Apache Superset

Apache Superset Security API

The Security API from Apache Superset — 11 operation(s) for security.

GitHub OpenAPI
Business capability
Identity & Access Management BC-620.20

Operations 20

GET /api/v1/security/csrf_token/ Get CSRF token #
POST /api/v1/security/guest_token/ Issue a guest token #
POST /api/v1/security/login Log in and obtain access token #
POST /api/v1/security/refresh Refresh access token #
GET /api/v1/security/roles/ List roles #
POST /api/v1/security/roles/ Create role #
GET /api/v1/security/roles/{pk} Get role #
PUT /api/v1/security/roles/{pk} Update role #
DELETE /api/v1/security/roles/{pk} Delete role #
GET /api/v1/security/users/ List users #
POST /api/v1/security/users/ Create user #
GET /api/v1/security/users/{pk} Get user #
PUT /api/v1/security/users/{pk} Update user #
DELETE /api/v1/security/users/{pk} Delete user #
GET /api/v1/security/permissions/ List permissions #
GET /api/v1/security/groups/ List security groups #
POST /api/v1/security/groups/ Create security group #
GET /api/v1/security/groups/{pk} Get security group #
PUT /api/v1/security/groups/{pk} Update security group #
DELETE /api/v1/security/groups/{pk} Delete security group #

Documentation

📖
Documentation
https://superset.apache.org/developer-docs/api
📖
APIReference
https://superset.apache.org/docs/api

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/apache-superset/refs/heads/main/openapi/apache-superset-security-api-openapi.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/apache-superset-security-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

apache-superset-security-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: Apache Superset REST Security API
  version: '1.0'
  description: Minimal OpenAPI for the Apache Superset REST API covering authentication, dashboards, charts, datasets, databases, SQL Lab, queries, tags, themes, annotations, security (users/roles/permissions), reports, and assets.
servers:
- url: http://localhost:8088
  description: Superset
tags:
- name: Security
paths:
  /api/v1/security/csrf_token/:
    get:
      summary: Get CSRF token
      responses:
        '200':
          description: OK
      tags:
      - Security
      operationId: getApiV1SecurityCsrfToken
      x-operation-id-source: derived
  /api/v1/security/guest_token/:
    post:
      summary: Issue a guest token
      responses:
        '200':
          description: OK
      tags:
      - Security
      operationId: postApiV1SecurityGuestToken
      x-operation-id-source: derived
  /api/v1/security/login:
    post:
      summary: Log in and obtain access token
      responses:
        '200':
          description: OK
      tags:
      - Security
      operationId: postApiV1SecurityLogin
      x-operation-id-source: derived
  /api/v1/security/refresh:
    post:
      summary: Refresh access token
      responses:
        '200':
          description: OK
      tags:
      - Security
      operationId: postApiV1SecurityRefresh
      x-operation-id-source: derived
  /api/v1/security/roles/:
    get:
      summary: List roles
      responses:
        '200':
          description: OK
      tags:
      - Security
      operationId: getApiV1SecurityRoles
      x-operation-id-source: derived
    post:
      summary: Create role
      responses:
        '201':
          description: Created
      tags:
      - Security
      operationId: postApiV1SecurityRoles
      x-operation-id-source: derived
  /api/v1/security/roles/{pk}:
    get:
      summary: Get role
      parameters:
      - name: pk
        in: path
        required: true
        schema:
          type: string
      responses:
        '200':
          description: OK
      tags:
      - Security
      operationId: getApiV1SecurityRolesByPk
      x-operation-id-source: derived
    put:
      summary: Update role
      parameters:
      - name: pk
        in: path
        required: true
        schema:
          type: string
      responses:
        '200':
          description: OK
      tags:
      - Security
      operationId: putApiV1SecurityRolesByPk
      x-operation-id-source: derived
    delete:
      summary: Delete role
      parameters:
      - name: pk
        in: path
        required: true
        schema:
          type: string
      responses:
        '200':
          description: OK
      tags:
      - Security
      operationId: deleteApiV1SecurityRolesByPk
      x-operation-id-source: derived
  /api/v1/security/users/:
    get:
      summary: List users
      responses:
        '200':
          description: OK
      tags:
      - Security
      operationId: getApiV1SecurityUsers
      x-operation-id-source: derived
    post:
      summary: Create user
      responses:
        '201':
          description: Created
      tags:
      - Security
      operationId: postApiV1SecurityUsers
      x-operation-id-source: derived
  /api/v1/security/users/{pk}:
    get:
      summary: Get user
      parameters:
      - name: pk
        in: path
        required: true
        schema:
          type: string
      responses:
        '200':
          description: OK
      tags:
      - Security
      operationId: getApiV1SecurityUsersByPk
      x-operation-id-source: derived
    put:
      summary: Update user
      parameters:
      - name: pk
        in: path
        required: true
        schema:
          type: string
      responses:
        '200':
          description: OK
      tags:
      - Security
      operationId: putApiV1SecurityUsersByPk
      x-operation-id-source: derived
    delete:
      summary: Delete user
      parameters:
      - name: pk
        in: path
        required: true
        schema:
          type: string
      responses:
        '200':
          description: OK
      tags:
      - Security
      operationId: deleteApiV1SecurityUsersByPk
      x-operation-id-source: derived
  /api/v1/security/permissions/:
    get:
      summary: List permissions
      responses:
        '200':
          description: OK
      tags:
      - Security
      operationId: getApiV1SecurityPermissions
      x-operation-id-source: derived
  /api/v1/security/groups/:
    get:
      summary: List security groups
      responses:
        '200':
          description: OK
      tags:
      - Security
      operationId: getApiV1SecurityGroups
      x-operation-id-source: derived
    post:
      summary: Create security group
      responses:
        '201':
          description: Created
      tags:
      - Security
      operationId: postApiV1SecurityGroups
      x-operation-id-source: derived
  /api/v1/security/groups/{pk}:
    get:
      summary: Get security group
      parameters:
      - name: pk
        in: path
        required: true
        schema:
          type: string
      responses:
        '200':
          description: OK
      tags:
      - Security
      operationId: getApiV1SecurityGroupsByPk
      x-operation-id-source: derived
    put:
      summary: Update security group
      parameters:
      - name: pk
        in: path
        required: true
        schema:
          type: string
      responses:
        '200':
          description: OK
      tags:
      - Security
      operationId: putApiV1SecurityGroupsByPk
      x-operation-id-source: derived
    delete:
      summary: Delete security group
      parameters:
      - name: pk
        in: path
        required: true
        schema:
          type: string
      responses:
        '200':
          description: OK
      tags:
      - Security
      operationId: deleteApiV1SecurityGroupsByPk
      x-operation-id-source: derived
x-generated-from: https://superset.apache.org/developer-docs/api
x-generated-by: claude-crawl-2026-05-08