NameInRequiredType
idpathyesstring
Request body

application/jsonUpdateConnectionProfileRequestContent

Responses
StatusDescriptionSchema
200Connection profile successfully updated.UpdateConnectionProfileResponseContent
400Invalid request body. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: update:connection_profiles.
404Connection profile not found.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
DELETE/connection-profiles/{id}Delete Connection Profile
Parameters
NameInRequiredType
idpathyesstring
Responses
StatusDescriptionSchema
204Connection profile successfully deleted.
401Invalid token.
403Insufficient scope; expected any of: delete:connection-profiles.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
connections28
GET/connectionsGet all connections
Parameters
NameInRequiredType
per_pagequerynointeger
pagequerynointeger
include_totalsquerynoboolean
fromquerynostring
takequerynointeger
strategyquerynoarray
namequerynostring
fieldsquerynostring
include_fieldsquerynoboolean
Responses
StatusDescriptionSchema
200The connections were retrieved.ListConnectionsResponseContent
400Invalid request query string. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope, expected any of: read:connections
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
POST/connectionsCreate a connection
Request body

application/jsonCreateConnectionRequestContent

Responses
StatusDescriptionSchema
201The connection was created.CreateConnectionResponseContent
400Invalid request body. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope, expected any of: create:connections
409A connection with the same name already exists
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/connections/{id}Get a connection
Parameters
NameInRequiredType
idpathyesstring
fieldsquerynostring
include_fieldsquerynoboolean
Responses
StatusDescriptionSchema
200The connection was retrieved.GetConnectionResponseContent
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope, expected any of: read:connections
404The connection does not exist.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
PATCH/connections/{id}Update a connection
Parameters
NameInRequiredType
idpathyesstring
Request body

application/jsonUpdateConnectionRequestContent

Responses
StatusDescriptionSchema
200The connection was updated.UpdateConnectionResponseContent
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope, expected any of: update:connections
404The connection does not exist
409The name/client_id tuple has already been used for another connection
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
DELETE/connections/{id}Delete a connection
Parameters
NameInRequiredType
idpathyesstring
Responses
StatusDescriptionSchema
202The connection is being deleted.
204The connection no longer exists.
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope, expected any of: delete:connections
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/connections/{id}/clientsGet enabled clients for a connection
Parameters
NameInRequiredType
idpathyesstring
takequerynointeger
fromquerynostring
Responses
StatusDescriptionSchema
200SuccessGetConnectionEnabledClientsResponseContent
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope, expected any of: read:connections
404The connection does not exist
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
PATCH/connections/{id}/clientsUpdate enabled clients for a connection
Parameters
NameInRequiredType
idpathyesstring
Request body

application/jsonUpdateEnabledClientConnectionsRequestContent

Responses
StatusDescriptionSchema
204Success
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope, expected any of: update:connections
404The connection does not exist
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/connections/{id}/directory-provisioningGet a directory provisioning configuration
Parameters
NameInRequiredType
idpathyesstring
Responses
StatusDescriptionSchema
200The connection's directory provisioning configuration. See <strong>Response Schemas</strong> for schema.GetDirectoryProvisioningResponseContent
400Path validation error
401Invalid token.
403The inbound directory provisioning feature is not enabled for this tenant
404The connection does not exist
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
POST/connections/{id}/directory-provisioningCreate a directory provisioning configuration
Parameters
NameInRequiredType
idpathyesstring
Request body

application/jsonCreateDirectoryProvisioningRequestContent

Responses
StatusDescriptionSchema
201The connection's directory provisioning configuration was created. See <strong>Response Schemas</strong> for schema.CreateDirectoryProvisioningResponseContent
400Path validation error
401Invalid token.
403The inbound directory provisioning feature is not enabled for this tenant
404The connection does not exist
409Directory provisioning is already enabled on the specified connection
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
PATCH/connections/{id}/directory-provisioningPatch a directory provisioning configuration
Parameters
NameInRequiredType
idpathyesstring
Request body

application/jsonUpdateDirectoryProvisioningRequestContent

Responses
StatusDescriptionSchema
200The connection's directory provisioning configuration was updated. See <strong>Response Schemas</strong> for schema.UpdateDirectoryProvisioningResponseContent
400Path validation error
401Invalid token.
403The inbound directory provisioning feature is not enabled for this tenant
404The connection does not exist
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
DELETE/connections/{id}/directory-provisioningDelete a directory provisioning configuration
Parameters
NameInRequiredType
idpathyesstring
Responses
StatusDescriptionSchema
204The connection's directory provisioning configuration has been deleted.
400Path validation error
401Invalid token.
403The inbound directory provisioning feature is not enabled for this tenant
404The connection does not exist
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/connections/{id}/directory-provisioning/default-mappingGet a connection's default directory provisioning attribute mapping
Parameters
NameInRequiredType
idpathyesstring
Responses
StatusDescriptionSchema
200The connection's directory provisioning default mapping. See <strong>Response Schemas</strong> for schema.GetDirectoryProvisioningDefaultMappingResponseContent
400Path validation error
401Invalid token.
403The inbound directory provisioning feature is not enabled for this tenant
404The connection does not exist
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
POST/connections/{id}/directory-provisioning/synchronizationsRequest an on-demand synchronization of the directory
Parameters
NameInRequiredType
idpathyesstring
Responses
StatusDescriptionSchema
201The directory synchronization was triggered. See <strong>Response Schemas</strong> for schema.CreateDirectorySynchronizationResponseContent
400Path validation error
401Invalid token.
403Insufficient scope; expected any of: create:directory_provisionings.
404The connection does not exist
409A synchronization has already been requested or is in progress for the connection
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/connections/{id}/directory-provisioning/synchronized-groupsGet synchronized groups for a directory provisioning configuration
Parameters
NameInRequiredType
idpathyesstring
fromquerynostring
takequerynointeger
Responses
StatusDescriptionSchema
200The connection's synchronized groups. See <strong>Response Schemas</strong> for schema.ListSynchronizedGroupsResponseContent
400Path validation error
401Invalid token.
403Synchronized groups selection is not enabled for this tenant
404The connection does not exist
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
PUT/connections/{id}/directory-provisioning/synchronized-groupsCreate or replace synchronized group selections for a directory provisioning configuration
Parameters
NameInRequiredType
idpathyesstring
Request body

application/jsonReplaceSynchronizedGroupsRequestContent

Responses
StatusDescriptionSchema
204No Content
400Path validation error
401Invalid token.
403Synchronized groups selection is not enabled for this tenant
404The connection does not exist
409Conflict
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/connections/{id}/keysGet connection keys
Parameters
NameInRequiredType
idpathyesstring
Responses
StatusDescriptionSchema
200Connection keys successfully retrieved.
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: read:connections_keys.
404Connection not found.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
POST/connections/{id}/keysCreate connection keys
Parameters
NameInRequiredType
idpathyesstring
Request body

application/jsonPostConnectionKeysRequestContent

Responses
StatusDescriptionSchema
201Connection keys successfully created.PostConnectionsKeysResponseContent
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: create:connections_keys.
404Connection not found.
409Keys have already been created for this connection.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
POST/connections/{id}/keys/rotateRotate connection keys
Parameters
NameInRequiredType
idpathyesstring
Request body

application/jsonRotateConnectionKeysRequestContent

Responses
StatusDescriptionSchema
201Connection keys successfully rotated.RotateConnectionsKeysResponseContent
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected all of: create:connections_keys, update:connections_keys.
404Connection not found.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/connections/{id}/scim-configurationGet a connection's SCIM configuration
Parameters
NameInRequiredType
idpathyesstring
Responses
StatusDescriptionSchema
200The connection's SCIM configuration was retrieved. See <strong>Response Schemas</strong> for schema.GetScimConfigurationResponseContent
400Path validation error
404The connection does not exist
POST/connections/{id}/scim-configurationCreate a SCIM configuration
Parameters
NameInRequiredType
idpathyesstring
Request body

application/jsonCreateScimConfigurationRequestContent

Responses
StatusDescriptionSchema
201The connection's SCIM configuration was created. See <strong>Response Schemas</strong> for schema.CreateScimConfigurationResponseContent
400Path validation error
404The connection does not exist
PATCH/connections/{id}/scim-configurationPatch a connection's SCIM configuration
Parameters
NameInRequiredType
idpathyesstring
Request body

application/jsonUpdateScimConfigurationRequestContent

Responses
StatusDescriptionSchema
200The connection's SCIM configuration was updated. See <strong>Response Schemas</strong> for schema.UpdateScimConfigurationResponseContent
400Invalid mapping provided
404The connection does not exist
DELETE/connections/{id}/scim-configurationDelete a connection's SCIM configuration
Parameters
NameInRequiredType
idpathyesstring
Responses
StatusDescriptionSchema
204The connection's SCIM configuration has been deleted.
400Path validation error
404The connection does not exist
GET/connections/{id}/scim-configuration/default-mappingGet a connection's default SCIM mapping
Parameters
NameInRequiredType
idpathyesstring
Responses
StatusDescriptionSchema
200The connection's default SCIM mapping was retrieved. See <strong>Response Schemas</strong> for schema.GetScimConfigurationDefaultMappingResponseContent
400Path validation error
404Not Found
GET/connections/{id}/scim-configuration/tokensGet a connection's SCIM tokens
Parameters
NameInRequiredType
idpathyesstring
Responses
StatusDescriptionSchema
200The connection's SCIM tokens were retrieved. See <strong>Response Schemas</strong> for schema.GetScimTokensResponseContent
400Path validation error
404The connection does not exist
POST/connections/{id}/scim-configuration/tokensCreate a SCIM Token
Parameters
NameInRequiredType
idpathyesstring
Request body

application/jsonCreateScimTokenRequestContent

Responses
StatusDescriptionSchema
201The connection's SCIM token was created. See <strong>Response Schemas</strong> for schema.CreateScimTokenResponseContent
400Path validation error
404The connection does not exist
409Maximum of 2 tokens already issued for this connection
DELETE/connections/{id}/scim-configuration/tokens/{tokenId}Delete a connection's SCIM token
Parameters
NameInRequiredType
idpathyesstring
tokenIdpathyesstring
Responses
StatusDescriptionSchema
204The SCIM token has been deleted.
400Path validation error
404The connection does not exist
GET/connections/{id}/statusCheck connection status
Parameters
NameInRequiredType
idpathyesstring
Responses
StatusDescriptionSchema
200Connection status successfully retrieved.
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: read:connections.
404Connection not found.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
DELETE/connections/{id}/usersDelete a connection user
Parameters
NameInRequiredType
idpathyesstring
emailqueryyesstring
Responses
StatusDescriptionSchema
204The user no longer exists.
400Connection must be a database connection
401Invalid token.
403Insufficient scope, expected any of: delete:users
404The connection does not exist
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
connections-directory-provisionings1
GET/connections-directory-provisioningsGet a list of directory provisioning configurations
Parameters
NameInRequiredType
fromquerynostring
takequerynointeger
Responses
StatusDescriptionSchema
200The tenant's directory provisioning configuration. See <strong>Response Schemas</strong> for schema.ListDirectoryProvisioningsResponseContent
400Invalid pagination cursor
401Invalid token.
403The inbound directory provisioning feature is not enabled for this tenant
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
connections-scim-configurations1
GET/connections-scim-configurationsGet a list of SCIM configurations
Parameters
NameInRequiredType
fromquerynostring
takequerynointeger
Responses
StatusDescriptionSchema
200The tenant's SCIM configurations. See <strong>Response Schema</strong> for schema.ListSCIMConfigurationsResponseContent
400Invalid pagination cursor.
401Invalid token.
403Insufficient scope; expected any of: read:scim_config.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
custom-domains9
GET/custom-domainsGet custom domains configurations
Parameters
NameInRequiredType
takequerynointeger
fromquerynostring
qquerynostring
fieldsquerynostring
include_fieldsquerynoboolean
sortquerynostring
Responses
StatusDescriptionSchema
200Custom domains successfully retrieved.ListCustomDomainsResponseContent
401Invalid token.
403Insufficient scope; expected any of: read:custom_domains.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
POST/custom-domainsConfigure a new custom domain
Request body

application/jsonCreateCustomDomainRequestContent

Responses
StatusDescriptionSchema
201Custom domain successfully created (verification is pending).CreateCustomDomainResponseContent
400Invalid request body. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: create:custom_domains.
409Custom domain already exists.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/custom-domains/defaultGet the default domain
Responses
StatusDescriptionSchema
200Default domain successfully retrieved.GetDefaultDomainResponseContent
401Invalid token.
403Insufficient scope; expected any of: read:custom_domains.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
PATCH/custom-domains/defaultUpdate the default custom domain for the tenant
Request body

application/jsonSetDefaultCustomDomainRequestContent

Responses
StatusDescriptionSchema
200Default custom domain set successfully.UpdateDefaultDomainResponseContent
400Invalid request body. The message will vary depending on the cause.
403Insufficient scope; expected update:custom_domains.
GET/custom-domains/{id}Get custom domain configuration
Parameters
NameInRequiredType
idpathyesstring
Responses
StatusDescriptionSchema
200Custom domain successfully retrieved.GetCustomDomainResponseContent
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: read:custom_domains.
404Custom domain not found.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
PATCH/custom-domains/{id}Update custom domain configuration
Parameters
NameInRequiredType
idpathyesstring
Request body

application/jsonUpdateCustomDomainRequestContent

Responses
StatusDescriptionSchema
200Custom domain updated.UpdateCustomDomainResponseContent
400Invalid request body. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected: update:custom_domains.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
DELETE/custom-domains/{id}Delete custom domain configuration
Parameters
NameInRequiredType
idpathyesstring
Responses
StatusDescriptionSchema
204Custom domain successfully deleted.
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: delete:custom_domains.
409Cannot delete the default custom domain. Please set another domain as default before deleting this one.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
POST/custom-domains/{id}/testTest a custom domain
Parameters
NameInRequiredType
idpathyesstring
Responses
StatusDescriptionSchema
200Custom domain test successfully completed.TestCustomDomainResponseContent
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: read:custom_domains.
404Custom domain not found.
409The custom domain is not ready.
POST/custom-domains/{id}/verifyVerify a custom domain
Parameters
NameInRequiredType
idpathyesstring
Responses
StatusDescriptionSchema
200Custom domain successfully verified.VerifyCustomDomainResponseContent
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: create:custom_domains.
404Custom domain not found.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
device-credentials3
GET/device-credentialsRetrieve device credentials
Parameters
NameInRequiredType
pagequerynointeger
per_pagequerynointeger
include_totalsquerynoboolean
fieldsquerynostring
include_fieldsquerynoboolean
user_idquerynostring
client_idquerynostring
typequeryno
Responses
StatusDescriptionSchema
200Device credentials successfully retrieved.ListDeviceCredentialsResponseContent
400Invalid request query string. The message will vary depending on the cause.
401Invalid token.
403User to be acted on does not match subject in bearer token.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
POST/device-credentialsCreate a device public key credential
Request body

application/jsonCreatePublicKeyDeviceCredentialRequestContent

Responses
StatusDescriptionSchema
201Device credentials successfully created.CreatePublicKeyDeviceCredentialResponseContent
400Invalid request body. The message will vary depending on the cause.
401Invalid token.
403Cannot create device credentials for that user.
409A public key already exists for the device.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
DELETE/device-credentials/{id}Delete a device credential
Parameters
NameInRequiredType
idpathyesstring
Responses
StatusDescriptionSchema
204Device credentials successfully deleted.
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: delete:device_credentials, update:current_user, delete:current_user_device_credentials.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
email-templates4
POST/email-templatesCreate an email template
Request body

application/jsonCreateEmailTemplateRequestContent

Responses
StatusDescriptionSchema
200Template successfully created.CreateEmailTemplateResponseContent
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected: create:email_templates.
409Template (templateName) already exists.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/email-templates/{templateName}Get an email template
Parameters
NameInRequiredType
templateNamepathyes
Responses
StatusDescriptionSchema
200Template successfully retrieved.GetEmailTemplateResponseContent
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected: read:email_templates.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
PUT/email-templates/{templateName}Update an email template
Parameters
NameInRequiredType
templateNamepathyes
Request body

