Authentik

Authentik Authenticators API

Authenticator device management for TOTP, static, WebAuthn, SMS, email, Duo and endpoint devices, from both the admin and end-user perspectives.

GitHub OpenAPI
Business capability
Identity & Access Management BC-620.20

Operations 83

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

GET /authenticators/admin/all/ List every MFA device a user has (admin) · Authenticators admin all list #
Ask an LLM
“As an admin, how can I see all of a given user's MFA devices across every type?”
“Can I pull one combined list of a user's authenticators instead of checking each device type?”
Tell an agent
As admin, list all authenticator devices belonging to user {user}.
Show every enrolled MFA device, of any type, for user {user}.
GET /authenticators/admin/duo/ List all users' Duo devices (admin) · Authenticators admin duo list #
Ask an LLM
“Which Duo devices are enrolled across all users in authentik?”
“As an administrator, can I search every user's Duo devices by name?”
Tell an agent
As admin, list every Duo device in the instance.
Search all users' Duo devices for {search}.
POST /authenticators/admin/duo/ Create a Duo device record (admin) · Authenticators admin duo create #
Ask an LLM
“Can an admin register a Duo device record directly through the API?”
“How do I add a Duo authenticator entry on behalf of a user?”
Tell an agent
As admin, create a Duo device named {name}.
Add a new admin-managed Duo authenticator called {name}.
GET /authenticators/admin/duo/{id}/ Get any user's Duo device (admin) · Authenticators admin duo retrieve #
Ask an LLM
“As an admin, how do I inspect a specific user's Duo device?”
“Can administrators look up any Duo device by its ID, not just their own?”
Tell an agent
As admin, show Duo device {id}.
Get the admin view of Duo authenticator {id}.
PUT /authenticators/admin/duo/{id}/ Replace any user's Duo device (admin) · Authenticators admin duo update #
Ask an LLM
“As an admin, how do I fully overwrite another user's Duo device record?”
“Can an admin resubmit a Duo device with a new name via a full replace?”
Tell an agent
As admin, replace Duo device {id} with the name {name}.
Overwrite the whole admin record of Duo device {id}, naming it {name}.
PATCH /authenticators/admin/duo/{id}/ Rename any user's Duo device (admin) · Authenticators admin duo partial update #
Ask an LLM
“As an admin, can I rename a user's Duo device without resending the whole record?”
“How does an administrator patch just the label on someone's Duo device?”
Tell an agent
As admin, rename Duo device {id} to {name}.
Patch only the name of another user's Duo device {id} to {name}.
DELETE /authenticators/admin/duo/{id}/ Remove any user's Duo device (admin) · Authenticators admin duo destroy #
Ask an LLM
“How can an admin remove a user's lost Duo device?”
“Can administrators delete a Duo enrollment for someone else?”
Tell an agent destructive · confirm first
As admin, delete Duo device {id}.
Remove another user's Duo enrollment {id}.
GET /authenticators/admin/email/ List all users' email authenticators (admin) · Authenticators admin email list #
Ask an LLM
“Which email-based MFA devices exist across all users?”
“As an admin, can I search everyone's email authenticators by name?”
Tell an agent
As admin, list every email authenticator device.
Find email authenticators across all users named {name}.
POST /authenticators/admin/email/ Create an email authenticator record (admin) · Authenticators admin email create #
Ask an LLM
“Can an admin create an email MFA device through the API?”
“How do I add an email authenticator entry as an administrator?”
Tell an agent
As admin, create an email authenticator named {name}.
Add an admin-managed email MFA device called {name}.
GET /authenticators/admin/email/{id}/ Get any user's email authenticator (admin) · Authenticators admin email retrieve #
Ask an LLM
“As an admin, how do I view a particular user's email authenticator?”
“Can an administrator open any email MFA device by ID?”
Tell an agent
As admin, show email authenticator {id}.
Get the admin view of email MFA device {id}.
PUT /authenticators/admin/email/{id}/ Replace any user's email authenticator (admin) · Authenticators admin email update #
Ask an LLM
“As an admin, how do I fully replace someone's email authenticator record?”
