GENERATED CLIENT — raw API coverage. This package is generated from the LumoAuth OpenAPI spec (api-clients/openapi.json) by the sdk-codegen pipeline. It covers the full REST surface with typed models but no framework sugar. An ergonomic, hand-maintained wrapper is the next step — where one already exists (@lumoauth/client / @lumoauth/backend and friends on npm, lumoauth on PyPI, github.com/lumoauth/lumo-auth-go), prefer it. Do not edit by hand: changes are overwritten on the next regeneration.

lumoauth-api-client

LumoAuth REST API — authentication, authorization, agent registry, MCP server authorization, and tenant administration. Multi-tenant: most paths are scoped under /orgs/{orgId}/api/v1/....

This Python package is automatically generated by the OpenAPI Generator project:

API version: 1.0.0
Package version: 1.1.0
Generator version: 7.14.0
Build package: org.openapitools.codegen.languages.PythonClientCodegen For more information, please visit https://lumoauth.dev

Requirements.

Python 3.9+

Installation & Usage

pip install

If the python package is hosted on a repository, you can install directly using:

pip install git+https://github.com/lumoauth/api-clients.git

(you may need to run pip with root permission: sudo pip install git+https://github.com/lumoauth/api-clients.git)

Then import the package:

import lumoauth_api_client

Setuptools

Install via Setuptools.

python setup.py install --user

(or sudo python setup.py install to install the package for all users)

Then import the package:

import lumoauth_api_client

Tests

Execute pytest to run the tests.

Getting Started

Please follow the installation procedure and then run the following:

import lumoauth_api_client
from lumoauth_api_client.rest import ApiException
from pprint import pprint

# Defining the host is optional and defaults to https://app.lumoauth.dev
# See configuration.py for a list of all supported configuration parameters.
configuration = lumoauth_api_client.Configuration(
    host = "https://app.lumoauth.dev"
)

# The client must configure the authentication and authorization parameters
# in accordance with the API server security policy.
# Examples for each auth method are provided below, use the example that
# satisfies your auth use case.

# Configure Bearer authorization (JWT): AAuthSigned
configuration = lumoauth_api_client.Configuration(
    access_token = os.environ["BEARER_TOKEN"]
)


# Enter a context with an instance of the API client
with lumoauth_api_client.ApiClient(configuration) as api_client:
    # Create an instance of the API class
    api_instance = lumoauth_api_client.AAuthApi(api_client)
    org_id = 'org_id_example' # str | 

    try:
        # Agent Auth Endpoint - redirects to user consent page.
        api_instance.authorize_agent(org_id)
    except ApiException as e:
        print("Exception when calling AAuthApi->authorize_agent: %s\n" % e)