application/jsonSetEmailTemplateRequestContent

Responses
StatusDescriptionSchema
200Template successfully updated.SetEmailTemplateResponseContent
400Invalid request body. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected: update:email_templates.
404Template not found.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
PATCH/email-templates/{templateName}Patch an email template
Parameters
NameInRequiredType
templateNamepathyes
Request body

application/jsonUpdateEmailTemplateRequestContent

Responses
StatusDescriptionSchema
200Template successfully updated.UpdateEmailTemplateResponseContent
400Invalid request body. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected: update:email_templates.
404Template not found and cannot be updated.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
emails4
GET/emails/providerGet email provider
Parameters
NameInRequiredType
fieldsquerynostring
include_fieldsquerynoboolean
Responses
StatusDescriptionSchema
200Email provider successfully retrieved.GetEmailProviderResponseContent
400Invalid request query string. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: read:email_provider.
404Email provider has not been configured.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
POST/emails/providerConfigure email provider
Request body

application/jsonCreateEmailProviderRequestContent

Responses
StatusDescriptionSchema
201Email provider successfully created.CreateEmailProviderResponseContent
400Invalid request body. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: create:email_provider.
409Email provider is already configured.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
PATCH/emails/providerUpdate email provider
Request body

application/jsonUpdateEmailProviderRequestContent

Responses
StatusDescriptionSchema
200Email provider successfully updated.UpdateEmailProviderResponseContent
400Invalid request body. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: update:email_provider.
404Email provider has not been configured.
409No deployed action was found.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
DELETE/emails/providerDelete email provider
Responses
StatusDescriptionSchema
204The email provider has been deleted.
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope, expected any of: delete:email_provider
404Email provider does not exist.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
event-streams10
GET/event-streamsGet event streams
Parameters
NameInRequiredType
fromquerynostring
takequerynointeger
Responses
StatusDescriptionSchema
200Event streams successfully retrieved.ListEventStreamsResponseContent
400Invalid query string paging options. The message will vary depending on the cause
401Invalid token.
403Insufficient scope; expected any of: read:event_streams.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
POST/event-streamsCreate an event stream
Request body

application/json

Responses
StatusDescriptionSchema
201Event Stream stream created successfully.CreateEventStreamResponseContent
400Invalid request body. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: create:event_streams.
409You have reached the maximum number of event streams for your account OR Event stream name already in use.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/event-streams/{id}Get an event stream by ID
Parameters
NameInRequiredType
idpathyesstring
Responses
StatusDescriptionSchema
200Event stream successfully retrieved.GetEventStreamResponseContent
401Invalid token.
403Insufficient scope; expected any of: read:event_streams.
404The event stream does not exist.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
PATCH/event-streams/{id}Update an event stream
Parameters
NameInRequiredType
idpathyesstring
Request body

application/jsonUpdateEventStreamRequestContent

Responses
StatusDescriptionSchema
200Event stream successfully updated.UpdateEventStreamResponseContent
400Invalid request body. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: update:event_streams.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
DELETE/event-streams/{id}Delete an event stream
Parameters
NameInRequiredType
idpathyesstring
Responses
StatusDescriptionSchema
204The event stream was deleted.
400Invalid request body. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: delete:event_streams.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/event-streams/{id}/deliveriesGet this event stream's delivery history
Parameters
NameInRequiredType
idpathyesstring
statusesquerynostring
event_typesquerynostring
date_fromquerynostring
date_toquerynostring
fromquerynostring
takequerynointeger
Responses
StatusDescriptionSchema
200Event stream deliveries successfully retrieved.
400Invalid query string paging options. The message will vary depending on the cause
401Invalid token.
403Insufficient scope; expected any of: read:event_streams, read:event_deliveries.
404The event stream does not exist.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/event-streams/{id}/deliveries/{event_id}Get a specific event's delivery history
Parameters
NameInRequiredType
idpathyesstring
event_idpathyesstring
Responses
StatusDescriptionSchema
200Delivery history for event successfully retrieved.GetEventStreamDeliveryHistoryResponseContent
401Invalid token.
403Insufficient scope; expected any of: read:event_deliveries.
404The event stream does not exist.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
POST/event-streams/{id}/redeliverRedeliver failed events
Parameters
NameInRequiredType
idpathyesstring
Request body

application/jsonCreateEventStreamRedeliveryRequestContent

Responses
StatusDescriptionSchema
202Redelivery request accepted.CreateEventStreamRedeliveryResponseContent
401Invalid token.
403Insufficient scope; expected any of: update:event_deliveries.
404The event stream does not exist.
409One or more events is not in a state that allows redelivery.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
POST/event-streams/{id}/redeliver/{event_id}Redeliver a single failed event by ID
Parameters
NameInRequiredType
idpathyesstring
event_idpathyesstring
Responses
StatusDescriptionSchema
202Redelivery request accepted.
401Invalid token.
403Insufficient scope; expected any of: update:event_deliveries.
404The event stream does not exist.
409The event is not in a state that allows redelivery.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
POST/event-streams/{id}/testSend a test event to an event stream
Parameters
NameInRequiredType
idpathyesstring
Request body

application/jsonCreateEventStreamTestEventRequestContent

Responses
StatusDescriptionSchema
202Test event successfully submitted.CreateEventStreamTestEventResponseContent
401Invalid token.
403Insufficient scope; expected any of: update:event_streams.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
events1
GET/eventsSubscribe to events via Server-Sent Events (SSE)
Parameters
NameInRequiredType
fromquerynostring
from_timestampquerynostring
event_typequeryno
Responses
StatusDescriptionSchema
200Event stream successfully established.EventStreamSubscribeEventsResponseContent
400Invalid cursor format.
401Invalid token.
403Maximum concurrent event stream connections reached. Please close existing connections.
404Not found
410Cursor points to data no longer available in the stream.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
experimentation23
GET/experimentation/experimentsList experiments for the tenant.
Parameters
NameInRequiredType
fromquerynostring
takequerynointeger
statusqueryno
authentication_flowquerynostring
feature_flag_idquerynostring
Responses
StatusDescriptionSchema
200Experiments successfully retrieved.ListExperimentsResponseContent
400Invalid request query string. The message will vary depending on the cause.
401Invalid token.
403Tenant not entitled to this feature.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
POST/experimentation/experimentsCreate an experiment for the Experiment Center.
Request body

application/jsonCreateExperimentRequestContent

Responses
StatusDescriptionSchema
201Experiment successfully created.CreateExperimentResponseContent
400Invalid request body.
401Invalid token.
403Insufficient scope; expected any of: create:experimentation.
404Feature flag not found.
409An experiment with this name already exists.
429Too many requests.
GET/experimentation/experiments/{id}Get an experiment by ID.
Parameters
NameInRequiredType
idpathyesstring
Responses
StatusDescriptionSchema
200Experiment successfully retrieved.GetExperimentResponseContent
401Invalid token.
403Tenant not entitled to this feature.
404Experiment not found.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
PATCH/experimentation/experiments/{id}Update an experiment.
Parameters
NameInRequiredType
idpathyesstring
Request body

application/jsonUpdateExperimentRequestContent

Responses
StatusDescriptionSchema
200Experiment successfully updated.UpdateExperimentResponseContent
400Allocations cannot be modified while the experiment is active.
401Invalid token.
403Tenant not entitled to this feature.
404Experiment not found.
409An experiment with this name already exists.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
DELETE/experimentation/experiments/{id}Delete an experiment.
Parameters
NameInRequiredType
idpathyesstring
Responses
StatusDescriptionSchema
204Experiment successfully deleted.
400Active experiments cannot be deleted. Pause or complete the experiment first.
403Insufficient scope; expected any of: delete:experimentation.
429Too many requests.
POST/experimentation/experiments/{id}/statusTransition an experiment to a new status.
Parameters
NameInRequiredType
idpathyesstring
Request body

application/jsonUpdateExperimentStatusRequestContent

Responses
StatusDescriptionSchema
200Experiment status successfully updated.UpdateExperimentStatusResponseContent
400Status transition is not allowed.
401Invalid token.
403Tenant not entitled to this feature.
404Experiment not found.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
POST/experimentation/experiments/{id}/validateValidate an experiment.
Parameters
NameInRequiredType
idpathyesstring
Responses
StatusDescriptionSchema
200Experiment validation result returned.ValidateExperimentResponseContent
401Invalid token.
403Tenant not entitled to this feature.
404Experiment not found.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/experimentation/feature-flagsList feature flags for the tenant.
Parameters
NameInRequiredType
fromquerynostring
takequerynointeger
typequeryno
statusqueryno
Responses
StatusDescriptionSchema
200Feature flags successfully retrieved.ListFeatureFlagsResponseContent
400Invalid request query string. The message will vary depending on the cause.
401Invalid token.
403Tenant not entitled to this feature.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
POST/experimentation/feature-flagsCreate a feature flag for the Experiment Center.
Request body

application/jsonCreateFeatureFlagRequestContent

Responses
StatusDescriptionSchema
201Feature flag successfully created.CreateFeatureFlagResponseContent
400Invalid request body.
401Invalid token.
403Insufficient scope; expected any of: create:experimentation.
409A feature flag with this name already exists.
429Too many requests.
GET/experimentation/feature-flags/{id}Get a feature flag by ID.
Parameters
NameInRequiredType
idpathyesstring
Responses
StatusDescriptionSchema
200Feature flag successfully retrieved.GetFeatureFlagResponseContent
401Invalid token.
403Tenant not entitled to this feature.
404Feature flag not found.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
PATCH/experimentation/feature-flags/{id}Update a feature flag.
Parameters
NameInRequiredType
idpathyesstring
Request body

application/jsonUpdateFeatureFlagRequestContent

Responses
StatusDescriptionSchema
200Feature flag successfully updated.UpdateFeatureFlagResponseContent
400Invalid request body.
401Invalid token.
403Tenant not entitled to this feature.
404Feature flag not found.
409A feature flag with this name already exists.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
DELETE/experimentation/feature-flags/{id}Delete a feature flag.
Parameters
NameInRequiredType
idpathyesstring
Responses
StatusDescriptionSchema
204Feature flag successfully deleted.
403Insufficient scope; expected any of: delete:experimentation.
409Feature flag is in use by one or more non-archived experiments and cannot be deleted.
429Too many requests.
POST/experimentation/feature-flags/{id}/statusTransition a feature flag to a new status.
Parameters
NameInRequiredType
idpathyesstring
Request body

application/jsonUpdateFeatureFlagStatusRequestContent

Responses
StatusDescriptionSchema
200Feature flag status successfully updated.UpdateFeatureFlagStatusResponseContent
400Invalid request body.
401Invalid token.
403Tenant not entitled to this feature.
404Feature flag not found.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/experimentation/feature-flags/{id}/variationsList all variations for a feature flag.
Parameters
NameInRequiredType
idpathyesstring
Responses
StatusDescriptionSchema
200Variations successfully retrieved.ListVariationsResponseContent
400Invalid request query string. The message will vary depending on the cause.
401Invalid token.
403Tenant not entitled to this feature.
404Feature flag not found.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
POST/experimentation/feature-flags/{id}/variationsCreate a variation for a feature flag.
Parameters
NameInRequiredType
idpathyesstring
Request body

application/jsonCreateVariationRequestContent

Responses
StatusDescriptionSchema
201Variation successfully created.CreateVariationResponseContent
400Invalid request body.
401Invalid token.
403Tenant not entitled to this feature.
404Feature flag not found.
409A variation with this name already exists on this feature flag.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/experimentation/feature-flags/{id}/variations/{vid}Get a variation by ID.
Parameters
NameInRequiredType
idpathyesstring
vidpathyesstring
Responses
StatusDescriptionSchema
200Variation successfully retrieved.GetVariationResponseContent
401Invalid token.
403Tenant not entitled to this feature.
404Feature flag not found.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
PATCH/experimentation/feature-flags/{id}/variations/{vid}Update a variation.
Parameters
NameInRequiredType
idpathyesstring
vidpathyesstring
Request body

application/jsonUpdateVariationRequestContent

Responses
StatusDescriptionSchema
200Variation successfully updated.UpdateVariationResponseContent
400Invalid request body.
401Invalid token.
403Tenant not entitled to this feature.
404Feature flag not found.
409A variation with this name already exists on this feature flag.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
DELETE/experimentation/feature-flags/{id}/variations/{vid}Delete a variation.
Parameters
NameInRequiredType
idpathyesstring
vidpathyesstring
Responses
StatusDescriptionSchema
204Variation successfully deleted.
400Feature flag must have at least one variation. Cannot delete the last variation.
403Insufficient scope; expected any of: delete:experimentation.
404Feature flag not found.
409Variation is in use by one or more non-archived allocations and cannot be deleted.
429Too many requests.
GET/experimentation/segmentsList segments for the tenant.
Parameters
NameInRequiredType
fromquerynostring
takequerynointeger
typequeryno
Responses
StatusDescriptionSchema
200Segments successfully retrieved.ListSegmentsResponseContent
400Invalid request query string. The message will vary depending on the cause.
401Invalid token.
403Tenant not entitled to this feature.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
POST/experimentation/segmentsCreate a segment for the Experiment Center.
Request body

application/jsonCreateSegmentRequestContent

Responses
StatusDescriptionSchema
201Segment successfully created.CreateSegmentResponseContent
400Invalid request body.
401Invalid token.
403Insufficient scope; expected any of: create:experimentation.
409A segment with this name already exists.
429Too many requests.
GET/experimentation/segments/{id}Get a segment by ID.
Parameters
NameInRequiredType
idpathyesstring
Responses
StatusDescriptionSchema
200Segment successfully retrieved.GetSegmentResponseContent
401Invalid token.
403Tenant not entitled to this feature.
404Segment not found.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
PATCH/experimentation/segments/{id}Update a segment.
Parameters
NameInRequiredType
idpathyesstring
Request body

application/jsonUpdateSegmentRequestContent

Responses
StatusDescriptionSchema
200Segment successfully updated.UpdateSegmentResponseContent
400Invalid request body.
401Invalid token.
403Insufficient scope; expected any of: update:experimentation.
404Segment not found.
409A segment with this name already exists.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
DELETE/experimentation/segments/{id}Delete a segment.
Parameters
NameInRequiredType
idpathyesstring
Responses
StatusDescriptionSchema
204Segment successfully deleted.
403Insufficient scope; expected any of: delete:experimentation.
409Segment is in use by one or more non-archived experiment allocations.
429Too many requests.
flows13
GET/flowsGet flows
Parameters
NameInRequiredType
pagequerynointeger
per_pagequerynointeger
include_totalsquerynoboolean
hydratequerynoarray
synchronousquerynoboolean
Responses
StatusDescriptionSchema
200Flows successfully retrieved.ListFlowsResponseContent
400Invalid request query string. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: read:flows.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
POST/flowsCreate a flow
Request body

application/jsonCreateFlowRequestContent

Responses
StatusDescriptionSchema
201Flow successfully created.CreateFlowResponseContent
400Invalid request query string. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: create:flows.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/flows/vault/connectionsGet Flows Vault connection list
Parameters
NameInRequiredType
pagequerynointeger
per_pagequerynointeger
include_totalsquerynoboolean
Responses
StatusDescriptionSchema
200Vault connections successfully retrieved.ListFlowsVaultConnectionsResponseContent
400Invalid request query string. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: read:flows_vault_connections.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
POST/flows/vault/connectionsCreate a Flows Vault connection
Request body

application/jsonCreateFlowsVaultConnectionRequestContent

Responses
StatusDescriptionSchema
201Connection successfully created.CreateFlowsVaultConnectionResponseContent
400Invalid request query string. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: create:flows_vault_connections.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/flows/vault/connections/{id}Get a Flows Vault connection
Parameters
NameInRequiredType
idpathyesstring
Responses
StatusDescriptionSchema
200Flow vault connection successfully retrieved.GetFlowsVaultConnectionResponseContent
400Invalid request query string. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: read:flows_vault_connections.
404The Flow vault connection does not exist.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
PATCH/flows/vault/connections/{id}Update a Flows Vault connection
Parameters
NameInRequiredType
idpathyesstring
Request body