“Can administrators overwrite an email MFA device in a single PUT?”
Tell an agent
As admin, replace email authenticator {id} with the name {name}.
Overwrite the whole admin record of email device {id}, naming it {name}.
PATCH /authenticators/admin/email/{id}/ Rename any user's email authenticator (admin) · Authenticators admin email partial update #
Ask an LLM
“As an admin, can I change only the name of a user's email authenticator?”
“How does an administrator patch the label on someone's email MFA device?”
Tell an agent
As admin, rename email authenticator {id} to {name}.
Patch only the name of another user's email device {id} to {name}.
DELETE /authenticators/admin/email/{id}/ Remove any user's email authenticator (admin) · Authenticators admin email destroy #
Ask an LLM
“How does an admin delete a user's email-based MFA device?”
“Can I remove another person's email authenticator as an administrator?”
Tell an agent destructive · confirm first
As admin, delete email authenticator {id}.
Remove another user's email MFA device {id}.
GET /authenticators/admin/endpoint/ List all endpoint devices (admin) · Authenticators admin endpoint list #
Ask an LLM
“Which endpoint authenticator devices are registered across all users?”
“As an admin, can I search endpoint devices by name?”
Tell an agent
As admin, list every endpoint authenticator device.
Search all endpoint devices for {search}.
POST /authenticators/admin/endpoint/ Create an endpoint device record (admin) · Authenticators admin endpoint create #
Ask an LLM
“Can an admin register an endpoint authenticator device through the API?”
“How do I add a managed endpoint device as an administrator?”
Tell an agent
As admin, create an endpoint device named {name}.
Register endpoint authenticator {name} with primary key {pk}.
GET /authenticators/admin/endpoint/{uuid}/ Get any endpoint device (admin) · Authenticators admin endpoint retrieve #
Ask an LLM
“As an admin, how do I look up an endpoint authenticator device by UUID?”
“Can administrators view any user's endpoint device?”
Tell an agent
As admin, show endpoint device {uuid}.
Get the admin view of endpoint authenticator {uuid}.
PUT /authenticators/admin/endpoint/{uuid}/ Replace an endpoint device (admin) · Authenticators admin endpoint update #
Ask an LLM
“As an admin, how do I fully overwrite an endpoint device record?”
“Can an administrator replace an endpoint authenticator in one PUT request?”
Tell an agent
As admin, replace endpoint device {uuid} with the name {name}.
Overwrite the whole record of endpoint device {uuid}: name {name}, pk {pk}.
PATCH /authenticators/admin/endpoint/{uuid}/ Rename an endpoint device (admin) · Authenticators admin endpoint partial update #
Ask an LLM
“As an admin, can I rename an endpoint device without resending everything?”
“How do I patch just the label of an endpoint authenticator as an administrator?”
Tell an agent
As admin, rename endpoint device {uuid} to {name}.
Patch only the name of endpoint authenticator {uuid} to {name}.
DELETE /authenticators/admin/endpoint/{uuid}/ Remove an endpoint device (admin) · Authenticators admin endpoint destroy #
Ask an LLM
“How does an admin remove an endpoint authenticator device?”
“Can I delete a decommissioned endpoint device as an administrator?”
Tell an agent destructive · confirm first
As admin, delete endpoint device {uuid}.
Remove the decommissioned endpoint authenticator {uuid}.
GET /authenticators/admin/sms/ List all users' SMS devices (admin) · Authenticators admin sms list #
Ask an LLM
“Which SMS-based MFA devices are enrolled across all users?”
“As an admin, can I search everyone's SMS authenticators by name?”
Tell an agent
As admin, list every SMS authenticator device.
Find SMS devices across all users named {name}.
POST /authenticators/admin/sms/ Create an SMS device record (admin) · Authenticators admin sms create #
Ask an LLM
“Can an admin create an SMS MFA device through the API?”
“How do I add an SMS authenticator entry as an administrator?”
Tell an agent
As admin, create an SMS device named {name}.
Add an admin-managed text-message authenticator called {name}.