Documentation for API Endpoints

All URIs are relative to https://app.lumoauth.dev

Class	Method	HTTP request	Description
AAuthApi	authorize_agent	GET /orgs/{orgId}/api/v1/aauth/agent/auth	Agent Auth Endpoint - redirects to user consent page.
AAuthApi	get_agent_jwks	GET /orgs/{orgId}/api/v1/aauth/agents/{agentId}/jwks.json	Agent JWKS endpoint
AAuthApi	get_agent_metadata	GET /orgs/{orgId}/api/v1/.well-known/aauth-agent	Agent Metadata (Section 8.1) Published at /.well-known/aauth-agent for registered agents.
AAuthApi	get_agent_metadata_by_id	GET /orgs/{orgId}/api/v1/aauth/agents/{agentId}/metadata	Individual Agent Metadata
AAuthApi	get_issuer_jwks	GET /orgs/{orgId}/api/v1/aauth/jwks.json	Auth Server JWKS endpoint for AAuth.
AAuthApi	get_issuer_metadata	GET /orgs/{orgId}/api/v1/.well-known/aauth-issuer	Auth Server Metadata (Section 8.2) Published at /.well-known/aauth-issuer for each tenant.
AAuthApi	get_resource_jwks	GET /orgs/{orgId}/api/v1/aauth/resources/{resourceId}/jwks.json	Resource JWKS endpoint
AAuthApi	get_resource_metadata	GET /orgs/{orgId}/api/v1/.well-known/aauth-resource	Resource Metadata (Section 8.3)
AAuthApi	get_resource_metadata_by_id	GET /orgs/{orgId}/api/v1/aauth/resources/{resourceId}/metadata	Individual Resource Metadata
AAuthApi	issue_agent_token	POST /orgs/{orgId}/api/v1/aauth/agent/token	Agent Token Endpoint
AAuthApi	issue_delegate_token	POST /orgs/{orgId}/api/v1/aauth/agent/issue	Issue an agent token to a delegate.
AAuthApi	issue_platform_token	POST /orgs/{orgId}/api/v1/aauth/agent/platform-token
AAuthApi	issue_resource_token	POST /orgs/{orgId}/api/v1/aauth/resource/token	Resource Token Endpoint (Section 6)
AAuthApi	revoke_agent_token	POST /orgs/{orgId}/api/v1/aauth/token/revoke	Revoke an auth token or refresh token.
AAuthApi	verify_auth_token	POST /orgs/{orgId}/api/v1/aauth/auth/token/verify	Auth Token Verification endpoint.
AAuthApi	verify_resource_token	POST /orgs/{orgId}/api/v1/aauth/resource/token/verify	Resource Token Verification (for resources to validate their own tokens).
AdminAbacApi	abac_attributes_create	POST /orgs/{orgId}/api/v1/abac/attributes	Create an attribute definition
AdminAbacApi	abac_attributes_delete	DELETE /orgs/{orgId}/api/v1/abac/attributes/{id}	Delete an attribute definition
AdminAbacApi	abac_attributes_get	GET /orgs/{orgId}/api/v1/abac/attributes/{id}	Get an attribute definition
AdminAbacApi	abac_attributes_list	GET /orgs/{orgId}/api/v1/abac/attributes	List attribute definitions
AdminAbacApi	abac_policies_create	POST /orgs/{orgId}/api/v1/abac/policies	Create an ABAC policy
AdminAbacApi	abac_policies_delete	DELETE /orgs/{orgId}/api/v1/abac/policies/{id}	Delete an ABAC policy
AdminAbacApi	abac_policies_get	GET /orgs/{orgId}/api/v1/abac/policies/{id}	Get an ABAC policy
AdminAbacApi	abac_policies_list	GET /orgs/{orgId}/api/v1/abac/policies	List ABAC policies
AdminAbacApi	abac_policies_toggle	POST /orgs/{orgId}/api/v1/abac/policies/{id}/toggle	Toggle a policy between active and inactive
AdminAbacApi	patch_abac_attributes_update	PATCH /orgs/{orgId}/api/v1/abac/attributes/{id}	Partially update an attribute definition
AdminAbacApi	patch_abac_policies_update	PATCH /orgs/{orgId}/api/v1/abac/policies/{id}	Partially update an ABAC policy
AdminAbacApi	put_abac_attributes_update	PUT /orgs/{orgId}/api/v1/abac/attributes/{id}	Update an attribute definition
AdminAbacApi	put_abac_policies_update	PUT /orgs/{orgId}/api/v1/abac/policies/{id}	Update an ABAC policy
AdminAgentsApi	admin_agents_activate	POST /orgs/{orgId}/api/v1/admin/agents/{agentId}/activate	Activate an agent
AdminAgentsApi	admin_agents_agents_disable	POST /orgs/{orgId}/api/v1/admin/agents/{agentId}/disable	Disable agent
AdminAgentsApi	admin_agents_agents_enable	POST /orgs/{orgId}/api/v1/admin/agents/{agentId}/enable	Enable agent
AdminAgentsApi	admin_agents_agents_rotate_key	POST /orgs/{orgId}/api/v1/admin/agents/{agentId}/rotate-key	Rotate agent API key
AdminAgentsApi	admin_agents_create	POST /orgs/{orgId}/api/v1/admin/agents	Create a new agent
AdminAgentsApi	admin_agents_deactivate	POST /orgs/{orgId}/api/v1/admin/agents/{agentId}/deactivate	Deactivate an agent
AdminAgentsApi	admin_agents_delete	DELETE /orgs/{orgId}/api/v1/admin/agents/{agentId}	Delete an agent
AdminAgentsApi	admin_agents_generate_token	POST /orgs/{orgId}/api/v1/admin/agents/{agentId}/token	Generate a token for the agent
AdminAgentsApi	admin_agents_get	GET /orgs/{orgId}/api/v1/admin/agents/{agentId}	Get a single agent by ID or agentId
AdminAgentsApi	admin_agents_get_scopes	GET /orgs/{orgId}/api/v1/admin/agents/{agentId}/scopes	Get agent scopes/capabilities
AdminAgentsApi	admin_agents_list	GET /orgs/{orgId}/api/v1/admin/agents	List all agents in the tenant
AdminAgentsApi	admin_agents_revoke_key	POST /orgs/{orgId}/api/v1/admin/agents/{agentId}/revoke-key	Revoke agent API key (nullify it so it can no longer authenticate)
AdminAgentsApi	admin_agents_rotate_credentials	POST /orgs/{orgId}/api/v1/admin/agents/{agentId}/rotate-credentials	Rotate agent credentials
AdminAgentsApi	admin_agents_set_scopes	PUT /orgs/{orgId}/api/v1/admin/agents/{agentId}/scopes	Update agent scopes/capabilities
AdminAgentsApi	patch_admin_agents_update	PATCH /orgs/{orgId}/api/v1/admin/agents/{agentId}	Update an existing agent
AdminAgentsApi	put_admin_agents_update	PUT /orgs/{orgId}/api/v1/admin/agents/{agentId}	Update an existing agent
AdminAuditLogsApi	admin_audit_logs_actions	GET /orgs/{orgId}/api/v1/admin/audit-logs/actions	List the distinct audit action types recorded for the tenant
AdminAuditLogsApi	admin_audit_logs_export	GET /orgs/{orgId}/api/v1/admin/audit-logs/export	Export audit logs as CSV (default) or JSON
AdminAuditLogsApi	admin_audit_logs_get	GET /orgs/{orgId}/api/v1/admin/audit-logs/{logId}	Get an audit log entry
AdminAuditLogsApi	admin_audit_logs_list	GET /orgs/{orgId}/api/v1/admin/audit-logs	List audit log entries
AdminAuditLogsApi	admin_audit_logs_retention	GET /orgs/{orgId}/api/v1/admin/audit-logs/retention	Get audit log retention settings
AdminAuditLogsApi	admin_audit_logs_stats	GET /orgs/{orgId}/api/v1/admin/audit-logs/stats	Audit log statistics for a period (default: last 30 days)
AdminAuditLogsApi	patch_admin_audit_logs_retention_update	PATCH /orgs/{orgId}/api/v1/admin/audit-logs/retention	Update audit log retention settings
AdminAuditLogsApi	put_admin_audit_logs_retention_update	PUT /orgs/{orgId}/api/v1/admin/audit-logs/retention	Update audit log retention settings
AdminEmailApi	admin_email_templates_delete	DELETE /orgs/{orgId}/api/v1/admin/email-templates/{type}	Remove the custom email template so the built-in default is used
AdminEmailApi	admin_email_templates_get	GET /orgs/{orgId}/api/v1/admin/email-templates/{type}	Get an email template (custom or built-in default)