application/jsonUpdateFlowsVaultConnectionRequestContent

Responses
StatusDescriptionSchema
200Flow vault connection successfully updated.UpdateFlowsVaultConnectionResponseContent
400Invalid request query string. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: update:flows_vault_connections.
404The Flow vault connection does not exist.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
DELETE/flows/vault/connections/{id}Delete a Flows Vault connection
Parameters
NameInRequiredType
idpathyesstring
Responses
StatusDescriptionSchema
204Connection successfully deleted.
400Invalid request body. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: delete:flows_vault_connections.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/flows/{flow_id}/executionsGet flow executions
Parameters
NameInRequiredType
flow_idpathyesstring
pagequerynointeger
per_pagequerynointeger
include_totalsquerynoboolean
fromquerynostring
takequerynointeger
Responses
StatusDescriptionSchema
200Flow executions successfully retrieved.GetFlowsExecutionsResponseContent
400Invalid request query string. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: read:flows_executions.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/flows/{flow_id}/executions/{execution_id}Get a flow execution
Parameters
NameInRequiredType
flow_idpathyesstring
execution_idpathyesstring
hydratequerynoarray
Responses
StatusDescriptionSchema
200Flow execution successfully retrieved.GetFlowExecutionResponseContent
400Invalid request query string. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: read:flows_executions.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
DELETE/flows/{flow_id}/executions/{execution_id}Delete a flow execution
Parameters
NameInRequiredType
flow_idpathyesstring
execution_idpathyesstring
Responses
StatusDescriptionSchema
204Flow execution successfully deleted.
400Invalid request body. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: delete:flows_executions.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/flows/{id}Get a flow
Parameters
NameInRequiredType
idpathyesstring
hydratequerynoarray
Responses
StatusDescriptionSchema
200Flow successfully retrieved.GetFlowResponseContent
400Invalid request query string. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: read:flows.
404The flow does not exist.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
PATCH/flows/{id}Update a flow
Parameters
NameInRequiredType
idpathyesstring
Request body

application/jsonUpdateFlowRequestContent

Responses
StatusDescriptionSchema
200Flow successfully updated.UpdateFlowResponseContent
401Invalid token.
403Insufficient scope; expected any of: update:flows.
404The flow does not exist.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
DELETE/flows/{id}Delete a flow
Parameters
NameInRequiredType
idpathyesstring
Responses
StatusDescriptionSchema
204Flow successfully deleted.
400Invalid request body. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: delete:flows.
404The flow does not exist.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
forms5
GET/formsGet forms
Parameters
NameInRequiredType
pagequerynointeger
per_pagequerynointeger
include_totalsquerynoboolean
hydratequerynoarray
Responses
StatusDescriptionSchema
200Forms successfully retrieved.ListFormsResponseContent
400Invalid request query string. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: read:forms.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
POST/formsCreate a form
Request body

application/jsonCreateFormRequestContent

Responses
StatusDescriptionSchema
201Form successfully created.CreateFormResponseContent
400Invalid request query string. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: create:forms.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/forms/{id}Get a form
Parameters
NameInRequiredType
idpathyesstring
hydratequerynoarray
Responses
StatusDescriptionSchema
200Form successfully retrieved.GetFormResponseContent
400Invalid request query string. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: read:forms.
404The form does not exist.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
PATCH/forms/{id}Update a form
Parameters
NameInRequiredType
idpathyesstring
Request body

application/jsonUpdateFormRequestContent

Responses
StatusDescriptionSchema
200Form successfully updated.UpdateFormResponseContent
401Invalid token.
403Insufficient scope; expected any of: update:forms.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
DELETE/forms/{id}Delete a form
Parameters
NameInRequiredType
idpathyesstring
Responses
StatusDescriptionSchema
204Form successfully deleted.
400Invalid request body. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: delete:forms.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
grants3
GET/grantsGet grants
Parameters
NameInRequiredType
per_pagequerynointeger
pagequerynointeger
include_totalsquerynoboolean
user_idquerynostring
client_idquerynostring
audiencequerynostring
Responses
StatusDescriptionSchema
200Grants successfully retrieved.ListUserGrantsResponseContent
401Invalid token.
403Insufficient scope; expected any of: read:grants.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
DELETE/grantsDelete a grant by user_id
Parameters
NameInRequiredType
user_idqueryyesstring
Responses
StatusDescriptionSchema
204User grant successfully deleted.
401Invalid token.
403Insufficient scope; expected any of: delete:grants.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
DELETE/grants/{id}Delete a grant by id
Parameters
NameInRequiredType
idpathyesstring
Responses
StatusDescriptionSchema
204User grant successfully deleted.
401Invalid token.
403Insufficient scope; expected any of: delete:grants.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
groups7
GET/groupsGet all Groups
Parameters
NameInRequiredType
connection_idquerynostring
namequerynostring
external_idquerynostring
searchquerynostring
fieldsquerynostring
include_fieldsquerynoboolean
pagequerynointeger
per_pagequerynointeger
include_totalsquerynoboolean
fromquerynostring
takequerynointeger
Responses
StatusDescriptionSchema
200Groups successfully retrieved.ListGroupsResponseContent
400Invalid request query string. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: read:groups.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/groups/{id}Get a Group
Parameters
NameInRequiredType
idpathyesstring
Responses
StatusDescriptionSchema
200Group successfully retrieved.GetGroupResponseContent
400Invalid request query string. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: read:groups.
404Group not found.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
DELETE/groups/{id}Delete a Group
Parameters
NameInRequiredType
idpathyesstring
Responses
StatusDescriptionSchema
204Group successfully deleted.
401Invalid token.
403Insufficient scope; expected any of: delete:groups.
404Group not found.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/groups/{id}/membersGet Group Members
Parameters
NameInRequiredType
idpathyesstring
fieldsquerynostring
include_fieldsquerynoboolean
fromquerynostring
takequerynointeger
Responses
StatusDescriptionSchema
200Group members successfully retrieved.GetGroupMembersResponseContent
400Invalid request query string. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: read:group_members.
404Group not found.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/groups/{id}/rolesGet a group's roles
Parameters
NameInRequiredType
idpathyesstring
fromquerynostring
takequerynointeger
Responses
StatusDescriptionSchema
200Group's roles successfully retrieved.ListGroupRolesResponseContent
400Invalid request query string. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: read:group_roles.
404Group not found.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
POST/groups/{id}/rolesAssign roles to a group
Parameters
NameInRequiredType
idpathyesstring
Request body

application/jsonAssignGroupRolesRequestContent

Responses
StatusDescriptionSchema
204Roles successfully assigned to group.
400Invalid request body. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: create:group_roles.
404Group not found.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
DELETE/groups/{id}/rolesRemove roles from a group
Parameters
NameInRequiredType
idpathyesstring
Request body

application/jsonDeleteGroupRolesRequestContent

Responses
StatusDescriptionSchema
204Roles successfully removed from group.
400Invalid request body. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: delete:group_roles.
404Group not found.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
guardian36
POST/guardian/enrollments/ticketCreate a multi-factor authentication enrollment ticket
Parameters
NameInRequiredType
auth0-custom-domainheadernostring
Request body

application/jsonCreateGuardianEnrollmentTicketRequestContent

Responses
StatusDescriptionSchema
200Enrollment ticket successfully created.CreateGuardianEnrollmentTicketResponseContent
400Invalid input based on schemas.
401Token has expired or signature is invalid.
403Insufficient scope.
404User not found.
GET/guardian/enrollments/{id}Get a multi-factor authentication enrollment
Parameters
NameInRequiredType
idpathyesstring
Responses
StatusDescriptionSchema
200Enrollment successfully retrieved.GetGuardianEnrollmentResponseContent
400Invalid input based on schemas.
401Token has expired or signature is invalid.
403Insufficient scope.
DELETE/guardian/enrollments/{id}Delete a multi-factor authentication enrollment
Parameters
NameInRequiredType
idpathyesstring
Responses
StatusDescriptionSchema
204Enrollment successfully deleted.
400Invalid input based on schemas.
401Token has expired or signature is invalid.
403Insufficient scope (expected delete:enrollment).
GET/guardian/factorsGet Factors and multi-factor authentication details
Responses
StatusDescriptionSchema
200Factors successfully retrieved.
400Invalid input based on schemas.
401Token has expired or signature is invalid.
403Insufficient scope.
GET/guardian/factors/duo/settingsGet DUO Configuration
Responses
StatusDescriptionSchema
200DUO settings successfully retrieved.GetGuardianFactorDuoSettingsResponseContent
400Invalid input based on schemas.
401Token has expired or signature is invalid.
403Insufficient scope.
PUT/guardian/factors/duo/settingsSet the DUO Configuration
Request body

application/jsonSetGuardianFactorDuoSettingsRequestContent

Responses
StatusDescriptionSchema
200DUO settings successfully updated.SetGuardianFactorDuoSettingsResponseContent
400Invalid input based on schemas.
401Token has expired or signature is invalid.
403Insufficient scope.
PATCH/guardian/factors/duo/settingsUpdate the DUO Configuration
Request body

application/jsonUpdateGuardianFactorDuoSettingsRequestContent

Responses
StatusDescriptionSchema
200DUO settings successfully updated.UpdateGuardianFactorDuoSettingsResponseContent
400Invalid input based on schemas.
401Token has expired or signature is invalid.
403Insufficient scope.
GET/guardian/factors/phone/message-typesGet Enabled Phone Factors
Responses
StatusDescriptionSchema
200Returns the enabled phone factorsGetGuardianFactorPhoneMessageTypesResponseContent
400Invalid input based on schemas
401Token has expired or signature is invalid
403Insufficient scope
PUT/guardian/factors/phone/message-typesUpdate the Enabled Phone Factors
Request body

application/jsonSetGuardianFactorPhoneMessageTypesRequestContent

Responses
StatusDescriptionSchema
200Returns selected SMS provider configurationSetGuardianFactorPhoneMessageTypesResponseContent
400Invalid input based on schemas
401Token has expired or signature is invalid
403Insufficient scope
404The phone factor does not exist.
GET/guardian/factors/phone/providers/twilioGet Twilio configuration
Responses
StatusDescriptionSchema
200Twilio Phone configuration successfully retrieved.GetGuardianFactorsProviderPhoneTwilioResponseContent
400Invalid input based on schemas.
401Token has expired or signature is invalid.
403Insufficient scope.
PUT/guardian/factors/phone/providers/twilioUpdate Twilio configuration
Request body

application/jsonSetGuardianFactorsProviderPhoneTwilioRequestContent

Responses
StatusDescriptionSchema
200Twilio Phone configuration successfully updated.SetGuardianFactorsProviderPhoneTwilioResponseContent
400Invalid input based on schemas.
401Token has expired or signature is invalid.
403Insufficient scope.
GET/guardian/factors/phone/selected-providerGet phone provider configuration
Responses
StatusDescriptionSchema
200Returns selected Phone provider configurationGetGuardianFactorsProviderPhoneResponseContent
400Invalid input based on schemas
401Token has expired or signature is invalid
403Insufficient scope
PUT/guardian/factors/phone/selected-providerUpdate phone provider configuration
Request body

application/jsonSetGuardianFactorsProviderPhoneRequestContent

Responses
StatusDescriptionSchema
200Returns selected Phone provider configurationSetGuardianFactorsProviderPhoneResponseContent
400Invalid input based on schemas
401Token has expired or signature is invalid
403Insufficient scope
GET/guardian/factors/phone/templatesGet Enrollment and Verification Phone Templates
Responses
StatusDescriptionSchema
200Phone enrollment and verification templates successfully retrieved.GetGuardianFactorPhoneTemplatesResponseContent
400Invalid input based on schemas.
401Token has expired or signature is invalid.
403Insufficient scope.
PUT/guardian/factors/phone/templatesUpdate Enrollment and Verification Phone Templates
Request body

application/jsonSetGuardianFactorPhoneTemplatesRequestContent

Responses
StatusDescriptionSchema
200Phone enrollment and verification templates successfully updated.SetGuardianFactorPhoneTemplatesResponseContent
400Invalid input based on schemas.
401Token has expired or signature is invalid.
403Insufficient scope.
GET/guardian/factors/push-notification/providers/apnsGet APNS push notification configuration
Responses
StatusDescriptionSchema
200APNS configuration successfully retrieved.GetGuardianFactorsProviderApnsResponseContent
400Invalid input based on schemas.
401Token has expired or signature is invalid.
403Insufficient scope.
PUT/guardian/factors/push-notification/providers/apnsUpdate APNS configuration
Request body

application/jsonSetGuardianFactorsProviderPushNotificationApnsRequestContent

Responses
StatusDescriptionSchema
200APNS configuration successfully updated.SetGuardianFactorsProviderPushNotificationApnsResponseContent
400Invalid input based on schemas.
401Token has expired or signature is invalid.
403Insufficient scope.
PATCH/guardian/factors/push-notification/providers/apnsUpdate APNs provider configuration
Request body

application/jsonUpdateGuardianFactorsProviderPushNotificationApnsRequestContent

Responses
StatusDescriptionSchema
200APNS configuration successfully updated.UpdateGuardianFactorsProviderPushNotificationApnsResponseContent
400Invalid input based on schemas.
401Token has expired or signature is invalid.
403Insufficient scope.
PUT/guardian/factors/push-notification/providers/fcmOverwrite FCM configuration
Request body

application/jsonSetGuardianFactorsProviderPushNotificationFcmRequestContent

Responses
StatusDescriptionSchema
200FCM configuration updatedSetGuardianFactorsProviderPushNotificationFcmResponseContent
400Invalid input based on schemas
401Token has expired or signature is invalid
403Insufficient scope
PATCH/guardian/factors/push-notification/providers/fcmUpdates FCM configuration
Request body

application/jsonUpdateGuardianFactorsProviderPushNotificationFcmRequestContent

Responses
StatusDescriptionSchema
200FCM configuration updatedUpdateGuardianFactorsProviderPushNotificationFcmResponseContent
400Invalid input based on schemas
401Token has expired or signature is invalid
403Insufficient scope
PUT/guardian/factors/push-notification/providers/fcmv1Overwrite FCMV1 configuration
Request body

application/jsonSetGuardianFactorsProviderPushNotificationFcmv1RequestContent

Responses
StatusDescriptionSchema
200FCMV1 configuration updatedSetGuardianFactorsProviderPushNotificationFcmv1ResponseContent
400Invalid input based on schemas
401Token has expired or signature is invalid
403Insufficient scope
PATCH/guardian/factors/push-notification/providers/fcmv1Updates FCMV1 configuration
Request body

application/jsonUpdateGuardianFactorsProviderPushNotificationFcmv1RequestContent

Responses
StatusDescriptionSchema
200FCMV1 configuration updatedUpdateGuardianFactorsProviderPushNotificationFcmv1ResponseContent
400Invalid input based on schemas
401Token has expired or signature is invalid
403Insufficient scope
GET/guardian/factors/push-notification/providers/snsGet AWS SNS configuration
Responses
StatusDescriptionSchema
200AWS SNS configuration successfully retrieved.GetGuardianFactorsProviderSnsResponseContent
400Invalid input based on schemas.
401Token has expired or signature is invalid.
403Insufficient scope.
PUT/guardian/factors/push-notification/providers/snsConfigure AWS SNS configuration
Request body

application/jsonSetGuardianFactorsProviderPushNotificationSnsRequestContent

Responses
StatusDescriptionSchema
200AWS SNS configuration successfully updated.SetGuardianFactorsProviderPushNotificationSnsResponseContent
400Invalid input based on schemas.
401Token has expired or signature is invalid.
403Insufficient scope.
PATCH/guardian/factors/push-notification/providers/snsUpdate AWS SNS configuration
Request body