GET /authenticators/admin/sms/{id}/ Get any user's SMS device (admin) · Authenticators admin sms retrieve #
Ask an LLM
“As an admin, how do I view a specific user's SMS authenticator?”
“Can administrators open any SMS MFA device by ID?”
Tell an agent
As admin, show SMS device {id}.
Get the admin view of text-message authenticator {id}.
PUT /authenticators/admin/sms/{id}/ Replace any user's SMS device (admin) · Authenticators admin sms update #
Ask an LLM
“As an admin, how do I fully replace someone's SMS device record?”
“Can administrators overwrite an SMS authenticator in a single PUT?”
Tell an agent
As admin, replace SMS device {id} with the name {name}.
Overwrite the whole admin record of SMS authenticator {id}, naming it {name}.
PATCH /authenticators/admin/sms/{id}/ Rename any user's SMS device (admin) · Authenticators admin sms partial update #
Ask an LLM
“As an admin, can I change only the name of a user's SMS device?”
“How does an administrator patch the label on someone's SMS authenticator?”
Tell an agent
As admin, rename SMS device {id} to {name}.
Patch only the name of another user's SMS authenticator {id} to {name}.
DELETE /authenticators/admin/sms/{id}/ Remove any user's SMS device (admin) · Authenticators admin sms destroy #
Ask an LLM
“How does an admin remove a user's SMS MFA device after a phone number change?”
“Can I delete another person's SMS authenticator as an administrator?”
Tell an agent destructive · confirm first
As admin, delete SMS device {id}.
Remove another user's text-message authenticator {id}.
GET /authenticators/admin/static/ List all users' static token devices (admin) · Authenticators admin static list #
Ask an LLM
“Which static recovery-code devices exist across all users?”
“As an admin, can I search everyone's static token authenticators?”
Tell an agent
As admin, list every static token device.
Search all users' static recovery-code devices for {search}.
POST /authenticators/admin/static/ Create a static token device (admin) · Authenticators admin static create #
Ask an LLM
“Can an admin create a static recovery-code device through the API?”
“How do I add a static token authenticator as an administrator?”
Tell an agent
As admin, create a static token device named {name}.
Add an admin-managed recovery-code authenticator called {name}.
GET /authenticators/admin/static/{id}/ Get any user's static token device (admin) · Authenticators admin static retrieve #
Ask an LLM
“As an admin, how do I inspect a user's static recovery-code device?”
“Can administrators open any static token authenticator by ID?”
Tell an agent
As admin, show static token device {id}.
Get the admin view of recovery-code authenticator {id}.
PUT /authenticators/admin/static/{id}/ Replace any user's static token device (admin) · Authenticators admin static update #
Ask an LLM
“As an admin, how do I fully replace someone's static token device record?”
“Can administrators overwrite a recovery-code device in a single PUT?”
Tell an agent
As admin, replace static token device {id} with the name {name}.
Overwrite the whole admin record of recovery-code device {id}, naming it {name}.
PATCH /authenticators/admin/static/{id}/ Rename any user's static token device (admin) · Authenticators admin static partial update #
Ask an LLM
“As an admin, can I change only the name of a user's static token device?”
“How does an administrator patch the label on someone's recovery-code device?”
Tell an agent
As admin, rename static token device {id} to {name}.
Patch only the name of another user's recovery-code device {id} to {name}.
DELETE /authenticators/admin/static/{id}/ Remove any user's static token device (admin) · Authenticators admin static destroy #
Ask an LLM
“How does an admin revoke a user's static recovery codes?”
“Can I delete another person's static token device as an administrator?”
Tell an agent destructive · confirm first
As admin, delete static token device {id}.
Remove another user's recovery-code authenticator {id}.
GET /authenticators/admin/totp/ List all users' TOTP devices (admin) · Authenticators admin totp list #
Ask an LLM
“Which authenticator-app (TOTP) devices are enrolled across all users?”
“As an admin, can I search everyone's TOTP devices by name?”
Tell an agent
As admin, list every TOTP device.
Find TOTP authenticator apps across all users named {name}.