AdminEmailApi	admin_email_templates_list	GET /orgs/{orgId}/api/v1/admin/email-templates	List every email template type with its current (custom or built-in) template
AdminEmailApi	admin_email_templates_preview	POST /orgs/{orgId}/api/v1/admin/email-templates/{type}/preview	Render an email template with sample data
AdminEmailApi	admin_email_templates_upsert	PUT /orgs/{orgId}/api/v1/admin/email-templates/{type}	Create or replace the custom email template for a type
AdminEmailApi	admin_email_templates_variables	GET /orgs/{orgId}/api/v1/admin/email-templates/{type}/variables	List the placeholders available to an email template type
AdminGroupsApi	admin_groups_add_members	POST /orgs/{orgId}/api/v1/admin/groups/{groupId}/members	Add member(s) to group
AdminGroupsApi	admin_groups_add_role	POST /orgs/{orgId}/api/v1/admin/groups/{groupId}/roles	Add a single role to a group
AdminGroupsApi	admin_groups_create	POST /orgs/{orgId}/api/v1/admin/groups	Create a new group
AdminGroupsApi	admin_groups_delete	DELETE /orgs/{orgId}/api/v1/admin/groups/{groupId}	Delete a group
AdminGroupsApi	admin_groups_get	GET /orgs/{orgId}/api/v1/admin/groups/{groupId}	Get a single group by ID or slug
AdminGroupsApi	admin_groups_get_members	GET /orgs/{orgId}/api/v1/admin/groups/{groupId}/members	Get group members
AdminGroupsApi	admin_groups_groups_get_roles	GET /orgs/{orgId}/api/v1/admin/groups/{groupId}/roles	Get group roles
AdminGroupsApi	admin_groups_list	GET /orgs/{orgId}/api/v1/admin/groups	List all groups in the tenant
AdminGroupsApi	admin_groups_remove_member	DELETE /orgs/{orgId}/api/v1/admin/groups/{groupId}/members/{userId}	Remove member from group
AdminGroupsApi	admin_groups_remove_role	DELETE /orgs/{orgId}/api/v1/admin/groups/{groupId}/roles/{roleId}	Remove a role from a group
AdminGroupsApi	admin_groups_update_roles	PUT /orgs/{orgId}/api/v1/admin/groups/{groupId}/roles	Update group roles (replaces all existing roles)
AdminGroupsApi	patch_admin_groups_update	PATCH /orgs/{orgId}/api/v1/admin/groups/{groupId}	Update an existing group
AdminGroupsApi	put_admin_groups_update	PUT /orgs/{orgId}/api/v1/admin/groups/{groupId}	Update an existing group
AdminIdentityProvidersApi	admin_social_providers_available	GET /orgs/{orgId}/api/v1/admin/social-providers/available	List the available social login provider types
AdminIdentityProvidersApi	admin_social_providers_callback_urls	GET /orgs/{orgId}/api/v1/admin/social-providers/callback-urls	Get the OAuth callback URL of every configured provider
AdminIdentityProvidersApi	admin_social_providers_create	POST /orgs/{orgId}/api/v1/admin/social-providers	Create a social login provider
AdminIdentityProvidersApi	admin_social_providers_delete	DELETE /orgs/{orgId}/api/v1/admin/social-providers/{providerId}	Delete a social login provider
AdminIdentityProvidersApi	admin_social_providers_disable	POST /orgs/{orgId}/api/v1/admin/social-providers/{providerId}/disable	Disable a social login provider
AdminIdentityProvidersApi	admin_social_providers_enable	POST /orgs/{orgId}/api/v1/admin/social-providers/{providerId}/enable	Enable a social login provider
AdminIdentityProvidersApi	admin_social_providers_get	GET /orgs/{orgId}/api/v1/admin/social-providers/{providerId}	Get a social login provider
AdminIdentityProvidersApi	admin_social_providers_list	GET /orgs/{orgId}/api/v1/admin/social-providers	List social login providers
AdminIdentityProvidersApi	admin_social_providers_types	GET /orgs/{orgId}/api/v1/admin/social-providers/types	List the available social login provider types
AdminIdentityProvidersApi	patch_admin_social_providers_update	PATCH /orgs/{orgId}/api/v1/admin/social-providers/{providerId}	Update a social login provider
AdminIdentityProvidersApi	put_admin_social_providers_update	PUT /orgs/{orgId}/api/v1/admin/social-providers/{providerId}	Create or replace a social login provider
AdminMcpApi	admin_mcp_servers_create	POST /orgs/{orgId}/api/v1/admin/mcp/servers	Register an MCP server
AdminMcpApi	admin_mcp_servers_delete	DELETE /orgs/{orgId}/api/v1/admin/mcp/servers/{serverId}	Delete an MCP server
AdminMcpApi	admin_mcp_servers_get	GET /orgs/{orgId}/api/v1/admin/mcp/servers/{serverId}	Get an MCP server
AdminMcpApi	admin_mcp_servers_list	GET /orgs/{orgId}/api/v1/admin/mcp/servers	List MCP servers
AdminMfaApi	delete_user_authenticator	DELETE /orgs/{orgId}/api/v1/admin/users/{userId}/authenticators/{authenticatorId}	Remove one of a user's authenticators
AdminMfaApi	get_mfa_coverage_report	GET /orgs/{orgId}/api/v1/admin/reports/mfa-coverage	MFA enrollment coverage
AdminMfaApi	get_mfa_policy	GET /orgs/{orgId}/api/v1/admin/policies/mfa	Get the MFA policy
AdminMfaApi	issue_temporary_access_code	POST /orgs/{orgId}/api/v1/admin/users/{userId}/temporary-access-code	Issue a temporary access code
AdminMfaApi	list_user_authenticators	GET /orgs/{orgId}/api/v1/admin/users/{userId}/authenticators	List a user's authenticators
AdminMfaApi	update_mfa_policy	PUT /orgs/{orgId}/api/v1/admin/policies/mfa	Update the MFA policy
AdminOAuthClientsApi	admin_clients_cimd_check	POST /orgs/{orgId}/api/v1/admin/clients/cimd/check	Check a Client ID Metadata Document
AdminOAuthClientsApi	create_client	POST /orgs/{orgId}/api/v1/admin/clients	Create an OAuth client
AdminOAuthClientsApi	delete_client	DELETE /orgs/{orgId}/api/v1/admin/clients/{clientId}	Delete an OAuth client
AdminOAuthClientsApi	disable_client	POST /orgs/{orgId}/api/v1/admin/clients/{clientId}/disable	Disable an OAuth client
AdminOAuthClientsApi	enable_client	POST /orgs/{orgId}/api/v1/admin/clients/{clientId}/enable	Enable an OAuth client
AdminOAuthClientsApi	get_client	GET /orgs/{orgId}/api/v1/admin/clients/{clientId}	Get an OAuth client
AdminOAuthClientsApi	list_client_scopes	GET /orgs/{orgId}/api/v1/admin/clients/{clientId}/scopes	List the scopes granted to an OAuth client
AdminOAuthClientsApi	list_clients	GET /orgs/{orgId}/api/v1/admin/clients	List OAuth clients
AdminOAuthClientsApi	patch_client	PATCH /orgs/{orgId}/api/v1/admin/clients/{clientId}	Update an OAuth client
AdminOAuthClientsApi	rotate_client_secret	POST /orgs/{orgId}/api/v1/admin/clients/{clientId}/rotate-secret	Rotate an OAuth client secret
AdminOAuthClientsApi	set_client_scopes	PUT /orgs/{orgId}/api/v1/admin/clients/{clientId}/scopes	Replace the scopes granted to an OAuth client
AdminOAuthClientsApi	update_client	PUT /orgs/{orgId}/api/v1/admin/clients/{clientId}	Replace an OAuth client
AdminOrganizationsApi	admin_org_invitations_create	POST /orgs/{orgId}/api/v1/admin/organizations/{organizationId}/invitations	Invite a user to an organization
AdminOrganizationsApi	admin_org_invitations_list	GET /orgs/{orgId}/api/v1/admin/organizations/{organizationId}/invitations	List organization invitations