application/jsonUpdateGuardianFactorsProviderPushNotificationSnsRequestContent

Responses
StatusDescriptionSchema
200AWS SNS configuration successfully updated.UpdateGuardianFactorsProviderPushNotificationSnsResponseContent
400Invalid input based on schemas.
401Token has expired or signature is invalid.
403Insufficient scope.
GET/guardian/factors/push-notification/selected-providerGet push notification provider
Responses
StatusDescriptionSchema
200Returns selected push notification providerGetGuardianFactorsProviderPushNotificationResponseContent
400Invalid input based on schemas
401Token has expired or signature is invalid
403Insufficient scope
PUT/guardian/factors/push-notification/selected-providerUpdate Push Notification configuration
Request body

application/jsonSetGuardianFactorsProviderPushNotificationRequestContent

Responses
StatusDescriptionSchema
200Returns selected push notification provider configurationSetGuardianFactorsProviderPushNotificationResponseContent
400Invalid input based on schemas
401Token has expired or signature is invalid
403Insufficient scope
GET/guardian/factors/sms/providers/twilioGet Twilio SMS configuration
Responses
StatusDescriptionSchema
200Twilio SMS configuration successfully retrieved.GetGuardianFactorsProviderSmsTwilioResponseContent
400Invalid input based on schemas.
401Token has expired or signature is invalid.
403Insufficient scope.
PUT/guardian/factors/sms/providers/twilioUpdate Twilio SMS configuration
Request body

application/jsonSetGuardianFactorsProviderSmsTwilioRequestContent

Responses
StatusDescriptionSchema
200Twilio SMS configuration successfully updated.SetGuardianFactorsProviderSmsTwilioResponseContent
400Invalid input based on schemas.
401Token has expired or signature is invalid.
403Insufficient scope.
GET/guardian/factors/sms/selected-providerGet SMS configuration
Responses
StatusDescriptionSchema
200Returns selected SMS provider configurationGetGuardianFactorsProviderSmsResponseContent
400Invalid input based on schemas
401Token has expired or signature is invalid
403Insufficient scope
PUT/guardian/factors/sms/selected-providerUpdate SMS configuration
Request body

application/jsonSetGuardianFactorsProviderSmsRequestContent

Responses
StatusDescriptionSchema
200Returns selected SMS provider configurationSetGuardianFactorsProviderSmsResponseContent
400Invalid input based on schemas
401Token has expired or signature is invalid
403Insufficient scope
GET/guardian/factors/sms/templatesGet SMS enrollment and verification templates
Responses
StatusDescriptionSchema
200SMS enrollment and verification templates successfully retrieved.GetGuardianFactorSmsTemplatesResponseContent
204No content.GetGuardianFactorSmsTemplatesResponseContent
400Invalid input based on schemas.
401Token has expired or signature is invalid.
403Insufficient scope.
PUT/guardian/factors/sms/templatesUpdate SMS enrollment and verification templates
Request body

application/jsonSetGuardianFactorSmsTemplatesRequestContent

Responses
StatusDescriptionSchema
200SMS enrollment and verification templates successfully updated.SetGuardianFactorSmsTemplatesResponseContent
400Invalid input based on schemas.
401Token has expired or signature is invalid.
403Insufficient scope.
PUT/guardian/factors/{name}Update multi-factor authentication type
Parameters
NameInRequiredType
namepathyes
Request body

application/jsonSetGuardianFactorRequestContent

Responses
StatusDescriptionSchema
200Factor updated successfully.SetGuardianFactorResponseContent
400Invalid input based on schemas.
401Token has expired or signature is invalid.
403Insufficient scope.
GET/guardian/policiesGet multi-factor authentication policies
Responses
StatusDescriptionSchema
200SuccessListGuardianPoliciesResponseContent
400Invalid input based on schemas
401Token has expired or signature is invalid
403Insufficient scope
PUT/guardian/policiesUpdate multi-factor authentication policies
Request body

application/jsonSetGuardianPoliciesRequestContent

Responses
StatusDescriptionSchema
200Policies updatedSetGuardianPoliciesResponseContent
400Invalid input based on schemas
401Token has expired or signature is invalid
403Insufficient scope
hooks9
GET/hooksGet hooks
Parameters
NameInRequiredType
pagequerynointeger
per_pagequerynointeger
include_totalsquerynoboolean
enabledquerynoboolean
fieldsquerynostring
triggerIdqueryno
Responses
StatusDescriptionSchema
200Hooks successfully retrieved.ListHooksResponseContent
400Invalid request query string. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: read:hooks.
404Hook not found.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
POST/hooksCreate a hook
Request body

application/jsonCreateHookRequestContent

Responses
StatusDescriptionSchema
201Hook successfully created.CreateHookResponseContent
400Invalid request body. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: create:hooks.
409Hook with the same name already exists.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/hooks/{id}Get a hook
Parameters
NameInRequiredType
idpathyesstring
fieldsquerynostring
Responses
StatusDescriptionSchema
200Hook successfully retrieved.GetHookResponseContent
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: read:hooks.
404Hook not found.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
PATCH/hooks/{id}Update a hook
Parameters
NameInRequiredType
idpathyesstring
Request body

application/jsonUpdateHookRequestContent

Responses
StatusDescriptionSchema
201Hook successfully created.UpdateHookResponseContent
400Invalid request body. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: create:hooks.
404The hook does not exist
409A hook with the same name already exists.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
DELETE/hooks/{id}Delete a hook
Parameters
NameInRequiredType
idpathyesstring
Responses
StatusDescriptionSchema
204Hook successfully deleted.
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: delete:hooks.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/hooks/{id}/secretsGet hook secrets
Parameters
NameInRequiredType
idpathyesstring
Responses
StatusDescriptionSchema
200Hook secrets successfully retrieved.GetHookSecretResponseContent
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: read:hooks.
404Hook not found.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
POST/hooks/{id}/secretsAdd hook secrets
Parameters
NameInRequiredType
idpathyesstring
Request body

application/jsonCreateHookSecretRequestContent

Responses
StatusDescriptionSchema
201Hook secrets successfully added.
400Invalid request body. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: create:hooks.
409Secret with the same name already exists.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
PATCH/hooks/{id}/secretsUpdate hook secrets
Parameters
NameInRequiredType
idpathyesstring
Request body

application/jsonUpdateHookSecretRequestContent

Responses
StatusDescriptionSchema
201Hook secrets successfully updated.
400Invalid request body. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: create:hooks.
404Hook or secret not found.
409Secret with the same name already exists.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
DELETE/hooks/{id}/secretsDelete hook secrets
Parameters
NameInRequiredType
idpathyesstring
Request body

application/jsonDeleteHookSecretRequestContent

Responses
StatusDescriptionSchema
204Hook secrets successfully deleted.
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: delete:hooks.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
jobs5
POST/jobs/users-exportsCreate export users job
Request body

application/jsonCreateExportUsersRequestContent

Responses
StatusDescriptionSchema
200Job created successfully.CreateExportUsersResponseContent
400Invalid request body. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: read:users.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
POST/jobs/users-importsCreate import users job
Request body

multipart/form-dataCreateImportUsersRequestContent

Responses
StatusDescriptionSchema
202Job successfully created.CreateImportUsersResponseContent
400Invalid request body. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: create:users.
413Payload content length greater than maximum allowed: 512000.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
500Internal error.
POST/jobs/verification-emailSend an email address verification email
Parameters
NameInRequiredType
auth0-custom-domainheadernostring
Request body

application/jsonCreateVerificationEmailRequestContent

Responses
StatusDescriptionSchema
201Job successfully created.CreateVerificationEmailResponseContent
400Invalid request parameters. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: update:users.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/jobs/{id}Get a job
Parameters
NameInRequiredType
idpathyesstring
Responses
StatusDescriptionSchema
200Job retrieved successfully.GetJobResponseContent
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: create:users.
404Job not found.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/jobs/{id}/errorsGet job error details
Parameters
NameInRequiredType
idpathyesstring
Responses
StatusDescriptionSchema
200Job successfully retrieved.
204The job was retrieved, but no errors were found.
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope, expected any of: create:users
404The job does not exist
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
keys14
GET/keys/custom-signingGet custom signing keys
Responses
StatusDescriptionSchema
200Custom signing keys were successfully retrieved.GetCustomSigningKeysResponseContent
401Invalid token.
403Insufficient scope; expected any of: read:custom_signing_keys.
404No custom signing keys found for this tenant. Upload custom signing keys first.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
PUT/keys/custom-signingCreate or replace custom signing keys
Request body

application/jsonSetCustomSigningKeysRequestContent

Responses
StatusDescriptionSchema
200Custom signing keys were successfully created or replaced.SetCustomSigningKeysResponseContent
400Payload validation error.
401Invalid token.
403Insufficient scope, expected all of: create:custom_signing_keys,update:custom_signing_keys.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
DELETE/keys/custom-signingDelete custom signing keys
Responses
StatusDescriptionSchema
204Custom signing keys were successfully deleted.
401Invalid token.
403Insufficient scope; expected any of: delete:custom_signing_keys.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/keys/encryptionGet all encryption keys
Parameters
NameInRequiredType
pagequerynointeger
per_pagequerynointeger
include_totalsquerynoboolean
Responses
StatusDescriptionSchema
200The keys were successfully retrieved.ListEncryptionKeysResponseContent
400Invalid request query string. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: read:encryption_keys.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
POST/keys/encryptionCreate the new encryption key
Request body

application/jsonCreateEncryptionKeyRequestContent

Responses
StatusDescriptionSchema
201The key was successfully created.CreateEncryptionKeyResponseContent
400Request body is invalid. Unsupported key "type" provided.
401Invalid token.
403Insufficient scope; expected any of: create:encryption_keys.
409Encryption key has already been created.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
POST/keys/encryption/rekeyRekey the key hierarchy
Responses
StatusDescriptionSchema
204The key hierarchy was successfully rekeyed.
401Invalid token.
403Insufficient scope; expected all of: create:encryption_keys update:encryption_keys.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/keys/encryption/{kid}Get the encryption key by its key id
Parameters
NameInRequiredType
kidpathyesstring
Responses
StatusDescriptionSchema
200The key was successfully retrieved.GetEncryptionKeyResponseContent
400Invalid UUID format in uri.
401Invalid token.
403Insufficient scope; expected any of: read:encryption_keys.
404The key does not exist.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
POST/keys/encryption/{kid}Import the encryption key
Parameters
NameInRequiredType
kidpathyesstring
Request body

application/jsonImportEncryptionKeyRequestContent

Responses
StatusDescriptionSchema
201The key was successfully imported.ImportEncryptionKeyResponseContent
400The key ID was not found.
401Invalid token.
403Insufficient scope; expected any of: update:encryption_keys.
409Failed precondition. Key import not in progress or unable to find the wrapping key. Make sure you have followed all the steps to import a key.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
DELETE/keys/encryption/{kid}Delete the encryption key by its key id
Parameters
NameInRequiredType
kidpathyesstring
Responses
StatusDescriptionSchema
204The key was successfully deleted.
400Invalid UUID format in uri.
401Invalid token.
403Insufficient scope; expected any of: delete:encryption_keys.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
POST/keys/encryption/{kid}/wrapping-keyCreate the public wrapping key
Parameters
NameInRequiredType
kidpathyesstring
Responses
StatusDescriptionSchema
201The public wrapping key was successfully created.CreateEncryptionKeyPublicWrappingResponseContent
400Invalid UUID format in uri.
401Invalid token.
403Insufficient scope; expected any of: create:encryption_keys.
409Failed precondition. Create new encryption key without the key material first.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/keys/signingGet all Application Signing Keys
Responses
StatusDescriptionSchema
200The signing keys were retrieved.
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope, expected any of: read:signing_keys
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
POST/keys/signing/rotateRotate the Application Signing Key
Responses
StatusDescriptionSchema
201Signing key rotated successfully.RotateSigningKeysResponseContent
401Invalid token.
403Insufficient scope; expected create:signing_keys and update:signing_keys.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/keys/signing/{kid}Get an Application Signing Key by its key id
Parameters
NameInRequiredType
kidpathyesstring
Responses
StatusDescriptionSchema
200The signing keys were retrieved.GetSigningKeysResponseContent
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope, expected any of: read:signing_keys
404Signing key not found.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
PUT/keys/signing/{kid}/revokeRevoke an Application Signing Key by its key id
Parameters
NameInRequiredType
kidpathyesstring
Responses
StatusDescriptionSchema
200Signing key revoked successfully.RevokedSigningKeysResponseContent
401Invalid token.
403Insufficient scope; expected any of: update:signing_keys.
404Signing key not found.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
log-streams5
GET/log-streamsGet log streams
Responses
StatusDescriptionSchema
200Returning log streams
401Invalid token.
403Insufficient scope; expected any of: read:log_streams.
404The log stream does not exist.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
POST/log-streamsCreate a log stream
Request body

application/jsonCreateLogStreamRequestContent

Responses
StatusDescriptionSchema
200Log stream createdCreateLogStreamResponseContent
400Invalid request body. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: create:log_streams.
409You have reached the maximum number of log streams for your account.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/log-streams/{id}Get log stream by ID
Parameters
NameInRequiredType
idpathyesstring
Responses
StatusDescriptionSchema
200Returning log stream.GetLogStreamResponseContent
401Invalid token.
403Insufficient scope; expected any of: read:log_streams.
404The log stream does not exist.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
PATCH/log-streams/{id}Update a log stream
Parameters
NameInRequiredType
idpathyesstring
Request body

application/jsonUpdateLogStreamRequestContent

Responses
StatusDescriptionSchema
200Log stream updatedUpdateLogStreamResponseContent
400Invalid request body. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: update:log_streams.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
DELETE/log-streams/{id}Delete log stream
Parameters
NameInRequiredType
idpathyesstring
Responses
StatusDescriptionSchema
204The log stream was deleted.
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope, expected: delete:log_streams.
404The log stream does not exist.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
logs2
GET/logsSearch log events
Parameters
NameInRequiredType
pagequerynointeger
per_pagequerynointeger
sortquerynostring
fieldsquerynostring
include_fieldsquerynoboolean
include_totalsquerynoboolean
fromquerynostring
takequerynointeger
searchquerynostring
Responses
StatusDescriptionSchema
200Logs successfully retrieved.ListLogResponseContent
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: read:logs, read:logs_users.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/logs/{id}Get a log event by id
Parameters
NameInRequiredType
idpathyesstring
Responses
StatusDescriptionSchema
200Log successfully retrieved.GetLogResponseContent
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: read:logs, read:logs_users.
404Log not found.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
network-acls6
GET/network-aclsGet all access control list entries for a tenant
Parameters
NameInRequiredType
pagequerynointeger
per_pagequerynointeger
include_totalsquerynoboolean
Responses
StatusDescriptionSchema
200Network access control list successfully retrieved.ListNetworkAclsResponseContent
401Invalid token.
403Insufficient scope; expected any of: read:network_acls.
404Network access control list not found.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
POST/network-aclsCreate Access Control List
Request body

application/jsonCreateNetworkAclRequestContent

Responses
StatusDescriptionSchema
201Network ACL successfully created.
400Invalid request body. The message will vary depending on the cause.
401Invalid token.
403Entitlement is not enabled for this tenant. Please upgrade your subscription to enable Tenant ACL Management.
409A Network ACL with this priority number has already been created.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
500There was an error retrieving Networks ACLs subscription settings.
GET/network-acls/{id}Get a specific access control list entry for a tenant
Parameters
NameInRequiredType
idpathyesstring
Responses
StatusDescriptionSchema
200Network access control list successfully retrieved.GetNetworkAclsResponseContent
401Invalid token.
403Insufficient scope; expected any of: read:network_acls.
404Network access control list not found.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
PUT/network-acls/{id}Update Access Control List
Parameters
NameInRequiredType
idpathyesstring
Request body

application/jsonSetNetworkAclRequestContent

Responses
StatusDescriptionSchema
200Network ACL properties successfully updatedSetNetworkAclsResponseContent
400Invalid request body. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: update:network_acls.
404Network ACL not found and cannot be updated
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
PATCH/network-acls/{id}Partial Update for an Access Control List
Parameters
NameInRequiredType
idpathyesstring
Request body