POST /authenticators/admin/totp/ Create a TOTP device record (admin) · Authenticators admin totp create #
Ask an LLM
“Can an admin create a TOTP authenticator-app device through the API?”
“How do I add a time-based one-time password device as an administrator?”
Tell an agent
As admin, create a TOTP device named {name}.
Add an admin-managed authenticator-app device called {name}.
GET /authenticators/admin/totp/{id}/ Get any user's TOTP device (admin) · Authenticators admin totp retrieve #
Ask an LLM
“As an admin, how do I view a specific user's TOTP device?”
“Can administrators open any authenticator-app device by ID?”
Tell an agent
As admin, show TOTP device {id}.
Get the admin view of authenticator-app device {id}.
PUT /authenticators/admin/totp/{id}/ Replace any user's TOTP device (admin) · Authenticators admin totp update #
Ask an LLM
“What's the admin call to resend a user's entire TOTP authenticator-app record?”
“Can administrators overwrite an authenticator-app device in a single PUT?”
Tell an agent
As admin, replace TOTP device {id} with the name {name}.
Overwrite the whole admin record of authenticator-app device {id}, naming it {name}.
PATCH /authenticators/admin/totp/{id}/ Rename any user's TOTP device (admin) · Authenticators admin totp partial update #
Ask an LLM
“Is there a way for an admin to relabel one user's TOTP authenticator app without a full replace?”
“How does an administrator patch the label on someone's authenticator-app device?”
Tell an agent
As admin, rename TOTP device {id} to {name}.
Patch only the name of another user's authenticator-app device {id} to {name}.
DELETE /authenticators/admin/totp/{id}/ Remove any user's TOTP device (admin) · Authenticators admin totp destroy #
Ask an LLM
“How does an admin reset MFA for a user who lost the phone with their authenticator app?”
“Can I delete another person's TOTP device as an administrator?”
Tell an agent destructive · confirm first
As admin, delete TOTP device {id}.
Remove another user's authenticator-app device {id}.
GET /authenticators/admin/webauthn/ List all users' WebAuthn devices (admin) · Authenticators admin webauthn list #
Ask an LLM
“Which security keys and passkeys are registered across all users?”
“As an admin, can I search everyone's WebAuthn devices by name?”
Tell an agent
As admin, list every WebAuthn device.
Search all users' passkeys and security keys for {search}.
POST /authenticators/admin/webauthn/ Create a WebAuthn device record (admin) · Authenticators admin webauthn create #
Ask an LLM
“Can an admin create a WebAuthn device record through the API?”
“How do I add a security key entry as an administrator?”
Tell an agent
As admin, create a WebAuthn device named {name}.
Add an admin-managed security key record called {name}.
GET /authenticators/admin/webauthn/{id}/ Get any user's WebAuthn device (admin) · Authenticators admin webauthn retrieve #
Ask an LLM
“As an admin, how do I inspect a specific user's passkey or security key?”
“Can administrators open any WebAuthn device by ID?”
Tell an agent
As admin, show WebAuthn device {id}.
Get the admin view of security key {id}.
PUT /authenticators/admin/webauthn/{id}/ Replace any user's WebAuthn device (admin) · Authenticators admin webauthn update #
Ask an LLM
“What's the admin call to resend a user's entire WebAuthn passkey record?”
“Can administrators overwrite a security key record in a single PUT?”
Tell an agent
As admin, replace WebAuthn device {id} with the name {name}.
Overwrite the whole admin record of security key {id}, naming it {name}.
PATCH /authenticators/admin/webauthn/{id}/ Rename any user's WebAuthn device (admin) · Authenticators admin webauthn partial update #
Ask an LLM
“Is there a way for an admin to relabel one user's WebAuthn passkey without a full replace?”
“How does an administrator patch the label on someone's security key?”
Tell an agent
As admin, rename WebAuthn device {id} to {name}.
Patch only the name of another user's security key {id} to {name}.
DELETE /authenticators/admin/webauthn/{id}/ Remove any user's WebAuthn device (admin) · Authenticators admin webauthn destroy #
Ask an LLM
“How does an admin revoke a user's lost security key?”