AdminOrganizationsApi	admin_org_invitations_resend	POST /orgs/{orgId}/api/v1/admin/organizations/{organizationId}/invitations/{invId}/resend	Resend an invitation
AdminOrganizationsApi	admin_org_invitations_revoke	DELETE /orgs/{orgId}/api/v1/admin/organizations/{organizationId}/invitations/{invId}	Revoke an invitation
AdminOrganizationsApi	admin_org_members_add	POST /orgs/{orgId}/api/v1/admin/organizations/{organizationId}/members	Add a member to an organization
AdminOrganizationsApi	admin_org_members_list	GET /orgs/{orgId}/api/v1/admin/organizations/{organizationId}/members	List organization members
AdminOrganizationsApi	admin_org_members_remove	DELETE /orgs/{orgId}/api/v1/admin/organizations/{organizationId}/members/{userId}	Remove a member from an organization
AdminOrganizationsApi	admin_org_roles_create	POST /orgs/{orgId}/api/v1/admin/organizations/{organizationId}/roles	Create an organization role
AdminOrganizationsApi	admin_org_roles_delete	DELETE /orgs/{orgId}/api/v1/admin/organizations/{organizationId}/roles/{roleId}	Delete an organization role
AdminOrganizationsApi	admin_org_roles_list	GET /orgs/{orgId}/api/v1/admin/organizations/{organizationId}/roles	List organization roles
AdminOrganizationsApi	admin_organizations_create	POST /orgs/{orgId}/api/v1/admin/organizations	Create an organization
AdminOrganizationsApi	admin_organizations_delete	DELETE /orgs/{orgId}/api/v1/admin/organizations/{organizationId}	Delete an organization
AdminOrganizationsApi	admin_organizations_get	GET /orgs/{orgId}/api/v1/admin/organizations/{organizationId}	Get an organization
AdminOrganizationsApi	admin_organizations_list	GET /orgs/{orgId}/api/v1/admin/organizations	List organizations
AdminOrganizationsApi	patch_admin_org_members_update	PATCH /orgs/{orgId}/api/v1/admin/organizations/{organizationId}/members/{userId}	Update a member's role or status
AdminOrganizationsApi	patch_admin_org_roles_update	PATCH /orgs/{orgId}/api/v1/admin/organizations/{organizationId}/roles/{roleId}	Update an organization role
AdminOrganizationsApi	patch_admin_organizations_update	PATCH /orgs/{orgId}/api/v1/admin/organizations/{organizationId}	Update an organization
AdminOrganizationsApi	put_admin_org_members_update	PUT /orgs/{orgId}/api/v1/admin/organizations/{organizationId}/members/{userId}	Update a member's role or status
AdminOrganizationsApi	put_admin_org_roles_update	PUT /orgs/{orgId}/api/v1/admin/organizations/{organizationId}/roles/{roleId}	Update an organization role
AdminOrganizationsApi	put_admin_organizations_update	PUT /orgs/{orgId}/api/v1/admin/organizations/{organizationId}	Update an organization
AdminPermissionsApi	admin_permissions_create	POST /orgs/{orgId}/api/v1/admin/permissions	Create a custom permission for the tenant
AdminPermissionsApi	admin_permissions_delete	DELETE /orgs/{orgId}/api/v1/admin/permissions/{permissionId}	Delete a custom permission
AdminPermissionsApi	admin_permissions_get	GET /orgs/{orgId}/api/v1/admin/permissions/{permissionId}	Get a single permission
AdminPermissionsApi	admin_permissions_list	GET /orgs/{orgId}/api/v1/admin/permissions	List all available permissions for the tenant
AdminPermissionsApi	admin_permissions_update	PATCH /orgs/{orgId}/api/v1/admin/permissions/{permissionId}	Update a permission
AdminPermissionsApi	admin_permissions_usage	GET /orgs/{orgId}/api/v1/admin/permissions/{permissionId}/usage	Get permission usage (roles assigned to this permission)
AdminPermissionsApi	admin_scopes_create	POST /orgs/{orgId}/api/v1/admin/scopes	Create a custom OAuth scope
AdminPermissionsApi	admin_scopes_delete	DELETE /orgs/{orgId}/api/v1/admin/scopes/{scopeId}	Delete a custom OAuth scope
AdminPermissionsApi	admin_scopes_list	GET /orgs/{orgId}/api/v1/admin/scopes	List OAuth scopes
AdminRolesApi	admin_roles_add_permissions	POST /orgs/{orgId}/api/v1/admin/roles/{roleId}/permissions	Add permission(s) to a role
AdminRolesApi	admin_roles_add_user	POST /orgs/{orgId}/api/v1/admin/roles/{roleId}/users	Assign a user to a role
AdminRolesApi	admin_roles_create	POST /orgs/{orgId}/api/v1/admin/roles	Create a new role
AdminRolesApi	admin_roles_delete	DELETE /orgs/{orgId}/api/v1/admin/roles/{roleId}	Delete a role
AdminRolesApi	admin_roles_get	GET /orgs/{orgId}/api/v1/admin/roles/{roleId}	Get a single role by ID or slug
AdminRolesApi	admin_roles_get_permissions	GET /orgs/{orgId}/api/v1/admin/roles/{roleId}/permissions	Get role permissions
AdminRolesApi	admin_roles_get_users	GET /orgs/{orgId}/api/v1/admin/roles/{roleId}/users	Get users assigned to a role
AdminRolesApi	admin_roles_list	GET /orgs/{orgId}/api/v1/admin/roles	List all roles in the tenant
AdminRolesApi	admin_roles_remove_permission	DELETE /orgs/{orgId}/api/v1/admin/roles/{roleId}/permissions/{permissionId}	Remove a permission from a role
AdminRolesApi	admin_roles_remove_user	DELETE /orgs/{orgId}/api/v1/admin/roles/{roleId}/users/{userId}	Remove a user from a role
AdminRolesApi	admin_roles_update_permissions	PUT /orgs/{orgId}/api/v1/admin/roles/{roleId}/permissions	Update role permissions (replaces all)
AdminRolesApi	patch_admin_roles_update	PATCH /orgs/{orgId}/api/v1/admin/roles/{roleId}	Update an existing role
AdminRolesApi	put_admin_roles_update	PUT /orgs/{orgId}/api/v1/admin/roles/{roleId}	Update an existing role
AdminSandboxApi	admin_sandbox_destroy	POST /orgs/{orgId}/api/v1/admin/sandbox/{sandboxSlug}/destroy	Destroy a sandbox tenant
AdminSandboxApi	admin_sandbox_list	GET /orgs/{orgId}/api/v1/admin/sandbox	List the caller's sandbox tenants
AdminSandboxApi	admin_sandbox_spawn	POST /orgs/{orgId}/api/v1/admin/sandbox/spawn	Spawn a sandbox tenant
AdminSessionsApi	admin_client_tokens_revoke_all	DELETE /orgs/{orgId}/api/v1/admin/clients/{clientId}/tokens	Revoke all tokens of a client
AdminSessionsApi	admin_client_tokens_revoke_post	POST /orgs/{orgId}/api/v1/admin/clients/{clientId}/tokens/revoke	Revoke all tokens of a client (POST alias)
AdminSessionsApi	admin_sessions_count	GET /orgs/{orgId}/api/v1/admin/sessions/count	Active session count
AdminSessionsApi	admin_sessions_list	GET /orgs/{orgId}/api/v1/admin/sessions	List active sessions
AdminSessionsApi	admin_sessions_revoke	DELETE /orgs/{orgId}/api/v1/admin/sessions/{sessionId}	Revoke a session
AdminSessionsApi	admin_sessions_revoke_all	POST /orgs/{orgId}/api/v1/admin/sessions/revoke-all	Revoke every session in the tenant
AdminSessionsApi	admin_sessions_stats	GET /orgs/{orgId}/api/v1/admin/sessions/stats	Session statistics
AdminSessionsApi	admin_tokens_list	GET /orgs/{orgId}/api/v1/admin/tokens	List access tokens
AdminSessionsApi	admin_tokens_revoke	DELETE /orgs/{orgId}/api/v1/admin/tokens/{tokenId}	Revoke a token
AdminSessionsApi	admin_user_sessions_list	GET /orgs/{orgId}/api/v1/admin/users/{userId}/sessions	List a user's active sessions
