Auth0

Auth0 Attack Protection API

The attack-protection API from Auth0 — 5 operation(s) for attack-protection.

GitHub OpenAPI
Business capability
Threat Detection & Response Management BC-620.30

Operations 10

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

GET /attack-protection/bot-detection Get bot detection settings · Get Bot Detection Settings #
Ask an LLM
“What bot detection level is my tenant using?”
“Is bot detection in monitoring mode right now?”
Tell an agent
Show my bot detection settings.
Get the current bot detection configuration.
PATCH /attack-protection/bot-detection Update bot detection settings · Update Bot Detection Settings #
Ask an LLM
“How do I raise the bot detection level for logins?”
“Can I allowlist certain IPs from bot detection challenges?”
Tell an agent
Set the bot detection level to {bot_detection_level}.
Allowlist {allowlist} from bot detection.
GET /attack-protection/breached-password-detection Get breached password detection settings · Get Breached Password Detection Settings #
Ask an LLM
“Is breached password detection enabled on my tenant?”
“What actions happen when a leaked password is detected?”
Tell an agent
Show breached password detection settings.
Get my leaked credential protection configuration.
PATCH /attack-protection/breached-password-detection Update breached password detection · Update Breached Password Detection Settings #
Ask an LLM
“How do I turn on breached password detection?”
“Can I change how often admins are notified about breached passwords?”
Tell an agent
Set breached password detection enabled to {enabled}.
Use shields {shields} for breached password detection.
GET /attack-protection/brute-force-protection Get brute-force protection settings · Get Brute-force Settings #
Ask an LLM
“How many failed login attempts trigger brute-force protection?”
“Is brute-force protection enabled for my tenant?”
Tell an agent
Show brute-force protection settings.
Get the brute-force max attempts and allowlist.
PATCH /attack-protection/brute-force-protection Update brute-force protection · Update Brute-force Settings #
Ask an LLM
“Can I change the maximum failed attempts before an account is blocked?”
“How do I exempt an office IP from brute-force blocking?”
Tell an agent
Set brute-force max attempts to {max_attempts}.
Add {allowlist} to the brute-force allowlist.
GET /attack-protection/captcha Get the CAPTCHA configuration · Get the CAPTCHA Configuration for a Tenant #
Ask an LLM
“Which CAPTCHA provider is active on my login pages?”
“Can I see the current CAPTCHA settings?”
Tell an agent
Show my CAPTCHA configuration.
Get the active CAPTCHA provider.
PATCH /attack-protection/captcha Change the CAPTCHA provider or settings · Partial Update for CAPTCHA Configuration #
Ask an LLM
“How do I switch the login CAPTCHA to hCaptcha or reCAPTCHA Enterprise?”
“Can I configure the simple built-in CAPTCHA?”
Tell an agent
Set the active CAPTCHA provider to {active_provider_id}.
Configure hCaptcha with {hcaptcha}.
GET /attack-protection/suspicious-ip-throttling Get suspicious IP throttling settings · Get Suspicious IP Throttling Settings #
Ask an LLM
“Is suspicious IP throttling turned on?”
“What limits apply to IPs with many failed logins?”
Tell an agent
Show suspicious IP throttling settings.
Get the IP throttling allowlist and stages.
PATCH /attack-protection/suspicious-ip-throttling Update suspicious IP throttling · Update Suspicious IP Throttling Settings #
Ask an LLM
“How do I allowlist an IP range from suspicious IP throttling?”
“Can I change the thresholds for throttling suspicious IP addresses?”
Tell an agent
Set suspicious IP throttling enabled to {enabled}.
Exempt {allowlist} from IP throttling.

Documentation

📖
Documentation
https://auth0.com/docs/api/management/v2
📖
APIReference
https://auth0.com/docs/api/management/v2
📖
GettingStarted
https://auth0.com/docs/get-started
📖
Authentication
https://auth0.com/docs/secure/tokens
📖
Documentation
https://auth0.com/docs/api/authentication
📖
APIReference
https://auth0.com/docs/api/authentication
📖
Documentation
https://docs.fga.dev

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/auth0/refs/heads/main/openapi/auth0-attack-protection-api-openapi.yml
⚙
AsyncAPI
https://raw.githubusercontent.com/api-evangelist/auth0/refs/heads/main/asyncapi/auth0-log-streams-and-actions-asyncapi.yml

Other Resources

🔗
OpenAPISource
https://auth0.com/docs/api/management/openapi.json
🔗
SpectralRules
https://raw.githubusercontent.com/api-evangelist/auth0/refs/heads/main/rules/auth0-management-rules.yml
🔗
SpectralRules
https://raw.githubusercontent.com/api-evangelist/auth0/refs/heads/main/rules/auth0-authentication-rules.yml
🔗
SpectralRules
https://raw.githubusercontent.com/api-evangelist/auth0/refs/heads/main/rules/auth0-fga-rules.yml
🔗
Project
https://openfga.dev
🔗
Repository
https://github.com/openfga/openfga

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/auth0:auth0-attack-protection-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

auth0-attack-protection-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: Auth0 Management Attack Protection API
  description: Auth0 Management API v2.
  termsOfService: https://auth0.com/web-terms/
  contact:
    name: Auth0 Support
    url: https://support.auth0.com
  version: '2.0'
servers:
- url: https://{tenantDomain}/api/v2
  variables:
    tenantDomain:
      default: '{TENANT}.auth0.com'
      description: Auth0 Tenant Domain
security:
- bearerAuth: []
tags:


# --- truncated at 32 KB (53 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/auth0/refs/heads/main/openapi/auth0-attack-protection-api-openapi.yml