“Can I delete another person's passkey as an administrator?”
Tell an agent destructive · confirm first
As admin, delete WebAuthn device {id}.
Remove another user's security key {id}.
GET /authenticators/all/ List all of my MFA devices · Authenticators all list #
Ask an LLM
“What MFA devices do I have enrolled on my own account?”
“Can I see all my authenticators of every type in one list?”
Tell an agent
List all my enrolled authenticator devices.
Show every MFA method on my account, whatever the type.
GET /authenticators/duo/ List my Duo devices · Authenticators duo list #
Ask an LLM
“Which Duo devices are set up on my own account?”
“Can I search my Duo devices by name?”
Tell an agent
List my Duo devices.
Find my own Duo device named {name}.
GET /authenticators/duo/{id}/ Get one of my Duo devices · Authenticators duo retrieve #
Ask an LLM
“How do I see the details of a Duo device on my account?”
“Can I look up my own Duo enrollment by ID?”
Tell an agent
Show my Duo device {id}.
Get details of my own Duo enrollment {id}.
PUT /authenticators/duo/{id}/ Replace one of my Duo devices · Authenticators duo update #
Ask an LLM
“How do I resubmit my Duo device record with a new name?”
“Can I fully replace my own Duo device entry with a PUT?”
Tell an agent
Replace my Duo device {id} with the name {name}.
Overwrite my own Duo device record {id}, setting its name to {name}.
PATCH /authenticators/duo/{id}/ Rename one of my Duo devices · Authenticators duo partial update #
Ask an LLM
“Can I give my Duo device a friendlier name?”
“How do I change only the label on my own Duo device?”
Tell an agent
Rename my Duo device {id} to {name}.
Change just the name of my own Duo device {id} to {name}.
DELETE /authenticators/duo/{id}/ Remove one of my Duo devices · Authenticators duo destroy #
Ask an LLM
“How do I unenroll a Duo device from my account?”
“Can I delete my own old Duo device?”
Tell an agent destructive · confirm first
Delete my Duo device {id}.
Unenroll my own Duo device {id}.
GET /authenticators/duo/{id}/used_by/ See what references my Duo device · Authenticators duo used by list #
Ask an LLM
“What objects in authentik reference my Duo device?”
“Is anything still using a Duo device before I remove it?”
Tell an agent
List everything that uses Duo device {id}.
Check what depends on my Duo device {id}.
GET /authenticators/email/ List my email authenticators · Authenticators email list #
Ask an LLM
“Which email MFA devices are set up on my own account?”
“Can I search my email authenticators by name?”
Tell an agent
List my email authenticators.
Find my own email MFA device named {name}.
GET /authenticators/email/{id}/ Get one of my email authenticators · Authenticators email retrieve #
Ask an LLM
“How do I view the details of an email authenticator on my account?”
“Can I look up my own email MFA device by ID?”
Tell an agent
Show my email authenticator {id}.
Get details of my own email MFA device {id}.
PUT /authenticators/email/{id}/ Replace one of my email authenticators · Authenticators email update #
Ask an LLM
“How do I resubmit my email authenticator record with a new name?”
“Can I fully replace my own email MFA device entry with a PUT?”
Tell an agent
Replace my email authenticator {id} with the name {name}.
Overwrite my own email MFA record {id}, setting its name to {name}.
PATCH /authenticators/email/{id}/ Rename one of my email authenticators · Authenticators email partial update #
Ask an LLM
“Can I give my email authenticator a clearer name?”
“How do I change only the label on my own email MFA device?”
Tell an agent
Rename my email authenticator {id} to {name}.
Change just the name of my own email MFA device {id} to {name}.
DELETE /authenticators/email/{id}/ Remove one of my email authenticators · Authenticators email destroy #
Ask an LLM
“How do I stop receiving MFA codes by email on my account?”
“Can I delete my own email authenticator?”
Tell an agent destructive · confirm first
Delete my email authenticator {id}.
Unenroll my own email MFA device {id}.