AdminSessionsApi	admin_user_sessions_revoke_all	DELETE /orgs/{orgId}/api/v1/admin/users/{userId}/sessions	Revoke all sessions of a user
AdminSessionsApi	admin_user_sessions_revoke_post	POST /orgs/{orgId}/api/v1/admin/users/{userId}/sessions/revoke	Revoke all sessions of a user (POST alias)
AdminSessionsApi	admin_user_tokens_revoke_all	DELETE /orgs/{orgId}/api/v1/admin/users/{userId}/tokens	Revoke all tokens of a user
AdminSessionsApi	admin_user_tokens_revoke_post	POST /orgs/{orgId}/api/v1/admin/users/{userId}/tokens/revoke	Revoke all tokens of a user (POST alias)
AdminSettingsApi	admin_analytics_dashboard	GET /orgs/{orgId}/api/v1/admin/analytics/dashboard	Get dashboard analytics
AdminSettingsApi	admin_analytics_logins	GET /orgs/{orgId}/api/v1/admin/analytics/logins	Get login analytics
AdminSettingsApi	admin_analytics_users	GET /orgs/{orgId}/api/v1/admin/analytics/users	Get user growth analytics
AdminSettingsApi	admin_organization_get	GET /orgs/{orgId}/api/v1/admin/organization	Get organization (tenant) profile
AdminSettingsApi	admin_settings_all	GET /orgs/{orgId}/api/v1/admin/settings	Get all settings (combined)
AdminSettingsApi	admin_settings_auth_get	GET /orgs/{orgId}/api/v1/admin/settings/auth	Get authentication settings
AdminSettingsApi	admin_settings_authentication_get	GET /orgs/{orgId}/api/v1/admin/settings/authentication	Get authentication settings (alias for settings/auth)
AdminSettingsApi	admin_settings_branding_get	GET /orgs/{orgId}/api/v1/admin/settings/branding	Get branding/login page settings
AdminSettingsApi	admin_settings_email_get	GET /orgs/{orgId}/api/v1/admin/settings/email	Get email settings
AdminSettingsApi	admin_settings_general_get	GET /orgs/{orgId}/api/v1/admin/settings/general	Get general settings
AdminSettingsApi	admin_settings_scim_get	GET /orgs/{orgId}/api/v1/admin/settings/scim	Get SCIM settings
AdminSettingsApi	admin_settings_security_get	GET /orgs/{orgId}/api/v1/admin/settings/security	Get security settings
AdminSettingsApi	admin_tenant_get	GET /orgs/{orgId}/api/v1/admin/tenant	Get organization (tenant) profile
AdminSettingsApi	patch_admin_organization_update	PATCH /orgs/{orgId}/api/v1/admin/organization	Update organization (tenant) name and settings
AdminSettingsApi	patch_admin_settings_auth_update	PATCH /orgs/{orgId}/api/v1/admin/settings/auth	Update authentication settings
AdminSettingsApi	patch_admin_settings_authentication_update	PATCH /orgs/{orgId}/api/v1/admin/settings/authentication	Update authentication settings (alias for settings/auth)
AdminSettingsApi	patch_admin_settings_branding_update	PATCH /orgs/{orgId}/api/v1/admin/settings/branding	Update branding/login page settings
AdminSettingsApi	patch_admin_settings_email_update	PATCH /orgs/{orgId}/api/v1/admin/settings/email	Update email settings
AdminSettingsApi	patch_admin_settings_general_update	PATCH /orgs/{orgId}/api/v1/admin/settings/general	Update general settings
AdminSettingsApi	patch_admin_settings_scim_update	PATCH /orgs/{orgId}/api/v1/admin/settings/scim	Update SCIM settings
AdminSettingsApi	patch_admin_settings_security_update	PATCH /orgs/{orgId}/api/v1/admin/settings/security	Update security settings
AdminSettingsApi	patch_admin_tenant_update	PATCH /orgs/{orgId}/api/v1/admin/tenant	Update organization (tenant) name and settings
AdminSettingsApi	put_admin_organization_update	PUT /orgs/{orgId}/api/v1/admin/organization	Update organization (tenant) name and settings
AdminSettingsApi	put_admin_settings_auth_update	PUT /orgs/{orgId}/api/v1/admin/settings/auth	Update authentication settings
AdminSettingsApi	put_admin_settings_authentication_update	PUT /orgs/{orgId}/api/v1/admin/settings/authentication	Update authentication settings (alias for settings/auth)
AdminSettingsApi	put_admin_settings_branding_update	PUT /orgs/{orgId}/api/v1/admin/settings/branding	Update branding/login page settings
AdminSettingsApi	put_admin_settings_email_update	PUT /orgs/{orgId}/api/v1/admin/settings/email	Update email settings
AdminSettingsApi	put_admin_settings_general_update	PUT /orgs/{orgId}/api/v1/admin/settings/general	Update general settings
AdminSettingsApi	put_admin_settings_scim_update	PUT /orgs/{orgId}/api/v1/admin/settings/scim	Update SCIM settings
AdminSettingsApi	put_admin_settings_security_update	PUT /orgs/{orgId}/api/v1/admin/settings/security	Update security settings
AdminSettingsApi	put_admin_tenant_update	PUT /orgs/{orgId}/api/v1/admin/tenant	Update organization (tenant) name and settings
AdminUsersApi	add_user_group	POST /orgs/{orgId}/api/v1/admin/users/{userId}/groups	Add a user to a group
AdminUsersApi	add_user_permission	POST /orgs/{orgId}/api/v1/admin/users/{userId}/permissions	Assign a permission to a user
AdminUsersApi	add_user_role	POST /orgs/{orgId}/api/v1/admin/users/{userId}/roles	Assign a role to a user
AdminUsersApi	admin_identities_legacy_saml_relink	POST /orgs/{orgId}/api/v1/admin/identities/legacy-saml	Relink legacy SAML users to an IdP
AdminUsersApi	admin_identities_legacy_saml_report	GET /orgs/{orgId}/api/v1/admin/identities/legacy-saml	Legacy SAML bindings report
AdminUsersApi	admin_identities_link	POST /orgs/{orgId}/api/v1/admin/users/{userId}/identities	Link a SAML or LDAP identity to a user
AdminUsersApi	admin_identities_list	GET /orgs/{orgId}/api/v1/admin/users/{userId}/identities	List a user's federated identity links
AdminUsersApi	admin_identities_unlink	DELETE /orgs/{orgId}/api/v1/admin/users/{userId}/identities/{type}	Unlink a user's SAML, LDAP or social identity
AdminUsersApi	block_user	POST /orgs/{orgId}/api/v1/admin/users/{userId}/block	Block a user
AdminUsersApi	create_user	POST /orgs/{orgId}/api/v1/admin/users	Create a user
AdminUsersApi	delete_user	DELETE /orgs/{orgId}/api/v1/admin/users/{userId}	Delete a user
AdminUsersApi	get_user	GET /orgs/{orgId}/api/v1/admin/users/{userId}	Get a user
AdminUsersApi	list_user_groups	GET /orgs/{orgId}/api/v1/admin/users/{userId}/groups	List a user's groups
AdminUsersApi	list_user_permissions	GET /orgs/{orgId}/api/v1/admin/users/{userId}/permissions	List a user's direct permissions
AdminUsersApi	list_user_roles	GET /orgs/{orgId}/api/v1/admin/users/{userId}/roles	List a user's roles
AdminUsersApi	list_users	GET /orgs/{orgId}/api/v1/admin/users	List users
AdminUsersApi	mark_user_verified	POST /orgs/{orgId}/api/v1/admin/users/{userId}/mark-verified	Mark a user's email as verified
AdminUsersApi	patch_user	PATCH /orgs/{orgId}/api/v1/admin/users/{userId}	Update a user
AdminUsersApi	remove_user_group	DELETE /orgs/{orgId}/api/v1/admin/users/{userId}/groups/{groupId}	Remove a user from a group
AdminUsersApi	remove_user_permission	DELETE /orgs/{orgId}/api/v1/admin/users/{userId}/permissions/{permissionId}	Remove a permission from a user
AdminUsersApi	remove_user_role	DELETE /orgs/{orgId}/api/v1/admin/users/{userId}/roles/{roleId}	Remove a role from a user
