Auth0

Auth0 Keys API

The keys API from Auth0 — 9 operation(s) for keys.

GitHub OpenAPI
Business capability
Cybersecurity Management BC-620

Operations 14

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

GET /keys/custom-signing Get the custom signing keys JWKS · Get Custom Signing Keys #
Ask an LLM
“What custom signing keys have I uploaded to my tenant?”
“Can I see the full JWKS of my bring-your-own signing keys?”
Tell an agent
Show me my custom signing keys JWKS.
Fetch the public keys I uploaded for custom token signing.
DELETE /keys/custom-signing Delete all custom signing keys · Delete Custom Signing Keys #
Ask an LLM
“How do I remove every custom signing key I uploaded?”
“Can I clear out my bring-your-own signing key set entirely?”
Tell an agent destructive · confirm first
Delete my custom signing keys.
Remove the whole custom signing JWKS from the tenant.
PUT /keys/custom-signing Create or replace the custom signing keys JWKS · Create or Replace Custom Signing Keys #
Ask an LLM
“How do I upload my own public keys for custom token signing?”
“Does setting custom signing keys replace the whole existing set?”
Tell an agent
Replace my custom signing keys with {keys}.
Upload this JWKS key set as my custom signing keys: {keys}.
GET /keys/encryption List the tenant's encryption keys · Get All Encryption Keys #
Ask an LLM
“Which encryption keys does my tenant currently hold?”
“Can I get a total count of encryption keys when listing them?”
Tell an agent
List all encryption keys in my tenant.
Show page {page} of encryption keys with totals included.
POST /keys/encryption Create a pre-activated encryption key · Create the New Encryption Key #
Ask an LLM
“How do I start bringing my own encryption key to my tenant?”
“What key type do I need to specify when creating a new encryption key?”
Tell an agent
Create a new encryption key of type {type}.
Set up a pre-activated {type} encryption key without key material.
POST /keys/encryption/rekey Rekey the encryption key hierarchy · Rekey the Key Hierarchy #
Ask an LLM
“How do I rotate the whole encryption key hierarchy?”
“Is there a single call to rekey my tenant's encryption keys?”
Tell an agent
Rekey my tenant's encryption key hierarchy.
Run a rekey operation on all encryption keys.
GET /keys/encryption/{kid} Get one encryption key by key ID · Get the Encryption Key by Its Key Id #
Ask an LLM
“What is the state and type of a specific encryption key?”
“Can I look up an encryption key by its kid?”
Tell an agent
Show me encryption key {kid}.
Check the state of encryption key {kid}.
DELETE /keys/encryption/{kid} Delete a customer-provided encryption key · Delete the Encryption Key by Its Key Id #
Ask an LLM
“How do I go back to native encryption after bringing my own key?”
“What happens when I delete a custom encryption key?”
Tell an agent destructive · confirm first
Delete encryption key {kid}.
Remove my custom key {kid} and revert to the native encryption key.
POST /keys/encryption/{kid} Import wrapped key material and activate a key · Import the Encryption Key #
Ask an LLM
“How do I import my own wrapped encryption key material?”
“What activates a pre-created encryption key?”
Tell an agent
Import wrapped key {wrapped_key} into encryption key {kid}.
Activate encryption key {kid} with my wrapped key material {wrapped_key}.
POST /keys/encryption/{kid}/wrapping-key Create a public wrapping key for key import · Create the Public Wrapping Key #
Ask an LLM
“Where do I get a public key to wrap my encryption key material before import?”
“Is a wrapping key needed before importing my own encryption key?”
Tell an agent
Create a public wrapping key for encryption key {kid}.
Generate the wrapping key I need to wrap material for {kid}.
GET /keys/signing List application signing keys · Get All Application Signing Keys #
Ask an LLM
“Which application signing keys are current, next and previous in my tenant?”
“Can I see all the keys used to sign tokens for my applications?”
Tell an agent
List all application signing keys.
Show me the current and next token signing keys.
POST /keys/signing/rotate Rotate the application signing key · Rotate the Application Signing Key #
Ask an LLM
“How do I rotate the key that signs my tenant's tokens?”
“Can I promote the next signing key to current in one step?”
Tell an agent
Rotate my application signing key.
Roll the tenant's token signing key now.
GET /keys/signing/{kid} Get one application signing key by key ID · Get an Application Signing Key by Its Key Id #
Ask an LLM
“What is the certificate and status of a specific signing key?”
“Can I fetch a signing key by its kid to check if it's revoked?”
Tell an agent
Show me signing key {kid}.
Check whether signing key {kid} has been revoked.
PUT /keys/signing/{kid}/revoke Revoke an application signing key · Revoke an Application Signing Key by Its Key Id #
Ask an LLM
“How do I revoke a signing key I think was compromised?”
“Can a previous signing key be revoked by its key ID?”
Tell an agent destructive · confirm first
Revoke signing key {kid}.
Invalidate the compromised application signing key {kid}.

Documentation

📖
Documentation
https://auth0.com/docs/api/management/v2
📖
APIReference
https://auth0.com/docs/api/management/v2
📖
GettingStarted
https://auth0.com/docs/get-started
📖
Authentication
https://auth0.com/docs/secure/tokens
📖
Documentation
https://auth0.com/docs/api/authentication
📖
APIReference
https://auth0.com/docs/api/authentication
📖
Documentation
https://docs.fga.dev

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/auth0/refs/heads/main/openapi/auth0-keys-api-openapi.yml
⚙
AsyncAPI
https://raw.githubusercontent.com/api-evangelist/auth0/refs/heads/main/asyncapi/auth0-log-streams-and-actions-asyncapi.yml

Other Resources

🔗
OpenAPISource
https://auth0.com/docs/api/management/openapi.json
🔗
SpectralRules
https://raw.githubusercontent.com/api-evangelist/auth0/refs/heads/main/rules/auth0-management-rules.yml
🔗
SpectralRules
https://raw.githubusercontent.com/api-evangelist/auth0/refs/heads/main/rules/auth0-authentication-rules.yml
🔗
SpectralRules
https://raw.githubusercontent.com/api-evangelist/auth0/refs/heads/main/rules/auth0-fga-rules.yml
🔗
Project
https://openfga.dev
🔗
Repository
https://github.com/openfga/openfga

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/auth0:auth0-keys-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

auth0-keys-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: Auth0 Management Keys API
  description: Auth0 Management API v2.
  termsOfService: https://auth0.com/web-terms/
  contact:
    name: Auth0 Support
    url: https://support.auth0.com
  version: '2.0'
servers:
- url: https://{tenantDomain}/api/v2
  variables:
    tenantDomain:
      default: '{TENANT}.auth0.com'
      description: Auth0 Tenant Domain
security:
- bearerAuth: []
tags:


# --- truncated at 32 KB (45 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/auth0/refs/heads/main/openapi/auth0-keys-api-openapi.yml