GET /authenticators/email/{id}/used_by/ See what references my email authenticator · Authenticators email used by list #
Ask an LLM
“What objects reference my email authenticator?”
“Is anything still depending on an email MFA device before I delete it?”
Tell an agent
List everything that uses email authenticator {id}.
Check what depends on my email MFA device {id}.
GET /authenticators/endpoint/ List my endpoint devices · Authenticators endpoint list #
Ask an LLM
“Which endpoint authenticator devices are tied to my own account?”
“Can I search my endpoint devices by name?”
Tell an agent
List my endpoint authenticator devices.
Find my own endpoint device named {name}.
GET /authenticators/endpoint/{uuid}/ Get one of my endpoint devices · Authenticators endpoint retrieve #
Ask an LLM
“How do I see details of an endpoint device on my account?”
“Can I look up my own endpoint authenticator by UUID?”
Tell an agent
Show my endpoint device {uuid}.
Get details of my own endpoint authenticator {uuid}.
GET /authenticators/endpoint/{uuid}/used_by/ See what references an endpoint device · Authenticators endpoint used by list #
Ask an LLM
“What objects reference a given endpoint authenticator device?”
“Is an endpoint device still in use anywhere in authentik?”
Tell an agent
List everything that uses endpoint device {uuid}.
Check what depends on endpoint authenticator {uuid}.
GET /authenticators/sms/ List my SMS devices · Authenticators sms list #
Ask an LLM
“Which SMS MFA devices are set up on my own account?”
“Can I search my text-message authenticators by name?”
Tell an agent
List my SMS devices.
Find my own text-message authenticator named {name}.
GET /authenticators/sms/{id}/ Get one of my SMS devices · Authenticators sms retrieve #
Ask an LLM
“How do I view the details of an SMS device on my account?”
“Can I look up my own text-message authenticator by ID?”
Tell an agent
Show my SMS device {id}.
Get details of my own text-message authenticator {id}.
PUT /authenticators/sms/{id}/ Replace one of my SMS devices · Authenticators sms update #
Ask an LLM
“How do I resubmit my SMS device record with a new name?”
“Can I fully replace my own SMS authenticator entry with a PUT?”
Tell an agent
Replace my SMS device {id} with the name {name}.
Overwrite my own text-message authenticator record {id}, setting its name to {name}.
PATCH /authenticators/sms/{id}/ Rename one of my SMS devices · Authenticators sms partial update #
Ask an LLM
“Can I give my SMS device a friendlier name?”
“How do I change only the label on my own text-message authenticator?”
Tell an agent
Rename my SMS device {id} to {name}.
Change just the name of my own text-message authenticator {id} to {name}.
DELETE /authenticators/sms/{id}/ Remove one of my SMS devices · Authenticators sms destroy #
Ask an LLM
“How do I remove an old phone number from my SMS MFA?”
“Can I delete my own SMS authenticator?”
Tell an agent destructive · confirm first
Delete my SMS device {id}.
Unenroll my own text-message authenticator {id}.
GET /authenticators/sms/{id}/used_by/ See what references my SMS device · Authenticators sms used by list #
Ask an LLM
“What objects reference my SMS authenticator?”
“Is anything still using an SMS device before I remove it?”
Tell an agent
List everything that uses SMS device {id}.
Check what depends on my text-message authenticator {id}.
GET /authenticators/static/ List my static recovery-code devices · Authenticators static list #
Ask an LLM
“Which static recovery-code devices do I have on my account?”
“Can I search my static token devices by name?”
Tell an agent
List my static token devices.
Find my own recovery-code device named {name}.
GET /authenticators/static/{id}/ Get one of my static token devices · Authenticators static retrieve #
Ask an LLM
“How do I view one of my static recovery-code devices?”
“Can I look up my own static token device by ID?”
Tell an agent
Show my static token device {id}.
Get details of my own recovery-code device {id}.
PUT /authenticators/static/{id}/ Replace one of my static token devices · Authenticators static update #
Ask an LLM
“How do I resubmit my static token device record with a new name?”
“Can I fully replace my own recovery-code device entry with a PUT?”