AdminUsersApi	reset_user_mfa	POST /orgs/{orgId}/api/v1/admin/users/{userId}/mfa/reset	Reset MFA (removed)
AdminUsersApi	send_user_verification_email	POST /orgs/{orgId}/api/v1/admin/users/{userId}/verify-email	Send a verification email
AdminUsersApi	set_user_password	PUT /orgs/{orgId}/api/v1/admin/users/{userId}/password	Set a user's password
AdminUsersApi	set_user_password_post	POST /orgs/{orgId}/api/v1/admin/users/{userId}/password	Set a user's password
AdminUsersApi	trigger_user_password_reset	POST /orgs/{orgId}/api/v1/admin/users/{userId}/password-reset	Send a password reset email
AdminUsersApi	unblock_user	POST /orgs/{orgId}/api/v1/admin/users/{userId}/unblock	Unblock a user
AdminUsersApi	update_user	PUT /orgs/{orgId}/api/v1/admin/users/{userId}	Update a user
AdminUsersApi	update_user_groups	PUT /orgs/{orgId}/api/v1/admin/users/{userId}/groups	Replace a user's groups
AdminUsersApi	update_user_roles	PUT /orgs/{orgId}/api/v1/admin/users/{userId}/roles	Replace a user's roles
AdminWebhooksApi	admin_webhooks_create	POST /orgs/{orgId}/api/v1/admin/webhooks	Create a webhook
AdminWebhooksApi	admin_webhooks_delete	DELETE /orgs/{orgId}/api/v1/admin/webhooks/{webhookId}	Delete a webhook
AdminWebhooksApi	admin_webhooks_deliveries_list	GET /orgs/{orgId}/api/v1/admin/webhooks/{webhookId}/deliveries	List recent deliveries
AdminWebhooksApi	admin_webhooks_delivery_replay	POST /orgs/{orgId}/api/v1/admin/webhooks/{webhookId}/deliveries/{deliveryId}/replay	Replay a delivery
AdminWebhooksApi	admin_webhooks_delivery_show	GET /orgs/{orgId}/api/v1/admin/webhooks/{webhookId}/deliveries/{deliveryId}	Get a delivery
AdminWebhooksApi	admin_webhooks_events	GET /orgs/{orgId}/api/v1/admin/webhooks/events	List available webhook event types
AdminWebhooksApi	admin_webhooks_get	GET /orgs/{orgId}/api/v1/admin/webhooks/{webhookId}	Get a webhook
AdminWebhooksApi	admin_webhooks_list	GET /orgs/{orgId}/api/v1/admin/webhooks	List webhooks
AdminWebhooksApi	admin_webhooks_rotate_secret	POST /orgs/{orgId}/api/v1/admin/webhooks/{webhookId}/rotate-secret	Rotate the signing secret
AdminWebhooksApi	admin_webhooks_test	POST /orgs/{orgId}/api/v1/admin/webhooks/{webhookId}/test	Send a test delivery
AdminWebhooksApi	admin_webhooks_tunnel_start	POST /orgs/{orgId}/api/v1/admin/webhooks/tunnel/start	Start a webhook tunnel
AdminWebhooksApi	admin_webhooks_tunnel_stop	POST /orgs/{orgId}/api/v1/admin/webhooks/tunnel/{webhookId}/stop	Stop a webhook tunnel
AdminWebhooksApi	admin_webhooks_tunnel_stream	GET /orgs/{orgId}/api/v1/admin/webhooks/tunnel/{webhookId}/stream	Stream tunnel deliveries (SSE)
AdminWebhooksApi	admin_webhooks_webhooks_disable	POST /orgs/{orgId}/api/v1/admin/webhooks/{webhookId}/disable	Disable a webhook
AdminWebhooksApi	admin_webhooks_webhooks_enable	POST /orgs/{orgId}/api/v1/admin/webhooks/{webhookId}/enable	Enable a webhook
AdminWebhooksApi	patch_admin_webhooks_update	PATCH /orgs/{orgId}/api/v1/admin/webhooks/{webhookId}	Partially update a webhook
AdminWebhooksApi	put_admin_webhooks_update	PUT /orgs/{orgId}/api/v1/admin/webhooks/{webhookId}	Update a webhook
AgentsApi	ask	POST /orgs/{orgId}/api/v1/agents/ask	Agent-friendly permission check (Natural Language style)
AgentsApi	attest	POST /orgs/{orgId}/api/v1/agents/{agentId}/attest	Workload attestation: exchange a cloud OIDC token for an agent access token
AgentsApi	authorize_mcp	POST /orgs/{orgId}/api/v1/agents/me/mcp/authorize	Per-MCP-tool authorization for the authenticated agent (dx B3).
AgentsApi	create_approval	POST /orgs/{orgId}/api/v1/agents/me/approvals
AgentsApi	get_agent_card	GET /orgs/{orgId}/api/v1/agents/{agentId}/agent-card	Signed A2A agent card
AgentsApi	get_approval_status	GET /orgs/{orgId}/api/v1/agents/me/approvals/{token}/status
AgentsApi	get_current_agent	GET /orgs/{orgId}/api/v1/agents/me	Get details about the currently authenticated agent
AgentsApi	register_agent	POST /orgs/{orgId}/api/v1/agents/register	Register (or re-register) an agent
AgentsApi	verify_agent_card	POST /orgs/{orgId}/api/v1/agents/agent-card/verify	Verify a signed A2A agent card
AuthorizationApi	check_abac	POST /orgs/{orgId}/api/v1/abac/check	Evaluate an ABAC policy decision for the caller
AuthorizationApi	check_abac_bulk	POST /orgs/{orgId}/api/v1/abac/check-bulk	Evaluate up to 100 ABAC checks for the caller in one call
AuthorizationApi	check_all_permissions	POST /api/v1/authz/check-all	Check whether the subject holds all of the permissions
AuthorizationApi	check_any_permission	POST /api/v1/authz/check-any	Check whether the subject holds any of the permissions
AuthorizationApi	check_permission	POST /api/v1/authz/check	Check one permission
AuthorizationApi	check_permissions_bulk	POST /api/v1/authz/check-bulk	Check up to 100 permissions in one call
AuthorizationApi	check_relation	POST /api/v1/authz/zanzibar/check	Zanzibar relationship check
AuthorizationApi	check_relation_scoped	POST /orgs/{orgId}/api/v1/zanzibar/check	Zanzibar relationship check
AuthorizationApi	evaluate	POST /api/v1/authz/v1/evaluation	AuthZEN 1.0 access evaluation
AuthorizationApi	evaluate_batch	POST /api/v1/authz/v1/evaluations	AuthZEN 1.0 boxcarred access evaluations
AuthorizationApi	expand_relation	POST /api/v1/authz/zanzibar/expand	Zanzibar-style userset expansion: every subject that satisfies `object#relation`, as a tree that mirrors the namespace rewrites.
AuthorizationApi	expand_relation_scoped	POST /orgs/{orgId}/api/v1/zanzibar/expand	Zanzibar Expand: the userset tree of every subject satisfying `object#relation`. Always reveals other subjects, so it requires the oracle privilege (`authz.check` permission or `authz:check` scope).
AuthorizationApi	get_my_attributes	GET /orgs/{orgId}/api/v1/abac/my-attributes	The caller's ABAC subject attributes
AuthorizationApi	get_resource_attributes	GET /orgs/{orgId}/api/v1/abac/resources/{resourceType}/{resourceId}/attributes	Attributes stored for a resource
AuthorizationApi	list_attribute_definitions	GET /orgs/{orgId}/api/v1/abac/attribute-definitions	Attribute definitions available to the organization
AuthorizationApi	list_permissions	GET /api/v1/authz/permissions	List the caller's effective permissions
AuthorizationApi	set_resource_attribute	PUT /orgs/{orgId}/api/v1/abac/resources/{resourceType}/{resourceId}/attributes/{attributeSlug}	Set a resource attribute
AuthorizationApi	set_user_attribute	PUT /orgs/{orgId}/api/v1/abac/users/{userId}/attributes/{attributeSlug}	Set a user attribute
IdentityApi	get_me	GET /orgs/{orgId}/api/v1/me	Who am I
JitApi	approve_request	POST /orgs/{orgId}/api/v1/jit/approve/{requestId}	HITL: Approve a pending JIT request (requires user auth).
JitApi	complete_task	POST /orgs/{orgId}/api/v1/jit/task/{taskId}/complete	Complete a task and cleanup resources.
