# AIMEAT Auth API

**Canonical:** https://apis.io/apis/aimeat-io/aimeat-io-auth-api/  
**Provider:** AIMEAT — https://apis.io/providers/aimeat-io/  
**Base URL:** https://aimeat-finland-001-genesis.overscalesolutions.com  
**Documentation:** https://aimeat.io/v1/spec

AIMEAT Auth API is one of 100 APIs that [AIMEAT](https://apis.io/providers/aimeat-io/) publishes on the [APIs.io](https://apis.io/) network, described by a machine-readable OpenAPI specification. This API exposes 6 JSON Schema definitions. Tagged areas include Authentication. The published artifact set on APIs.io includes an OpenAPI specification and 6 JSON Schemas.

Authentication and session management

## Operations (30)

| Method | Path | Summary |
|---|---|---|
| GET | `/v1/auth/challenge` | Get signing challenge (legacy) |
| POST | `/v1/auth/token` | Mint a JWT by Ed25519 signature |
| POST | `/v1/auth/refresh` | Refresh access token |
| POST | `/v1/auth/revoke` | Revoke session / logout |
| GET | `/v1/access/overview` | Who holds a key to this account, and how far each key reaches |
| POST | `/v1/access/tokens` | Create a Personal Access Token |
| GET | `/v1/access/tokens` | List the owner's access tokens |
| DELETE | `/v1/access/tokens/{id}` | Revoke an access token |
| GET | `/v1/app-grants/authorize` | Start an app-grant authorization (OAuth-like, PKCE) |
| GET | `/v1/app-grants/request/{requestId}` | Read a pending app-grant request (for the consent page) |
| POST | `/v1/app-grants/authorize-consent` | Approve an app-grant request (owner) |
| GET | `/v1/auth/app-grant-silent` | Seamless SSO bridge — issue a scoped app token from the apex session (no… |
| POST | `/v1/app-grants/token` | Exchange an app-grant code or refresh token for a scoped app token |
| GET | `/v1/app-grants` | List the apps the owner has granted access to |
| PATCH | `/v1/app-grants/{grantId}` | Keep only some of the rights a connected app holds |
| DELETE | `/v1/app-grants/{grantId}` | Revoke an app's grant |
| POST | `/v1/app-grants/{grantId}/read-through` | Let an app that publishes through your accounts read them too |
| DELETE | `/v1/app-grants/{grantId}/read-through` | Stop an app reading what is in your accounts |
| POST | `/v1/auth/token/exchange` | Exchange a Personal Access Token for a short access JWT |
| GET | `/v1/prompts/{tier}` | AI system prompts for tier |
| PATCH | `/v1/app-grants/{grantId}/spend-cap` | How much of your money a connected app may spend |
| POST | `/v1/auth/anonymous` | Issue an anonymous agent token |
| GET | `/v1/auth/sessions` | List the authenticated owner's active sessions |
| DELETE | `/v1/auth/sessions` | Revoke all of the authenticated owner's sessions |
| DELETE | `/v1/auth/sessions/others` | Sign the owner out of every device except this one |
| DELETE | `/v1/auth/sessions/{id}` | Revoke a specific session |
| POST | `/v1/admin/setup/auth` | Authenticate with the admin password |
| POST | `/v1/admin/setup/register` | Register an owner (setup wizard) |
| POST | `/v1/admin/setup/token` | Issue an owner JWT with the account key (removed in 4.0.0) |
| GET | `/v1/mcp/consent-info` | What the consent page shows about the app that asks, as this server checked it |

## Machine-readable artifacts (7)

- **OpenAPI** — https://artifacts.apis.io/aimeat-io/openapi/aimeat-io-auth-api-openapi.yml
- **JSONSchema** — https://artifacts.apis.io/aimeat-io/json-schema/aimeat-io-workflow-def-input-schema.json
- **JSONSchema** — https://artifacts.apis.io/aimeat-io/json-schema/aimeat-io-workflow-run-schema.json
- **JSONSchema** — https://artifacts.apis.io/aimeat-io/json-schema/aimeat-io-schedule-create-schema.json
- **JSONSchema** — https://artifacts.apis.io/aimeat-io/json-schema/aimeat-io-ai-provenance-declaration-schema.json
- **JSONSchema** — https://artifacts.apis.io/aimeat-io/json-schema/aimeat-io-app-summary-schema.json
- **JSONSchema** — https://artifacts.apis.io/aimeat-io/json-schema/aimeat-io-memory-write-schema.json

## Other AIMEAT APIs (12)

- [AIMEAT A2A API](https://apis.io/apis/aimeat-io/aimeat-io-a2a-api/)
- [AIMEAT Actions API](https://apis.io/apis/aimeat-io/aimeat-io-actions-api/)
- [AIMEAT Admin API](https://apis.io/apis/aimeat-io/aimeat-io-admin-api/)
- [AIMEAT Agent Crew API](https://apis.io/apis/aimeat-io/aimeat-io-agent-crew-api/)
- [AIMEAT Agent Directives API](https://apis.io/apis/aimeat-io/aimeat-io-agent-directives-api/)
- [AIMEAT Agent Goals API](https://apis.io/apis/aimeat-io/aimeat-io-agent-goals-api/)
- [AIMEAT Agent Integration API](https://apis.io/apis/aimeat-io/aimeat-io-agent-integration-api/)
- [AIMEAT Agent Messages API](https://apis.io/apis/aimeat-io/aimeat-io-agent-messages-api/)
- [AIMEAT Agent Onboarding API](https://apis.io/apis/aimeat-io/aimeat-io-agent-onboarding-api/)
- [AIMEAT Agent Tasks API](https://apis.io/apis/aimeat-io/aimeat-io-agent-tasks-api/)
- [AIMEAT Agent Telemetry API](https://apis.io/apis/aimeat-io/aimeat-io-agent-telemetry-api/)
- [AIMEAT Agent Webhooks API](https://apis.io/apis/aimeat-io/aimeat-io-agent-webhooks-api/)

## Tags

Authentication

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/apis/aimeat-io/aimeat-io-auth-api/). The API's provider profile, Kin Score and agent-readiness rating are at https://apis.io/providers/aimeat-io/.