application/jsonUpdateNetworkAclRequestContent

Responses
StatusDescriptionSchema
200Network ACL properties successfully updatedUpdateNetworkAclResponseContent
400Invalid request body. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: update:network_acls.
404Network ACL not found and cannot be updated
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
DELETE/network-acls/{id}Delete Access Control List
Parameters
NameInRequiredType
idpathyesstring
Responses
StatusDescriptionSchema
204Network ACL successfully deleted
400Invalid request body. The message will vary depending on the cause.
401Invalid token.
403Tenant ACL Management is not enabled for this tenant.
404This ACL does not exist
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
organizations48
GET/organizationsGet organizations
Parameters
NameInRequiredType
pagequerynointeger
per_pagequerynointeger
include_totalsquerynoboolean
fromquerynostring
takequerynointeger
sortquerynostring
include_client_association_forquerynostring
Responses
StatusDescriptionSchema
200Organizations successfully retrieved.ListOrganizationsResponseContent
400Invalid request query string. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: read:organizations.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
POST/organizationsCreate an Organization
Request body

application/jsonCreateOrganizationRequestContent

Responses
StatusDescriptionSchema
201Organization successfully created.CreateOrganizationResponseContent
400Invalid request body. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: create:organizations.
409An organization with this name already exists.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/organizations/name/{name}Get organization by name
Parameters
NameInRequiredType
namepathyesstring
Responses
StatusDescriptionSchema
200Organization successfully retrieved.GetOrganizationByNameResponseContent
400Invalid request query string. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: read:organizations.
404The organization does not exist.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/organizations/{id}Get organization
Parameters
NameInRequiredType
idpathyesstring
Responses
StatusDescriptionSchema
200Organization successfully retrieved.GetOrganizationResponseContent
400Invalid request query string. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: read:organizations.
404The organization does not exist.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
PATCH/organizations/{id}Modify an Organization
Parameters
NameInRequiredType
idpathyesstring
Request body

application/jsonUpdateOrganizationRequestContent

Responses
StatusDescriptionSchema
200Organization successfully updated.UpdateOrganizationResponseContent
400Invalid request body. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: update:organizations.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
DELETE/organizations/{id}Delete organization
Parameters
NameInRequiredType
idpathyesstring
Responses
StatusDescriptionSchema
204The organization was deleted.
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: delete:organizations.
404The organization does not exist.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/organizations/{id}/client-grantsGet client grants associated to an organization
Parameters
NameInRequiredType
idpathyesstring
audiencequerynostring
client_idquerynostring
grant_idsquerynoarray
pagequerynointeger
per_pagequerynointeger
include_totalsquerynoboolean
Responses
StatusDescriptionSchema
200Client grants successfully retrieved.ListOrganizationClientGrantsResponseContent
400Invalid request query string. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: read:organization_client_grants.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
POST/organizations/{id}/client-grantsAssociate a client grant with an organization
Parameters
NameInRequiredType
idpathyesstring
Request body

application/jsonAssociateOrganizationClientGrantRequestContent

Responses
StatusDescriptionSchema
201Client Grant successfully associated with Organization.AssociateOrganizationClientGrantResponseContent
400Invalid request body. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: create:organization_client_grants.
404The grant does not exist.
409The client grant has already been added to this organization.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
DELETE/organizations/{id}/client-grants/{grant_id}Remove a client grant from an organization
Parameters
NameInRequiredType
idpathyesstring
grant_idpathyesstring
Responses
StatusDescriptionSchema
204The Client Grant was removed from the Organization.
400Invalid request body. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: delete:organization_client_grants.
404No organization found by that id.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/organizations/{id}/clientsList organization client associations
Parameters
NameInRequiredType
idpathyesstring
Responses
StatusDescriptionSchema
200Organization clients successfully retrieved.ListOrganizationClientsResponseContent
400
401
403
404
429
POST/organizations/{id}/clientsAssociate clients with an organization
Parameters
NameInRequiredType
idpathyesstring
Request body

application/jsonCreateOrganizationClientsRequestContent

Responses
StatusDescriptionSchema
201Organization clients successfully associated.CreateOrganizationClientsResponseContent
400
401
403
404
409
429
DELETE/organizations/{id}/clientsRemove client associations from an organization
Parameters
NameInRequiredType
idpathyesstring
Request body

application/jsonDeleteOrganizationClientsRequestContent

Responses
StatusDescriptionSchema
204Organization clients successfully disassociated.
400
401
403
404
429
GET/organizations/{id}/clients/{client_id}Get an organization client association
Parameters
NameInRequiredType
idpathyesstring
client_idpathyesstring
Responses
StatusDescriptionSchema
200Organization client association successfully retrieved.GetOrganizationClientResponseContent
400
401
403
404
429
PATCH/organizations/{id}/clients/{client_id}Update an organization client association
Parameters
NameInRequiredType
idpathyesstring
client_idpathyesstring
Request body

application/jsonUpdateOrganizationClientRequestContent

Responses
StatusDescriptionSchema
200Organization client successfully updated.UpdateOrganizationClientResponseContent
400
401
403
404
429
GET/organizations/{id}/connectionsGet connections associated with an organization
Parameters
NameInRequiredType
idpathyesstring
pagequerynointeger
per_pagequerynointeger
include_totalsquerynoboolean
is_enabledquerynoboolean
Responses
StatusDescriptionSchema
200Connections successfully retrieved.ListOrganizationAllConnectionsResponseContent
400Invalid request query string. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: read:organization_connections.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
POST/organizations/{id}/connectionsAdds a connection to an organization
Parameters
NameInRequiredType
idpathyesstring
Request body

application/jsonCreateOrganizationAllConnectionRequestContent

Responses
StatusDescriptionSchema
201Connection successfully created.CreateOrganizationAllConnectionResponseContent
400Invalid request body. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: create:organization_connections.
404The organization does not exist.
409The organization connection already exists.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/organizations/{id}/connections/{connection_id}Get a specific connection associated with an organization
Parameters
NameInRequiredType
idpathyesstring
connection_idpathyesstring
Responses
StatusDescriptionSchema
200Connection successfully retrieved.GetOrganizationAllConnectionResponseContent
401Invalid token.
403Insufficient scope; expected any of: read:organization_connections.
404The organization does not exists.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
PATCH/organizations/{id}/connections/{connection_id}Update a connection for an organization
Parameters
NameInRequiredType
idpathyesstring
connection_idpathyesstring
Request body

application/jsonUpdateOrganizationAllConnectionRequestContent

Responses
StatusDescriptionSchema
200Connection successfully updated.UpdateOrganizationAllConnectionResponseContent
400Invalid request body. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: update:organization_connections.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
DELETE/organizations/{id}/connections/{connection_id}Delete a connection from an organization
Parameters
NameInRequiredType
idpathyesstring
connection_idpathyesstring
Responses
StatusDescriptionSchema
204Connection successfully deleted.
401Invalid token.
403Insufficient scope; expected any of: delete:organization_connections.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/organizations/{id}/discovery-domainsRetrieve all organization discovery domains
Parameters
NameInRequiredType
idpathyesstring
fromquerynostring
takequerynointeger
Responses
StatusDescriptionSchema
200Organization discovery domains retrieved successfully.ListOrganizationDiscoveryDomainsResponseContent
400Invalid request query string. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: read:organization_discovery_domains.
404Organization not found.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
POST/organizations/{id}/discovery-domainsCreate an organization discovery domain
Parameters
NameInRequiredType
idpathyesstring
Request body

application/jsonCreateOrganizationDiscoveryDomainRequestContent

Responses
StatusDescriptionSchema
201Organization discovery domain successfully created.CreateOrganizationDiscoveryDomainResponseContent
400Invalid request body. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: create:organization_discovery_domains.
404Organization not found.
409An organization discovery domain with this domain is already registered to this organization.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/organizations/{id}/discovery-domains/name/{discovery_domain}Retrieve an organization discovery domain by domain name
Parameters
NameInRequiredType
idpathyesstring
discovery_domainpathyesstring
Responses
StatusDescriptionSchema
200Organization discovery domain successfully retrieved.GetOrganizationDiscoveryDomainByNameResponseContent
400Invalid request query string. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: read:organization_discovery_domains.
404Organization not found.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/organizations/{id}/discovery-domains/{discovery_domain_id}Retrieve an organization discovery domain by ID
Parameters
NameInRequiredType
idpathyesstring
discovery_domain_idpathyesstring
Responses
StatusDescriptionSchema
200Organization discovery domain successfully retrieved.GetOrganizationDiscoveryDomainResponseContent
400Invalid request query string. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: read:organization_discovery_domains.
404Organization not found.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
PATCH/organizations/{id}/discovery-domains/{discovery_domain_id}Update an organization discovery domain
Parameters
NameInRequiredType
idpathyesstring
discovery_domain_idpathyesstring
Request body

application/jsonUpdateOrganizationDiscoveryDomainRequestContent

Responses
StatusDescriptionSchema
200Organization discovery domain successfully updated.UpdateOrganizationDiscoveryDomainResponseContent
400Invalid Request Body.
404Organization not found.
DELETE/organizations/{id}/discovery-domains/{discovery_domain_id}Delete an organization discovery domain
Parameters
NameInRequiredType
idpathyesstring
discovery_domain_idpathyesstring
Responses
StatusDescriptionSchema
204Organization discovery domain successfully deleted.
401Invalid token.
403Insufficient scope; expected any of: delete:organization_discovery_domains.
404Organization not found.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/organizations/{id}/enabled_connectionsGet connections enabled for an organization
Parameters
NameInRequiredType
idpathyesstring
pagequerynointeger
per_pagequerynointeger
include_totalsquerynoboolean
Responses
StatusDescriptionSchema
200Connections successfully retrieved.ListOrganizationConnectionsResponseContent
400Invalid request query string. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: read:organization_connections.
404The organization does not exist.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
POST/organizations/{id}/enabled_connectionsAdd connections to an organization
Parameters
NameInRequiredType
idpathyesstring
Request body

application/jsonAddOrganizationConnectionRequestContent

Responses
StatusDescriptionSchema
201Organization connection successfully added.AddOrganizationConnectionResponseContent
400Invalid request body. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: create:organization_connections.
404The organization does not exist.
409The organization connection already exists.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/organizations/{id}/enabled_connections/{connectionId}Get an enabled connection for an organization
Parameters
NameInRequiredType
idpathyesstring
connectionIdpathyesstring
Responses
StatusDescriptionSchema
200Connection successfully retrieved.GetOrganizationConnectionResponseContent
401Invalid token.
403Insufficient scope; expected any of: read:organization_connections.
404The organization does not exist.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
PATCH/organizations/{id}/enabled_connections/{connectionId}Update the Connection of an Organization
Parameters
NameInRequiredType
idpathyesstring
connectionIdpathyesstring
Request body

application/jsonUpdateOrganizationConnectionRequestContent

Responses
StatusDescriptionSchema
200Organization connection successfully updated.UpdateOrganizationConnectionResponseContent
400Invalid request body. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: update:organization_connections.
404The organization does not exist.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
DELETE/organizations/{id}/enabled_connections/{connectionId}Delete connections from an organization
Parameters
NameInRequiredType
idpathyesstring
connectionIdpathyesstring
Responses
StatusDescriptionSchema
204Connection successfully removed from organization.
400Invalid request body. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: delete:organization_connections.
404The organization does not exist.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/organizations/{id}/invitationsGet invitations to an organization
Parameters
NameInRequiredType
idpathyesstring
pagequerynointeger
per_pagequerynointeger
include_totalsquerynoboolean
fieldsquerynostring
include_fieldsquerynoboolean
sortquerynostring
Responses
StatusDescriptionSchema
200Invitations successfully retrieved.ListOrganizationInvitationsResponseContent
400Requesting page exceeds the allowed maximum of 1000 records
401Client is not global.
403Insufficient scope; expected any of: read:organization_invitations.
404No organization found by that id.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
POST/organizations/{id}/invitationsCreate invitations to an organization
Parameters
NameInRequiredType
idpathyesstring
auth0-custom-domainheadernostring
Request body

application/jsonCreateOrganizationInvitationRequestContent

Responses
StatusDescriptionSchema
200Invitation successfully created.CreateOrganizationInvitationResponseContent
400A default login route is required to generate the invitation url. For more information, see https://auth0.com/docs/universal-login/configure-default-login-routes
401Client is not global.
403Insufficient scope; expected any of: create:organization_invitations.
404No organization found by that id.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/organizations/{id}/invitations/{invitation_id}Get a specific invitation to an Organization
Parameters
NameInRequiredType
idpathyesstring
invitation_idpathyesstring
fieldsquerynostring
include_fieldsquerynoboolean
Responses
StatusDescriptionSchema
200Invitation successfully retrieved.GetOrganizationInvitationResponseContent
400Invalid request query string. The message will vary depending on the cause.
401Client is not global.
403Insufficient scope; expected any of: read:organization_invitations.
404No organization found by that id.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
DELETE/organizations/{id}/invitations/{invitation_id}Delete an invitation to an Organization
Parameters
NameInRequiredType
idpathyesstring
invitation_idpathyesstring
Responses
StatusDescriptionSchema
204Invitation successfully deleted.
401Client is not global.
403Insufficient scope; expected any of: delete:organization_invitations.
404No organization found by that id.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/organizations/{id}/membersGet members who belong to an organization
Parameters
NameInRequiredType
idpathyesstring
pagequerynointeger
per_pagequerynointeger
include_totalsquerynoboolean
fromquerynostring
takequerynointeger
fieldsquerynostring
include_fieldsquerynoboolean
Responses
StatusDescriptionSchema
200Members successfully retrieved.ListOrganizationMembersResponseContent
400Invalid request query string. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: read:organization_members, read:organization_member_roles.
404The organization does not exist.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
POST/organizations/{id}/membersAdd members to an organization
Parameters
NameInRequiredType
idpathyesstring
Request body

application/jsonCreateOrganizationMemberRequestContent

Responses
StatusDescriptionSchema
204Members successfully added to organization.
400Invalid request body. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: create:organization_members.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
DELETE/organizations/{id}/membersDelete members from an organization
Parameters
NameInRequiredType
idpathyesstring
Request body

application/jsonDeleteOrganizationMembersRequestContent

Responses
StatusDescriptionSchema
204Users successfully removed from organization.
400Invalid request body. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: delete:organization_members.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/organizations/{id}/members/{user_id}/effective-rolesList organization member effective roles.
Parameters
NameInRequiredType
idpathyesstring
user_idpathyesstring
fromquerynostring
takequerynointeger
Responses
StatusDescriptionSchema
200Organization member's effective roles successfully retrieved.ListOrganizationMemberEffectiveRolesResponseContent
400Invalid request query string. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: read:organization_member_effective_roles.
404Organization not found.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/organizations/{id}/members/{user_id}/effective-roles/sources/groupsList organization member role group sources.
Parameters
NameInRequiredType
idpathyesstring
user_idpathyesstring
fromquerynostring
takequerynointeger
role_idqueryyesstring
Responses
StatusDescriptionSchema
200Organization member role source groups successfully retrieved.ListOrganizationMemberRoleSourceGroupsResponseContent
400Invalid request query string. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: read:organization_member_role_source_groups.
404Organization not found.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/organizations/{id}/members/{user_id}/rolesGet user roles assigned to an Organization member
Parameters
NameInRequiredType
idpathyesstring
user_idpathyesstring
pagequerynointeger
per_pagequerynointeger
include_totalsquerynoboolean
Responses
StatusDescriptionSchema
200Roles successfully retrieved.ListOrganizationMemberRolesResponseContent
400Invalid request query string. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: read:organization_member_roles.
404The user does not exist.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
POST/organizations/{id}/members/{user_id}/rolesAssign user roles to an Organization member
Parameters
NameInRequiredType
idpathyesstring
user_idpathyesstring
Request body

application/jsonAssignOrganizationMemberRolesRequestContent

Responses
StatusDescriptionSchema
204Roles successfully associated with user.
400Invalid request body. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: create:organization_member_roles.
409No more roles can be assigned to this organization member.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
DELETE/organizations/{id}/members/{user_id}/rolesDelete user roles from an Organization member
Parameters
NameInRequiredType
idpathyesstring
user_idpathyesstring
Request body