JitApi	create_task	POST /orgs/{orgId}/api/v1/jit/task	Create a new ephemeral task/persona for an agent.
JitApi	deny_request	POST /orgs/{orgId}/api/v1/jit/deny/{requestId}	HITL: Deny a pending JIT request (requires user auth).
JitApi	evaluate_task	POST /orgs/{orgId}/api/v1/jit/task/{taskId}/evaluate	CAEP: Trigger continuous access evaluation for a task.
JitApi	get_request_status	GET /orgs/{orgId}/api/v1/jit/request/{requestId}/status	Get the status of a JIT permission request.
JitApi	get_request_token	POST /orgs/{orgId}/api/v1/jit/request/{requestId}/token	Exchange an approved JIT request for a downscoped token.
JitApi	list_pending_requests	GET /orgs/{orgId}/api/v1/jit/pending	Get pending HITL requests for the tenant.
JitApi	request_permission	POST /orgs/{orgId}/api/v1/jit/request	Request a JIT permission using RFC 9396 authorization_details.
McpApi	get_protected_resource_metadata	GET /orgs/{orgId}/api/v1/.well-known/oauth-protected-resource/mcp/{serverId}	MCP server protected resource metadata (RFC 9728)
McpApi	get_protected_resource_metadata_root	GET /orgs/{orgId}/api/v1/.well-known/oauth-protected-resource	Organization-level protected resource metadata (RFC 9728)
McpApi	get_server	GET /orgs/{orgId}/api/v1/mcp/servers/{serverId}	REST API: Get a specific MCP server.
McpApi	get_server_challenge	GET /orgs/{orgId}/api/v1/mcp/{serverId}/challenge	Simulated MCP server authorization challenge
McpApi	list_servers	GET /orgs/{orgId}/api/v1/mcp/servers	REST API: List MCP servers for a tenant.
McpApi	post_server_challenge	POST /orgs/{orgId}/api/v1/mcp/{serverId}/challenge	Simulated MCP server authorization challenge (POST)
MfaApi	create_mfa_challenge	POST /orgs/{orgId}/api/v1/mfa/challenges	Start an MFA challenge
MfaApi	delete_authenticator	DELETE /orgs/{orgId}/api/v1/me/authenticators/{id}	Remove an authenticator
MfaApi	enroll_authenticator	POST /orgs/{orgId}/api/v1/me/authenticators/{type}/enroll	Start enrolling an authenticator
MfaApi	generate_recovery_codes	POST /orgs/{orgId}/api/v1/me/recovery-codes	Generate recovery codes
MfaApi	get_mfa_challenge	GET /orgs/{orgId}/api/v1/mfa/challenges/{id}	Get challenge status
MfaApi	get_recovery_code_status	GET /orgs/{orgId}/api/v1/me/recovery-codes	Recovery-code status
MfaApi	list_my_authenticators	GET /orgs/{orgId}/api/v1/me/authenticators	List my authenticators
MfaApi	list_trusted_devices	GET /orgs/{orgId}/api/v1/me/trusted-devices	List trusted devices
MfaApi	revoke_trusted_device	DELETE /orgs/{orgId}/api/v1/me/trusted-devices/{id}	Revoke a trusted device
MfaApi	update_authenticator	PATCH /orgs/{orgId}/api/v1/me/authenticators/{id}	Rename an authenticator or make it the default
MfaApi	verify_authenticator	POST /orgs/{orgId}/api/v1/me/authenticators/{id}/verify	Verify a pending authenticator
MfaApi	verify_mfa_challenge	POST /orgs/{orgId}/api/v1/mfa/challenges/{id}/verify	Answer a challenge
OAuthApi	authorize	GET /orgs/{orgId}/api/v1/oauth/authorize	OAuth 2.1 / OIDC authorization endpoint
OAuthApi	backchannel_authorize	POST /orgs/{orgId}/api/v1/oauth/bc-authorize	CIBA backchannel authentication request
OAuthApi	device_authorization	POST /orgs/{orgId}/api/v1/oauth/device_authorization	Device authorization request (RFC 8628)
OAuthApi	get_client_configuration	GET /orgs/{orgId}/api/v1/connect/register/{clientId}	Read a dynamically registered client (RFC 7592 / OIDC DCR §4)
OAuthApi	get_device_verification	GET /orgs/{orgId}/api/v1/oauth/device	Device verification page (RFC 8628 §3.3)
OAuthApi	get_org_selection	GET /orgs/{orgId}/api/v1/oauth/org-select	Organization selector page
OAuthApi	introspect	POST /orgs/{orgId}/api/v1/oauth/introspect	Token introspection (RFC 7662)
OAuthApi	par	POST /orgs/{orgId}/api/v1/oauth/par	Pushed authorization request (RFC 9126)
OAuthApi	passkey_login	GET /orgs/{orgId}/api/v1/oauth/passkey-login	Passkey login entry point
OAuthApi	register_client	POST /orgs/{orgId}/api/v1/connect/register	Dynamic client registration (RFC 7591 / OIDC DCR)
OAuthApi	revoke	POST /orgs/{orgId}/api/v1/oauth/revoke	Token revocation (RFC 7009)
OAuthApi	social_callback	GET /orgs/{orgId}/api/v1/oauth/social/{provider}/callback	Social / enterprise identity-provider callback
OAuthApi	social_callback_post	POST /orgs/{orgId}/api/v1/oauth/social/{provider}/callback	Social / enterprise identity-provider callback (form_post)
OAuthApi	social_login	GET /orgs/{orgId}/api/v1/oauth/social/{provider}	Start social / enterprise identity-provider login
OAuthApi	submit_authorization	POST /orgs/{orgId}/api/v1/oauth/authorize	OAuth 2.1 / OIDC authorization endpoint (form submission)
OAuthApi	submit_device_verification	POST /orgs/{orgId}/api/v1/oauth/device	Submit device verification
OAuthApi	submit_login	POST /orgs/{orgId}/api/v1/oauth/login/submit	Hosted login form submission
OAuthApi	submit_login_json	POST /orgs/{orgId}/api/v1/oauth/login/json	Programmatic (JSON) login for the authorization flow
OAuthApi	submit_org_selection	POST /orgs/{orgId}/api/v1/oauth/org-select	Submit organization selection
OAuthApi	token	POST /orgs/{orgId}/api/v1/oauth/token	OAuth 2.1 token endpoint
OIDCApi	check_session	GET /orgs/{orgId}/api/v1/oauth/check_session	OP session-check iframe (OIDC Session Management 1.0)
OIDCApi	logout	GET /orgs/{orgId}/api/v1/oauth/logout	RP-initiated logout (OIDC RP-Initiated Logout 1.0)
OIDCApi	logout_post	POST /orgs/{orgId}/api/v1/oauth/logout	RP-initiated logout (confirmation submission)
OIDCApi	userinfo	GET /orgs/{orgId}/api/v1/oauth/userinfo	OpenID Connect UserInfo endpoint
OIDCApi	userinfo_post	POST /orgs/{orgId}/api/v1/oauth/userinfo	OpenID Connect UserInfo endpoint (POST)
SsfApi	create_stream_config	POST /orgs/{orgId}/api/v1/ssf/stream	Create an SSF stream
SsfApi	delete_stream_config	DELETE /orgs/{orgId}/api/v1/ssf/stream	Delete an SSF stream
SsfApi	get_stream_config	GET /orgs/{orgId}/api/v1/ssf/stream	Read SSF stream configuration(s)
SsfApi	verify_stream	POST /orgs/{orgId}/api/v1/ssf/verify	Request a stream verification event
TokenVaultApi	get_connection_token	POST /orgs/{orgId}/api/v1/agents/me/connections/{connectionId}/token	Fetch a live third-party access token for a connection
TokenVaultApi	list_connections	GET /orgs/{orgId}/api/v1/agents/me/connections	List the outbound connections this agent may use
WellKnownApi	get_authorization_server_metadata	GET /orgs/{orgId}/api/v1/.well-known/oauth-authorization-server	OAuth 2.0 authorization server metadata (RFC 8414)
WellKnownApi	get_jwks	GET /orgs/{orgId}/api/v1/.well-known/jwks.json	JSON Web Key Set (RFC 7517)
WellKnownApi	get_openid_configuration	GET /orgs/{orgId}/api/v1/.well-known/openid-configuration	OpenID Provider configuration (OIDC Discovery 1.0)
WellKnownApi	get_ssf_configuration	GET /orgs/{orgId}/api/v1/.well-known/ssf-configuration	SSF transmitter configuration metadata