application/jsonDeleteOrganizationMemberRolesRequestContent

Responses
StatusDescriptionSchema
204Roles successfully removed from organization member.
400Invalid request body. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: delete:organization_member_roles.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/organizations/{id}/roles/{role_id}/membersList the members assigned to a role in the context of an organization
Parameters
NameInRequiredType
idpathyesstring
role_idpathyesstring
fromquerynostring
takequerynointeger
fieldsquerynostring
include_fieldsquerynoboolean
Responses
StatusDescriptionSchema
200
400
401
403
404
429
GET/organizations/{organization_id}/groupsLists the groups that are assigned to the organization.
Parameters
NameInRequiredType
organization_idpathyesstring
fromquerynostring
takequerynointeger
Responses
StatusDescriptionSchema
200Organization groups successfully retrieved.ListOrganizationGroupsResponseContent
400Invalid request query string. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: read:organization_groups.
404Organization not found.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/organizations/{organization_id}/groups/{group_id}/rolesLists the roles assigned to a group in the context of an organization.
Parameters
NameInRequiredType
organization_idpathyesstring
group_idpathyesstring
fromquerynostring
takequerynointeger
Responses
StatusDescriptionSchema
200Organization group roles successfully retrieved.ListOrganizationGroupRolesResponseContent
400Invalid request query string. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: read:organization_group_roles.
404Group not found.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
POST/organizations/{organization_id}/groups/{group_id}/rolesAssigns roles to a group in an organization context.
Parameters
NameInRequiredType
organization_idpathyesstring
group_idpathyesstring
Request body

application/jsonCreateOrganizationGroupRolesRequestContent

Responses
StatusDescriptionSchema
204Roles successfully assigned to organization group.
400Invalid request body. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: create:organization_group_roles.
404Group not found.
409No more roles can be assigned to this organization group.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
DELETE/organizations/{organization_id}/groups/{group_id}/rolesRemoves roles assigned to a group in an organization context.
Parameters
NameInRequiredType
organization_idpathyesstring
group_idpathyesstring
Request body

application/jsonDeleteOrganizationGroupRolesRequestContent

Responses
StatusDescriptionSchema
204Roles successfully removed from organization group.
400Invalid request body. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: delete:organization_group_roles.
404Group not found.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/organizations/{organization_id}/roles/{role_id}/groupsList the groups assigned to a role in the context of an organization
Responses
StatusDescriptionSchema
200Organization role groups successfully retrieved.ListOrganizationRoleGroupsResponseContent
400
401
403
404
429
prompts10
GET/promptsGet prompt settings
Responses
StatusDescriptionSchema
200Prompt settings successfully retrieved.GetSettingsResponseContent
401Invalid token.
403The specified client cannot perform the requested operation.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
PATCH/promptsUpdate prompt settings
Request body

application/jsonUpdateSettingsRequestContent

Responses
StatusDescriptionSchema
200Prompts settings successfully updated.UpdateSettingsResponseContent
400Invalid request body. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: update:prompts.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/prompts/renderingGet render setting configurations for all screens
Parameters
NameInRequiredType
fieldsquerynostring
include_fieldsquerynoboolean
pagequerynointeger
per_pagequerynointeger
include_totalsquerynoboolean
promptquerynostring
screenquerynostring
rendering_modequeryno
Responses
StatusDescriptionSchema
200ACUL settings successfully retrieved.ListAculsResponseContent
400Invalid request query string. The message will vary depending on the cause.
401Invalid token.
402A paid subscription is required to use Advanced Customizations.
403Insufficient scope; expected any of: read:prompts.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
PATCH/prompts/renderingUpdate render settings for multiple screens
Request body

application/jsonBulkUpdateAculRequestContent

Responses
StatusDescriptionSchema
200ACUL settings successfully updated.BulkUpdateAculResponseContent
400Invalid request body. The message will vary depending on the cause.
401Invalid token.
402A paid subscription is required to use Advanced Customizations.
403Insufficient scope; expected any of: update:prompts.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/prompts/{prompt}/custom-text/{language}Get custom text for a prompt
Parameters
NameInRequiredType
promptpathyes
languagepathyes
Responses
StatusDescriptionSchema
200Prompt dictionaries successfully retrieved.GetCustomTextsByLanguageResponseContent
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: read:prompts.
404The prompt does not exist.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
PUT/prompts/{prompt}/custom-text/{language}Set custom text for a specific prompt
Parameters
NameInRequiredType
promptpathyes
languagepathyes
Request body

application/jsonSetsCustomTextsByLanguageRequestContent

Responses
StatusDescriptionSchema
200Prompt dictionaries successfully updated.
400Invalid request body. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: update:prompts.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/prompts/{prompt}/partialsGet partials for a prompt
Parameters
NameInRequiredType
promptpathyes
Responses
StatusDescriptionSchema
200Prompt partials successfully retrieved.GetPartialsResponseContent
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: read:prompts.
404The prompt does not exist.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
PUT/prompts/{prompt}/partialsSet partials for a prompt
Parameters
NameInRequiredType
promptpathyes
Request body

application/jsonSetPartialsRequestContent

Responses
StatusDescriptionSchema
200Template partials successfully updated.
400Invalid request body. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: update:prompts.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/prompts/{prompt}/screen/{screen}/renderingGet render settings for a screen
Parameters
NameInRequiredType
promptpathyes
screenpathyes
Responses
StatusDescriptionSchema
200ACUL settings successfully retrieved.GetAculResponseContent
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
402A paid subscription is required to use Advanced Customizations.
403Insufficient scope; expected any of: read:prompts.
404The prompt does not exist.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
PATCH/prompts/{prompt}/screen/{screen}/renderingUpdate render settings for a screen
Parameters
NameInRequiredType
promptpathyes
screenpathyes
Request body

application/jsonUpdateAculRequestContent

Responses
StatusDescriptionSchema
200ACUL settings successfully updated.UpdateAculResponseContent
400Invalid request body. The message will vary depending on the cause.
401Invalid token.
402A paid subscription is required to use Advanced Customizations.
403Insufficient scope; expected any of: update:prompts.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
rate-limit-policies5
GET/rate-limit-policiesGet rate limit policies
Parameters
NameInRequiredType
resourcequeryno
consumerqueryno
consumer_selectorquerynostring
takequerynointeger
fromquerynostring
Responses
StatusDescriptionSchema
200Rate limit policies retrieved successfully.ListRateLimitPoliciesPaginatedResponseContent
400Invalid request query string. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: read:rate_limit_policies.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
POST/rate-limit-policiesCreate a rate limit policy
Request body

application/jsonCreateRateLimitPolicyRequestContent

Responses
StatusDescriptionSchema
201Rate limit policy successfully created.CreateRateLimitPolicyResponseContent
400Invalid request body. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: create:rate_limit_policies.
409A rate limit policy with the same resource, consumer, and consumer_selector already exists.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/rate-limit-policies/{id}Get a rate limit policy
Parameters
NameInRequiredType
idpathyesstring
Responses
StatusDescriptionSchema
200Rate limit policy retrieved successfully.GetRateLimitPolicyResponseContent
401Invalid token.
403Insufficient scope; expected any of: read:rate_limit_policies.
404The rate limit policy does not exist.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
PATCH/rate-limit-policies/{id}Update a rate limit policy
Parameters
NameInRequiredType
idpathyesstring
Request body

application/jsonPatchRateLimitPolicyRequestContent

Responses
StatusDescriptionSchema
200Rate limit policy successfully updated.UpdateRateLimitPolicyResponseContent
400Invalid request body. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: update:rate_limit_policies.
404The rate limit policy does not exist.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
DELETE/rate-limit-policies/{id}Delete a rate limit policy
Parameters
NameInRequiredType
idpathyesstring
Responses
StatusDescriptionSchema
204Rate limit policy successfully deleted.
401Invalid token.
403Insufficient scope; expected any of: delete:rate_limit_policies.
404The rate limit policy does not exist.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
refresh-tokens5
GET/refresh-tokensGet refresh tokens
Parameters
NameInRequiredType
user_idqueryyesstring
client_idquerynostring
fromquerynostring
takequerynointeger
fieldsquerynostring
include_fieldsquerynoboolean
Responses
StatusDescriptionSchema
200The refresh tokens were retrieved.GetRefreshTokensPaginatedResponseContent
400Missing required 'user_id' parameter.
401Invalid token.
403Insufficient scope, expected any of: read:refresh_tokens
404User not found
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
POST/refresh-tokens/revokeRevoke refresh tokens
Request body

application/jsonRevokeRefreshTokensRequestContent

Responses
StatusDescriptionSchema
202Refresh token revocation request accepted.
400Invalid request body. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected: delete:refresh_tokens
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/refresh-tokens/{id}Get a refresh token
Parameters
NameInRequiredType
idpathyesstring
Responses
StatusDescriptionSchema
200The refresh token was retrievedGetRefreshTokenResponseContent
400API doesn't support Online Refresh Tokens
401Invalid token.
403Insufficient scope, expected: read:refresh_tokens
404The refresh token does not exist.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
PATCH/refresh-tokens/{id}Update a refresh token
Parameters
NameInRequiredType
idpathyesstring
Request body

application/jsonUpdateRefreshTokenRequestContent

Responses
StatusDescriptionSchema
200Refresh token successfully updated.UpdateRefreshTokenResponseContent
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected: update:refresh_tokens.
404The refresh token does not exist.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
DELETE/refresh-tokens/{id}Delete a refresh token
Parameters
NameInRequiredType
idpathyesstring
Responses
StatusDescriptionSchema
202Refresh token deletion request accepted.
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected: delete:refresh_tokens
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
resource-servers5
GET/resource-serversGet resource servers
Parameters
NameInRequiredType
identifiersquerynoarray
pagequerynointeger
per_pagequerynointeger
include_totalsquerynoboolean
include_fieldsquerynoboolean
Responses
StatusDescriptionSchema
200Resource servers successfully retrieved.ListResourceServerResponseContent
400Invalid request query string. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope, expected any of: read:resource_servers.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
POST/resource-serversCreate a resource server
Request body

application/jsonCreateResourceServerRequestContent

Responses
StatusDescriptionSchema
201Resource server successfully created.CreateResourceServerResponseContent
400Invalid request body. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: create:resource_servers.
409A resource server with the same identifier already exists.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/resource-servers/{id}Get a resource server
Parameters
NameInRequiredType
idpathyesstring
include_fieldsquerynoboolean
Responses
StatusDescriptionSchema
200Resource server successfully retrieved.GetResourceServerResponseContent
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: read:resource_servers.
404Resource server not found.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
PATCH/resource-servers/{id}Update a resource server
Parameters
NameInRequiredType
idpathyesstring
Request body

application/jsonUpdateResourceServerRequestContent

Responses
StatusDescriptionSchema
201Resource server successfully updated.UpdateResourceServerResponseContent
400Invalid request body. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: update:resource_servers.
409A resource server with the same identifier already exists.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
DELETE/resource-servers/{id}Delete a resource server
Parameters
NameInRequiredType
idpathyesstring
Responses
StatusDescriptionSchema
204Resource server successfully deleted.
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: delete:resource_servers.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
risk-assessments4
GET/risk-assessments/settingsGet risk assessment settings
Responses
StatusDescriptionSchema
200Returning risk assessment settings for the tenantGetRiskAssessmentsSettingsResponseContent
401Invalid token.
403Insufficient scope; expected any of: read:attack_protection.
404The tenant does not exist.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
PATCH/risk-assessments/settingsUpdate risk assessment settings
Request body

application/jsonUpdateRiskAssessmentsSettingsRequestContent

Responses
StatusDescriptionSchema
200Returning risk assessment settings for the tenantUpdateRiskAssessmentsSettingsResponseContent
400Invalid request body. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: update:attack_protection.
404The tenant does not exist.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/risk-assessments/settings/new-deviceGet new device assessor
Responses
StatusDescriptionSchema
200Returning risk assessment settings for new devicesGetRiskAssessmentsSettingsNewDeviceResponseContent
401Invalid token.
403Insufficient scope; expected any of: read:attack_protection.
404The tenant does not exist.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
PATCH/risk-assessments/settings/new-deviceUpdate new device assessor
Request body

application/jsonUpdateRiskAssessmentsSettingsNewDeviceRequestContent

Responses
StatusDescriptionSchema
200Returning risk assessment settings for new devicesUpdateRiskAssessmentsSettingsNewDeviceResponseContent
400Invalid request body. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: update:attack_protection.
404The tenant does not exist.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
roles13
GET/rolesGet roles
Parameters
NameInRequiredType
per_pagequerynointeger
pagequerynointeger
include_totalsquerynoboolean
name_filterquerynostring
typequeryno
owner_idquerynostring
fromquerynostring
takequerynointeger
Responses
StatusDescriptionSchema
200Roles successfully retrieved.ListRolesResponseContent
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected: read:roles.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
POST/rolesCreate a role
Request body

application/jsonCreateRoleRequestContent

Responses
StatusDescriptionSchema
200Role successfully created.CreateRoleResponseContent
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected: create:roles.
409The role already exists.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/roles/{id}Get a role
Parameters
NameInRequiredType
idpathyesstring
Responses
StatusDescriptionSchema
200Role successfully retrieved.GetRoleResponseContent
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected: read:roles.
404Role not found.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
PATCH/roles/{id}Update a role
Parameters
NameInRequiredType
idpathyesstring
Request body

application/jsonUpdateRoleRequestContent

Responses
StatusDescriptionSchema
200Role successfully updated.UpdateRoleResponseContent
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected: update:roles.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
DELETE/roles/{id}Delete a role
Parameters
NameInRequiredType
idpathyesstring
Responses
StatusDescriptionSchema
200Role successfully deleted.
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected: delete:roles.
404Role not found.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/roles/{id}/groupsGet a role's groups
Parameters
NameInRequiredType
idpathyesstring
fromquerynostring
takequerynointeger
Responses
StatusDescriptionSchema
200Role's groups successfully retrieved.ListRoleGroupsResponseContent
400Invalid request query string. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: read:group_roles.
404The role does not exist.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
POST/roles/{id}/groupsAssign groups to a role
Parameters
NameInRequiredType
idpathyesstring
Request body

application/jsonAssignRoleGroupsRequestContent

Responses
StatusDescriptionSchema
204Groups successfully assigned to role.
400Invalid request body. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: create:group_roles.
404Role not found.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
DELETE/roles/{id}/groupsRemove groups from a role
Parameters
NameInRequiredType
idpathyesstring
Request body

application/jsonDeleteRoleGroupsRequestContent

Responses
StatusDescriptionSchema
204Groups successfully removed from role.
400Invalid request body. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: delete:group_roles.
404The role does not exist.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/roles/{id}/permissionsGet permissions granted by role
Parameters
NameInRequiredType
idpathyesstring
per_pagequerynointeger
pagequerynointeger
include_totalsquerynoboolean
Responses
StatusDescriptionSchema
200Role permissions successfully retrieved.ListRolePermissionsResponseContent
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected: read:roles.
404Role not found.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
POST/roles/{id}/permissionsAssociate permissions with a role
Parameters
NameInRequiredType
idpathyesstring
Request body

application/jsonAddRolePermissionsRequestContent

Responses
StatusDescriptionSchema
201Role permissions updated.
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected: update:roles.
404The role does not exist.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
DELETE/roles/{id}/permissionsRemove permissions from a role
Parameters
NameInRequiredType
idpathyesstring
Request body

application/jsonDeleteRolePermissionsRequestContent

Responses
StatusDescriptionSchema
200Role permissions successfully updated.
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected: update:roles.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/roles/{id}/usersGet a role's users
Parameters
NameInRequiredType
idpathyesstring
per_pagequerynointeger
pagequerynointeger
include_totalsquerynoboolean
fromquerynostring
takequerynointeger
Responses
StatusDescriptionSchema
200Role users successfully retrieved.ListRoleUsersResponseContent
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected all of: read:users, read:roles.
404Role not found.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
POST/roles/{id}/usersAssign users to a role
Parameters
NameInRequiredType
idpathyesstring
Request body

application/jsonAssignRoleUsersRequestContent

Responses
StatusDescriptionSchema
200Role users successfully updated.
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected: update:roles.
404Role not found.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
rules5
GET/rulesGet rules
Parameters
NameInRequiredType
pagequerynointeger
per_pagequerynointeger
include_totalsquerynoboolean
enabledquerynoboolean
fieldsquerynostring
include_fieldsquerynoboolean
Responses
StatusDescriptionSchema
200Rules successfully retrieved.ListRulesResponseContent
400Invalid request query string. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: read:rules.
404Rule not found.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
POST/rulesCreate a rule
Request body

application/jsonCreateRuleRequestContent

Responses
StatusDescriptionSchema
201Rule successfully created.CreateRuleResponseContent
400Invalid request body. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: read:rules.
409A rule with the same name already exists.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/rules/{id}Get a rule
Parameters
NameInRequiredType
idpathyesstring
fieldsquerynostring
include_fieldsquerynoboolean
Responses
StatusDescriptionSchema
200Rule successfully retrieved.GetRuleResponseContent
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: read:rules.
404Rule not found.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
PATCH/rules/{id}Update a rule
Parameters
NameInRequiredType
idpathyesstring
Request body

application/jsonUpdateRuleRequestContent

Responses
StatusDescriptionSchema
200Rule successfully updated.UpdateRuleResponseContent
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: update:rules.
404Rule not found.
409A rule with the same name already exists.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
DELETE/rules/{id}Delete a rule
Parameters
NameInRequiredType
idpathyesstring
Responses
StatusDescriptionSchema
204Rule successfully deleted.
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: delete:rules.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
rules-configs3
GET/rules-configsRetrieve config variable keys for rules (get_rules-configs)
Responses
StatusDescriptionSchema
200Rules config keys successfully retrieved.
401Invalid token.
403Insufficient scope; expected any of: read:rules_configs.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
PUT/rules-configs/{key}Set rules config for a given key
Parameters
NameInRequiredType
keypathyesstring
Request body

application/jsonSetRulesConfigRequestContent

Responses
StatusDescriptionSchema
200Rules config variable successfully set.SetRulesConfigResponseContent
401Invalid token.
403Insufficient scope; expected any of: update:rules_configs.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
DELETE/rules-configs/{key}Delete rules config for a given key
Parameters
NameInRequiredType
keypathyesstring
Responses
StatusDescriptionSchema
204Rules config variable successfully removed.
401Invalid token.
403Insufficient scope; expected any of: update:rules_configs.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
self-service-profiles9
GET/self-service-profilesGet self-service profiles
Parameters
NameInRequiredType
pagequerynointeger
per_pagequerynointeger
include_totalsquerynoboolean
Responses
StatusDescriptionSchema
200List of existing profiles.ListSelfServiceProfilesResponseContent
401Invalid token.
403Insufficient scope, expected: read:self_service_profiles.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
500Internal error.
POST/self-service-profilesCreate a self-service profile
Request body

application/jsonCreateSelfServiceProfileRequestContent

Responses
StatusDescriptionSchema
201Self-service profile successfully created.CreateSelfServiceProfileResponseContent
400Invalid Request Body.
401Invalid token.
403Insufficient scope, expected: create:self_service_profiles.
409No more profiles can be created for this tenant.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
500Internal error.
GET/self-service-profiles/{id}Get a self-service profile by Id
Parameters
NameInRequiredType
idpathyesstring
Responses
StatusDescriptionSchema
200Record for existing self-service profile.GetSelfServiceProfileResponseContent
400Invalid Request.
401Invalid token.
403Insufficient scope, expected: read:self_service_profiles.
404Self-service profile not found
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
500Internal error.
PATCH/self-service-profiles/{id}Update a self-service profile
Parameters
NameInRequiredType
idpathyesstring
Request body

application/jsonUpdateSelfServiceProfileRequestContent

Responses
StatusDescriptionSchema
200Self-service profile successfully updated.UpdateSelfServiceProfileResponseContent
400Invalid Request.
401Invalid token.
403Insufficient scope, expected: update:self_service_profiles.
404Self-service profile not found
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
500Internal error.
DELETE/self-service-profiles/{id}Delete a self-service profile by Id
Parameters
NameInRequiredType
idpathyesstring
Responses
StatusDescriptionSchema
204Self-service profile successfully deleted.
400Invalid Request.
401Invalid token.
403Insufficient scope, expected: delete:self_service_profiles.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
500Internal error.
GET/self-service-profiles/{id}/custom-text/{language}/{page}Get custom text for a self-service profile
Parameters
NameInRequiredType
idpathyesstring
languagepathyes
pagepathyes
Responses
StatusDescriptionSchema
200Retrieved custom text.ListSelfServiceProfileCustomTextResponseContent
401Invalid token.
403Insufficient scope; expected any of: read:self_service_profile_custom_texts.
404Self-service profile not found.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
PUT/self-service-profiles/{id}/custom-text/{language}/{page}Set custom text for a self-service profile
Parameters
NameInRequiredType
idpathyesstring
languagepathyes
pagepathyes
Request body

application/jsonSetSelfServiceProfileCustomTextRequestContent

Responses
StatusDescriptionSchema
200Updated custom text.SetSelfServiceProfileCustomTextResponseContent
401Invalid token.
403Insufficient scope; expected any of: update:self_service_profile_custom_texts.
404Self-service profile not found.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
POST/self-service-profiles/{id}/sso-ticketCreate an access ticket to initiate the Self-Service Enterprise Configuration flow
Parameters
NameInRequiredType
idpathyesstring
auth0-custom-domainheadernostring
Request body

application/jsonCreateSelfServiceProfileSsoTicketRequestContent

Responses
StatusDescriptionSchema
201Self-Service Enterprise Configuration Access Ticket successfully created.CreateSelfServiceProfileSsoTicketResponseContent
400Invalid request body. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: create:sso_access_tickets.
409A connection with this name already exists.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
POST/self-service-profiles/{profileId}/sso-ticket/{id}/revokeRevoke a Self-Service Enterprise Configuration access ticket
Parameters
NameInRequiredType
profileIdpathyesstring
idpathyesstring
Responses
StatusDescriptionSchema
202Self-Service Enterprise Configuration Access Ticket revocation request accepted.
401Invalid token.
403Insufficient scope; expected any of: delete:sso_access_tickets.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
sessions4
GET/sessions/{id}Get session
Parameters
NameInRequiredType
idpathyesstring
Responses
StatusDescriptionSchema
200The session was retrievedGetSessionResponseContent
401Invalid token.
403Insufficient scope, expected any of: read:sessions
404The session does not exist.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
PATCH/sessions/{id}Update session
Parameters
NameInRequiredType
idpathyesstring
Request body

application/jsonUpdateSessionRequestContent

Responses
StatusDescriptionSchema
200Session successfully updated.UpdateSessionResponseContent
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected: update:sessions.
404The session does not exist.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
DELETE/sessions/{id}Delete session
Parameters
NameInRequiredType
idpathyesstring
Responses
StatusDescriptionSchema
202Session deletion request accepted.
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected: delete:sessions
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
POST/sessions/{id}/revokeRevokes a session
Parameters
NameInRequiredType
idpathyesstring
Responses
StatusDescriptionSchema
202Session deletion request accepted.
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected: delete:sessions
404The session does not exist.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
stats2
GET/stats/active-usersGet active users count
Responses
StatusDescriptionSchema
200Number of active users successfully retrieved.GetActiveUsersCountStatsResponseContent
401Invalid token.
403Insufficient scope; expected any of: read:stats.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/stats/dailyGet daily stats
Parameters
NameInRequiredType
fromquerynostring
toquerynostring
Responses
StatusDescriptionSchema
200Daily stats successfully retrieved.
400
401
403
429
supplemental-signals2
GET/supplemental-signalsGet the supplemental signals configuration for a tenant
Responses
StatusDescriptionSchema
200Supplemental Signals configuration successfully retrieved.GetSupplementalSignalsResponseContent
401Invalid token.
403Insufficient scope; expected any of: read:attack_protection.
404Supplemental Signals configuration not found.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
PATCH/supplemental-signalsUpdate the supplemental signals configuration for a tenant
Request body

application/jsonUpdateSupplementalSignalsRequestContent

Responses
StatusDescriptionSchema
200Supplemental Signals configuration successfully updated.PatchSupplementalSignalsResponseContent
401Invalid token.
403Insufficient scope; expected any of: update:attack_protection.
404Supplemental Signals configuration not found.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
tenants2
GET/tenants/settingsGet tenant settings
Parameters
NameInRequiredType
fieldsquerynostring
include_fieldsquerynoboolean
Responses
StatusDescriptionSchema
200Tenant settings successfully retrieved.GetTenantSettingsResponseContent
400Invalid request query string. The message will vary depending on the cause.
401Invalid token.
403The specified client cannot perform the requested operation.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
PATCH/tenants/settingsUpdate tenant settings
Request body

application/jsonUpdateTenantSettingsRequestContent

Responses
StatusDescriptionSchema
200Tenant settings successfully updated.UpdateTenantSettingsResponseContent
400Invalid request body. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: update:tenant_settings.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
tickets2
POST/tickets/email-verificationCreate an email verification ticket
Parameters
NameInRequiredType
auth0-custom-domainheadernostring
Request body

application/jsonVerifyEmailTicketRequestContent

Responses
StatusDescriptionSchema
201Ticket successfully created.VerifyEmailTicketResponseContent
400Invalid request body. The message will vary depending on the cause.
401Invalid token.
403User to be acted on does not match subject in bearer token.
404User not found.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
POST/tickets/password-changeCreate a password change ticket
Parameters
NameInRequiredType
auth0-custom-domainheadernostring
Request body

application/jsonChangePasswordTicketRequestContent

Responses
StatusDescriptionSchema
201Ticket successfully created.ChangePasswordTicketResponseContent
400Invalid request body. The message will vary depending on the cause.
401Invalid token.
403User to be acted on does not match subject in bearer token.
404User not found.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
token-exchange-profiles5
GET/token-exchange-profilesGet token exchange profiles
Parameters
NameInRequiredType
fromquerynostring
takequerynointeger
Responses
StatusDescriptionSchema
200Token Exchange Profile successfully retrieved.ListTokenExchangeProfileResponseContent
400Invalid request query string. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: read:token_exchange_profiles.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
POST/token-exchange-profilesCreate a token exchange profile
Request body

application/jsonCreateTokenExchangeProfileRequestContent

Responses
StatusDescriptionSchema
201Token exchange profile successfully created.CreateTokenExchangeProfileResponseContent
400Type field must be custom
401Invalid token.
403You reached the limit of entities of this type for this tenant.
409subject_token_type already exists for tenant
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/token-exchange-profiles/{id}Get a token exchange profile
Parameters
NameInRequiredType
idpathyesstring
Responses
StatusDescriptionSchema
200Token Exchange Profile successfully retrieved.GetTokenExchangeProfileResponseContent
400Invalid request query string. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: read:token_exchange_profiles.
404Token Exchange Profile not found.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
PATCH/token-exchange-profiles/{id}Update an existing token exchange profile
Parameters
NameInRequiredType
idpathyesstring
Request body

application/jsonUpdateTokenExchangeProfileRequestContent

Responses
StatusDescriptionSchema
200Token exchange profile successfully updated.
400subject_token_type already exists for tenant
401Invalid token.
403Insufficient scope; expected any of: update:token_exchange_profiles.
404Token exchange profile not found.
409Token exchange profile with the same subject_token_type already exists
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
DELETE/token-exchange-profiles/{id}Delete a token exchange profile
Parameters
NameInRequiredType
idpathyesstring
Responses
StatusDescriptionSchema
204Token Exchange Profile successfully deleted.
401Invalid token.
403Insufficient scope; expected any of: delete:token_exchange_profiles.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
user-attribute-profiles7
GET/user-attribute-profilesGet User Attribute Profiles
Parameters
NameInRequiredType
fromquerynostring
takequerynointeger
Responses
StatusDescriptionSchema
200User Attribute Profiles successfully retrieved.ListUserAttributeProfilesPaginatedResponseContent
400Invalid request query string. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: read:user_attribute_profiles.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
POST/user-attribute-profilesPost User Attribute Profile
Request body

application/jsonCreateUserAttributeProfileRequestContent

Responses
StatusDescriptionSchema
201User attribute successfully created.CreateUserAttributeProfileResponseContent
400Invalid request body. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: create:user_attribute_profiles.
409User attribute profile conflict.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/user-attribute-profiles/templatesGet User Attribute Profile Templates
Responses
StatusDescriptionSchema
200User Attribute Profile Templates successfully retrieved.ListUserAttributeProfileTemplateResponseContent
401Invalid token.
403Insufficient scope; expected any of: read:user_attribute_profiles.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/user-attribute-profiles/templates/{id}Get User Attribute Profile Template
Parameters
NameInRequiredType
idpathyesstring
Responses
StatusDescriptionSchema
200User Attribute Profile Template successfully retrieved.GetUserAttributeProfileTemplateResponseContent
401Invalid token.
403Insufficient scope; expected any of: read:user_attribute_profiles.
404User attribute profile template not found.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/user-attribute-profiles/{id}Get User Attribute Profile
Parameters
NameInRequiredType
idpathyesstring
Responses
StatusDescriptionSchema
200Record for existing user attribute profile.GetUserAttributeProfileResponseContent
401Invalid token.
403Insufficient scope; expected any of: read:user-attribute-profiles.
404User attribute profile not found.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
PATCH/user-attribute-profiles/{id}Modify a user attribute profile
Parameters
NameInRequiredType
idpathyesstring
Request body

application/jsonUpdateUserAttributeProfileRequestContent

Responses
StatusDescriptionSchema
200User attribute profile successfully updated.UpdateUserAttributeProfileResponseContent
400Invalid request body. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: update:user_attribute_profiles.
404User attribute profile not found.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
DELETE/user-attribute-profiles/{id}Delete User Attribute Profile
Parameters
NameInRequiredType
idpathyesstring
Responses
StatusDescriptionSchema
204User attribute profile successfully deleted.
401Invalid token.
403Insufficient scope; expected any of: delete:user-attribute-profiles.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
user-blocks4
GET/user-blocksGet blocks by identifier
Parameters
NameInRequiredType
identifierqueryyesstring
consider_brute_force_enablementquerynoboolean
Responses
StatusDescriptionSchema
200User successfully retrieved.ListUserBlocksByIdentifierResponseContent
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: read:users.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
DELETE/user-blocksUnblock by identifier
Parameters
NameInRequiredType
identifierqueryyesstring
Responses
StatusDescriptionSchema
204User successfully unblocked.
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403Some fields cannot be read with the permissions granted by the bearer token scopes. The message will vary depending on the fields and the scopes.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/user-blocks/{id}Get a user's blocks
Parameters
NameInRequiredType
idpathyesstring
consider_brute_force_enablementquerynoboolean
Responses
StatusDescriptionSchema
200User block successfully retrieved.ListUserBlocksResponseContent
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403User to be acted on does not match subject in bearer token.
404User not found.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
DELETE/user-blocks/{id}Unblock a user
Parameters
NameInRequiredType
idpathyesstring
Responses
StatusDescriptionSchema
204User successfully unblocked.
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403User to be acted on does not match subject in bearer token.
404User not found.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
users39
GET/usersList or Search Users
Parameters
NameInRequiredType
pagequerynointeger
per_pagequerynointeger
include_totalsquerynoboolean
sortquerynostring
connectionquerynostring
fieldsquerynostring
include_fieldsquerynoboolean
qquerynostring
search_enginequeryno
primary_orderquerynoboolean
Responses
StatusDescriptionSchema
200Users successfully retrieved.ListUsersResponseContent
400Invalid request query string. The message will vary depending on the cause.
401Client is not global.
403Insufficient scope, expected any of: read:users.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
503The query exceeded the timeout. Please try refining your search criteria. See https://auth0.com/docs/best-practices/search-best-practices.
POST/usersCreate a User
Parameters
NameInRequiredType
auth0-custom-domainheadernostring
Request body