Documentation For Models

Documentation For Authorization

Authentication schemes defined for the API:

BearerAuth

Type: Bearer authentication (JWT)

ApiKeyAuth

Type: API key
API key parameter name: X-API-Key
Location: HTTP header

ClientAuth

Type: HTTP basic authentication

AAuthSigned

Type: Bearer authentication (JWT)

Author

sdk@lumoauth.dev

Metadata

Release files for lumoauth-api-client 1.1.0

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for lumoauth-api-client 1.1.0
File	Size	Uploaded	Provenance	Actions
lumoauth_api_client-1.1.0.tar.gz	263.0 kB	Oct 27, 2026	Without provenance	Details for lumoauth_api_client-1.1.0.tar.gz

Built distribution (wheel)

Table of built distributions (wheels) for lumoauth-api-client 1.1.0
File	Interpreter	ABI	Platform	Actions Reset
lumoauth_api_client-1.1.0-py3-none-any.whl 790.6 kB Oct 27, 2026 Without provenance	Python 3	none	any	Details for lumoauth_api_client-1.1.0-py3-none-any.whl

Total release size: 1.1 MB

Release files / lumoauth_api_client-1.1.0.tar.gz

Download URL	lumoauth_api_client-1.1.0.tar.gz
Size	263.0 kB
Tags	Source
SHA-256 checksum How to use checksums	`26158cc961efa5b8132ee37e39a2244ee7c90933fdd99d23c084d1abe577fe61`
BLAKE2b-256 checksum How to use checksums	`3cf9a7fd7997b2e71b002d19631e342ef85a8767079be7c8c0ac1d8bc5d446cd`
Upload date	Oct 27, 2026
Uploaded using Trusted Publishing? What is trusted publishing?	No
Uploaded via	`twine/7.0.0 CPython/3.14.4`

Release files / lumoauth_api_client-1.1.0-py3-none-any.whl

Download URL	lumoauth_api_client-1.1.0-py3-none-any.whl
Size	790.6 kB
Tags	Python 3
SHA-256 checksum How to use checksums	`fa4855d036685d6f93a3af4eb0d5acc034fb885f5ae5c0e7014a0488d6fc0dc6`
BLAKE2b-256 checksum How to use checksums	`14ad07b53b51cc018bef0b622562ddab9134f1dd7c5cb2ed3d9ba71ec89b314d`
Upload date	Oct 27, 2026
Uploaded using Trusted Publishing? What is trusted publishing?	No
Uploaded via	`twine/7.0.0 CPython/3.14.4`

Security for lumoauth-api-client 1.1.0

Report project as malware

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

No provenance found

None of the files in this release were uploaded with provenance metadata.

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

To learn more about protecting yourself from malicious actors, visit our package security documentation.

Release history Release notifications | RSS feed

1.2.0

Oct 30, 2026 2 release files No provenance

This release

1.1.0 This release

Oct 27, 2026 2 release files No provenance

1.0.0

Oct 8, 2026 2 release files No provenance

lumoauth-api-client 1.1.0