application/jsonCreateUserRequestContent

Responses
StatusDescriptionSchema
201User successfully created.CreateUserResponseContent
400Invalid request body. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope, expected any of: create:users.
409User already exists.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/users/{id}Get a User
Parameters
NameInRequiredType
idpathyesstring
fieldsquerynostring
include_fieldsquerynoboolean
Responses
StatusDescriptionSchema
200User successfully retrieved.GetUserResponseContent
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403User to be acted on does not match subject in bearer token.
404User not found.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
PATCH/users/{id}Update a User
Parameters
NameInRequiredType
idpathyesstring
auth0-custom-domainheadernostring
Request body

application/jsonUpdateUserRequestContent

Responses
StatusDescriptionSchema
200User successfully updated.UpdateUserResponseContent
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403User to be acted on does not match subject in bearer token.
404User not found.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
DELETE/users/{id}Delete a User
Parameters
NameInRequiredType
idpathyesstring
Responses
StatusDescriptionSchema
204User successfully deleted.
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403User to be acted on does not match subject in bearer token.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/users/{id}/authentication-methodsGet a list of authentication methods
Parameters
NameInRequiredType
idpathyesstring
pagequerynointeger
per_pagequerynointeger
include_totalsquerynoboolean
Responses
StatusDescriptionSchema
200The authentication methods for the user were retrieved.ListUserAuthenticationMethodsResponseContent
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403User to be acted on does not match subject in bearer token.
404The user does not exist.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
POST/users/{id}/authentication-methodsCreates an authentication method for a given user
Parameters
NameInRequiredType
idpathyesstring
Request body

application/jsonCreateUserAuthenticationMethodRequestContent

Responses
StatusDescriptionSchema
201Authentication method created.CreateUserAuthenticationMethodResponseContent
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403You reached the limit of entities of this type for this user.
404The user does not exist.
409Authentication method already exists.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
PUT/users/{id}/authentication-methodsUpdate all authentication methods by replacing them with the given ones
Parameters
NameInRequiredType
idpathyesstring
Request body

application/jsonSetUserAuthenticationMethodsRequestContent

Responses
StatusDescriptionSchema
200All authentication methods successfully updated.
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403User to be acted on does not match subject in bearer token.
409Authentication method already exists.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
DELETE/users/{id}/authentication-methodsDelete all authentication methods for the given user
Parameters
NameInRequiredType
idpathyesstring
Responses
StatusDescriptionSchema
204Authentication methods successfully deleted.
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403User to be acted on does not match subject in bearer token.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/users/{id}/authentication-methods/{authentication_method_id}Get an authentication method by ID
Parameters
NameInRequiredType
idpathyesstring
authentication_method_idpathyesstring
Responses
StatusDescriptionSchema
200Authentication method retrieved.GetUserAuthenticationMethodResponseContent
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403User to be acted on does not match subject in bearer token.
404The user does not exist.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
PATCH/users/{id}/authentication-methods/{authentication_method_id}Update an authentication method
Parameters
NameInRequiredType
idpathyesstring
authentication_method_idpathyesstring
Request body

application/jsonUpdateUserAuthenticationMethodRequestContent

Responses
StatusDescriptionSchema
200Authentication method updated.UpdateUserAuthenticationMethodResponseContent
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403User to be acted on does not match subject in bearer token.
404The user does not exist.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
DELETE/users/{id}/authentication-methods/{authentication_method_id}Delete an authentication method by ID
Parameters
NameInRequiredType
idpathyesstring
authentication_method_idpathyesstring
Responses
StatusDescriptionSchema
204Authentication method successfully deleted.
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403User to be acted on does not match subject in bearer token.
404The user does not exist.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
DELETE/users/{id}/authenticatorsDelete All Authenticators
Parameters
NameInRequiredType
idpathyesstring
Responses
StatusDescriptionSchema
204All authenticators successfully deleted.
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403User to be acted on does not match subject in bearer token.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/users/{id}/connected-accountsGet a User's Connected Accounts
Parameters
NameInRequiredType
idpathyesstring
fromquerynostring
takequerynointeger
Responses
StatusDescriptionSchema
200Connected accounts successfully retrieved.ListUserConnectedAccountsResponseContent
400Invalid request query string. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: read:users.
404The user does not exist.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/users/{id}/effective-permissionsLists the permissions assigned to a user directly or through roles or groups.
Parameters
NameInRequiredType
idpathyesstring
fromquerynostring
takequerynointeger
resource_server_identifierqueryyesstring
Responses
StatusDescriptionSchema
200User's effective permissions successfully retrieved.ListUserEffectivePermissionsResponseContent
400Invalid request query string. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: read:user_effective_permissions.
404User does not exist.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/users/{id}/effective-permissions/sources/effective-rolesLists the roles which grant the user a given permission (whether directly or through groups).
Parameters
NameInRequiredType
idpathyesstring
fromquerynostring
takequerynointeger
resource_server_identifierqueryyesstring
permission_namequeryyesstring
Responses
StatusDescriptionSchema
200User's effective permission role sources successfully retrieved.ListUserEffectivePermissionRoleSourcesResponseContent
400Invalid request query string. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: read:user_permission_source_roles.
404User does not exist.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/users/{id}/effective-rolesLists the roles for a user with sources: directly assigned or through group membership.
Parameters
NameInRequiredType
idpathyesstring
fromquerynostring
takequerynointeger
Responses
StatusDescriptionSchema
200User's effective roles successfully retrieved.ListUserEffectiveRolesResponseContent
400Invalid request query string. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: read:user_effective_roles.
404The user does not exist.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/users/{id}/effective-roles/sources/groupsGet a user's role source groups
Parameters
NameInRequiredType
idpathyesstring
role_idqueryyesstring
fromquerynostring
takequerynointeger
Responses
StatusDescriptionSchema
200User's role source groups successfully retrieved.ListUserRoleSourceGroupsResponseContent
400Invalid request query string. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: read:user_role_source_groups.
404The role does not exist.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/users/{id}/enrollmentsGet the First Confirmed Multi-factor Authentication (MFA) Enrollment
Parameters
NameInRequiredType
idpathyesstring
Responses
StatusDescriptionSchema
200Enrollments successfully retrieved.
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403User to be acted on does not match subject in bearer token.
404User not found.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/users/{id}/groupsGet user's groups
Parameters
NameInRequiredType
idpathyesstring
fieldsquerynostring
include_fieldsquerynoboolean
pagequerynointeger
per_pagequerynointeger
include_totalsquerynoboolean
fromquerynostring
takequerynointeger
Responses
StatusDescriptionSchema
200Groups successfully retrieved.GetUserGroupsResponseContent
400Invalid request query string. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: read:groups.
404Not Found
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
POST/users/{id}/identitiesLink a User Account
Parameters
NameInRequiredType
idpathyesstring
Request body

application/jsonLinkUserIdentityRequestContent

Responses
StatusDescriptionSchema
201Identity successfully added.
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected: update:users, update:current_user_identities.
409Specified identity already exists.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
DELETE/users/{id}/identities/{provider}/{user_id}Unlink a User Identity
Parameters
NameInRequiredType
idpathyesstring
providerpathyes
user_idpathyesstring
Responses
StatusDescriptionSchema
200User identity successfully unlinked.DeleteUserIdentityResponseContent
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected: update:users, update:current_user_identities.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/users/{id}/logsGet user's log events
Parameters
NameInRequiredType
idpathyesstring
pagequerynointeger
per_pagequerynointeger
sortquerynostring
include_totalsquerynoboolean
Responses
StatusDescriptionSchema
200Logs successfully retrieved.UserListLogResponseContent
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: read:logs, read:logs_users.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
POST/users/{id}/multifactor/actions/invalidate-remember-browserInvalidate All Remembered Browsers for Multi-factor Authentication (MFA)
Parameters
NameInRequiredType
idpathyesstring
Responses
StatusDescriptionSchema
204Remembered browsers for MFA invalidated.
400Invalid input based on schemas.
401Token has expired or signature is invalid.
403Insufficient scope; expected: update:users.
DELETE/users/{id}/multifactor/{provider}Delete a User's Multi-factor Provider
Parameters
NameInRequiredType
idpathyesstring
providerpathyes
Responses
StatusDescriptionSchema
204Multi-factor provider successfully deleted for user.
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403User to be acted on does not match subject in bearer token.
404User not found.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/users/{id}/organizationsList user's organizations
Parameters
NameInRequiredType
idpathyesstring
pagequerynointeger
per_pagequerynointeger
include_totalsquerynoboolean
Responses
StatusDescriptionSchema
200Organizations successfully retrieved.ListUserOrganizationsResponseContent
401Invalid token.
403Insufficient scope; expected any of: read:users, read:organizations.
404The user does not exist.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/users/{id}/permissionsGet a User's Permissions
Parameters
NameInRequiredType
idpathyesstring
per_pagequerynointeger
pagequerynointeger
include_totalsquerynoboolean
Responses
StatusDescriptionSchema
200Permissions successfully retrieved.ListUserPermissionsResponseContent
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected: read:users.
404User not found.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
POST/users/{id}/permissionsAssign Permissions to a User
Parameters
NameInRequiredType
idpathyesstring
Request body

application/jsonCreateUserPermissionsRequestContent

Responses
StatusDescriptionSchema
201Permissions assigned to user.
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected: update:users.
404The user does not exist.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
DELETE/users/{id}/permissionsRemove Permissions from a User
Parameters
NameInRequiredType
idpathyesstring
Request body

application/jsonDeleteUserPermissionsRequestContent

Responses
StatusDescriptionSchema
204User permissions removed.
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected: update:users.
404The user does not exist.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
POST/users/{id}/recovery-code-regenerationGenerate New Multi-factor Authentication (MFA) Recovery Code
Parameters
NameInRequiredType
idpathyesstring
Responses
StatusDescriptionSchema
200New recovery code successfully generated.RegenerateUsersRecoveryCodeResponseContent
400Invalid input based on schemas.
401Token has expired or signature is invalid.
403Insufficient scope; expected: update:users.
404Enrollment not found.
POST/users/{id}/revoke-accessRevokes selected resources from a user
Parameters
NameInRequiredType
idpathyesstring
Request body

application/jsonRevokeUserAccessRequestContent

Responses
StatusDescriptionSchema
202Session deletion request accepted.
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected: delete:sessions
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
POST/users/{id}/risk-assessments/clearClear risk assessment assessors for a specific user
Parameters
NameInRequiredType
idpathyesstring
Request body

application/jsonClearAssessorsRequestContent

Responses
StatusDescriptionSchema
204Risk assessment assessors cleared.
400Invalid request body. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: update:users.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/users/{id}/rolesGet a user's roles
Parameters
NameInRequiredType
idpathyesstring
per_pagequerynointeger
pagequerynointeger
include_totalsquerynoboolean
Responses
StatusDescriptionSchema
200Roles successfully retrieved.ListUserRolesResponseContent
400Invalid request query string. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected all of: read:users, read:roles, read:role_members.
404User not found.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
POST/users/{id}/rolesAssign roles to a user
Parameters
NameInRequiredType
idpathyesstring
Request body

application/jsonAssignUserRolesRequestContent

Responses
StatusDescriptionSchema
204Roles successfully associated with user.
400Invalid request body. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: read:roles, update:users.
404The user does not exist.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
DELETE/users/{id}/rolesRemoves roles from a user
Parameters
NameInRequiredType
idpathyesstring
Request body

application/jsonDeleteUserRolesRequestContent

Responses
StatusDescriptionSchema
204Users roles successfully removed.
401Invalid token.
403Insufficient scope; expected any of: update:users.
404The user does not exist.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/users/{user_id}/refresh-tokensGet refresh tokens for a user
Parameters
NameInRequiredType
user_idpathyesstring
include_totalsquerynoboolean
fromquerynostring
takequerynointeger
Responses
StatusDescriptionSchema
200The refresh tokens were retrievedListRefreshTokensPaginatedResponseContent
401Invalid token.
403Insufficient scope, expected: read:refresh_tokens
404User not found
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
DELETE/users/{user_id}/refresh-tokensDelete refresh tokens for a user
Parameters
NameInRequiredType
user_idpathyesstring
Responses
StatusDescriptionSchema
202Refresh token deletion request accepted.
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected: delete:refresh_tokens
404User not found
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/users/{user_id}/sessionsGet sessions for user
Parameters
NameInRequiredType
user_idpathyesstring
include_totalsquerynoboolean
fromquerynostring
takequerynointeger
Responses
StatusDescriptionSchema
200The sessions were retrievedListUserSessionsPaginatedResponseContent
401Invalid token.
403Insufficient scope, expected any of: read:sessions
404User not found
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
DELETE/users/{user_id}/sessionsDelete sessions for user
Parameters
NameInRequiredType
user_idpathyesstring
Responses
StatusDescriptionSchema
202Session deletion request accepted.
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected: delete:sessions
404User not found
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
users-by-email1
GET/users-by-emailSearch Users by Email
Parameters
NameInRequiredType
fieldsquerynostring
include_fieldsquerynoboolean
emailqueryyesstring
Responses
StatusDescriptionSchema
200Users successfully searched.
400Invalid request URI. The message will vary depending on the cause.
401Invalid token.
403User to be acted on does not match subject in bearer token.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
verifiable-credentials5
GET/verifiable-credentials/verification/templatesList verifiable credential templates for a tenant.
Parameters
NameInRequiredType
fromquerynostring
takequerynointeger
Responses
StatusDescriptionSchema
200Templates successfully retrieved.ListVerifiableCredentialTemplatesPaginatedResponseContent
400Invalid request body. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: read:vdcs_templates.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
POST/verifiable-credentials/verification/templatesCreate a verifiable credential template.
Request body

application/jsonCreateVerifiableCredentialTemplateRequestContent

Responses
StatusDescriptionSchema
201Template successfully created.CreateVerifiableCredentialTemplateResponseContent
400Invalid request body. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: update:vdcs_templates.
409Template (name) already exists.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
GET/verifiable-credentials/verification/templates/{id}Get a verifiable credential template by ID.
Parameters
NameInRequiredType
idpathyesstring
Responses
StatusDescriptionSchema
200Template successfully retrieved.GetVerifiableCredentialTemplateResponseContent
400Invalid request body. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: read:vdcs_templates.
404The verifiable credential template does not exist.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
PATCH/verifiable-credentials/verification/templates/{id}Update a verifiable credential template by ID.
Parameters
NameInRequiredType
idpathyesstring
Request body

application/jsonUpdateVerifiableCredentialTemplateRequestContent

Responses
StatusDescriptionSchema
200Template successfully updated.UpdateVerifiableCredentialTemplateResponseContent
400Invalid request body. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: update:vdcs_templates.
409Template (name) already exists.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.
DELETE/verifiable-credentials/verification/templates/{id}Delete a verifiable credential template by ID.
Parameters
NameInRequiredType
idpathyesstring
Responses
StatusDescriptionSchema
204Template successfully deleted.
400Invalid request body. The message will vary depending on the cause.
401Invalid token.
403Insufficient scope; expected any of: delete:vdcs_templates.
429Too many requests. Check the X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers.

Try it

Developer reference

Base URLhttps://{TENANT}.auth0.com/api/v2
Rate limit

Enforced per-tenant (not per-endpoint) via a token-bucket burst+sustained model, and varies by subscription: Free/Development tenants get a 2 requests/second sustained ceiling (burst 2) for general Management API calls, with narrower per-endpoint carve-outs (e.g. connection-status reads at 15/second, dynamic client registration at 5/second); paid Essentials/Professional/Enterprise tenants get higher published ceilings. Every response carries X-RateLimit-Limit, X-RateLimit-Remaining, and X-RateLimit-Reset (Unix timestamp) headers, and exceeding the limit returns 429 -- Auth0 recommends backing off until X-RateLimit-Reset rather than retrying immediately.

Key endpoints
  • GET/users
  • GET/clients
  • GET/connections
  • GET/roles
  • GET/organizations