Tell an agent
Replace my static token device {id} with the name {name}.
Overwrite my own recovery-code device record {id}, setting its name to {name}.
PATCH /authenticators/static/{id}/ Rename one of my static token devices · Authenticators static partial update #
Ask an LLM
“Can I give my recovery-code device a clearer name?”
“How do I change only the label on my own static token device?”
Tell an agent
Rename my static token device {id} to {name}.
Change just the name of my own recovery-code device {id} to {name}.
DELETE /authenticators/static/{id}/ Remove one of my static token devices · Authenticators static destroy #
Ask an LLM
“How do I get rid of my old set of recovery codes?”
“Can I delete my own static token device?”
Tell an agent destructive · confirm first
Delete my static token device {id}.
Discard my own recovery-code device {id}.
GET /authenticators/static/{id}/used_by/ See what references my static token device · Authenticators static used by list #
Ask an LLM
“What objects reference my static recovery-code device?”
“Is anything still using a static token device before I remove it?”
Tell an agent
List everything that uses static token device {id}.
Check what depends on my recovery-code device {id}.
GET /authenticators/totp/ List my TOTP authenticator apps · Authenticators totp list #
Ask an LLM
“Which authenticator apps (TOTP) are linked to my own account?”
“Can I search my TOTP devices by name?”
Tell an agent
List my TOTP devices.
Find my own authenticator-app device named {name}.
GET /authenticators/totp/{id}/ Get one of my TOTP devices · Authenticators totp retrieve #
Ask an LLM
“How do I view one of my TOTP authenticator-app devices?”
“Can I look up my own TOTP device by ID?”
Tell an agent
Show my TOTP device {id}.
Get details of my own authenticator-app device {id}.
PUT /authenticators/totp/{id}/ Replace one of my TOTP devices · Authenticators totp update #
Ask an LLM
“How do I resubmit my TOTP device record with a new name?”
“Can I fully replace my own authenticator-app entry with a PUT?”
Tell an agent
Replace my TOTP device {id} with the name {name}.
Overwrite my own authenticator-app record {id}, setting its name to {name}.
PATCH /authenticators/totp/{id}/ Rename one of my TOTP devices · Authenticators totp partial update #
Ask an LLM
“Can I give my authenticator-app device a friendlier name?”
“How do I change only the label on my own TOTP device?”
Tell an agent
Rename my TOTP device {id} to {name}.
Change just the name of my own authenticator-app device {id} to {name}.
DELETE /authenticators/totp/{id}/ Remove one of my TOTP devices · Authenticators totp destroy #
Ask an LLM
“How do I unlink an authenticator app from my account after switching phones?”
“Can I delete my own TOTP device?”
Tell an agent destructive · confirm first
Delete my TOTP device {id}.
Unlink my own authenticator-app device {id}.
GET /authenticators/totp/{id}/used_by/ See what references my TOTP device · Authenticators totp used by list #
Ask an LLM
“What objects reference my TOTP authenticator app?”
“Is anything still using a TOTP device before I remove it?”
Tell an agent
List everything that uses TOTP device {id}.
Check what depends on my authenticator-app device {id}.
GET /authenticators/webauthn/ List my passkeys and security keys · Authenticators webauthn list #
Ask an LLM
“Which passkeys and security keys are registered on my own account?”
“Can I search my WebAuthn devices by name?”
Tell an agent
List my WebAuthn devices.
Find my own security key named {name}.
GET /authenticators/webauthn/{id}/ Get one of my WebAuthn devices · Authenticators webauthn retrieve #
Ask an LLM
“How do I view the details of one of my passkeys?”
“Can I look up my own WebAuthn device by ID?”
Tell an agent
Show my WebAuthn device {id}.
Get details of my own security key {id}.
PUT /authenticators/webauthn/{id}/ Replace one of my WebAuthn devices · Authenticators webauthn update #
Ask an LLM
“How do I resubmit my WebAuthn device record with a new name?”
“Can I fully replace my own security key entry with a PUT?”
Tell an agent
Replace my WebAuthn device {id} with the name {name}.
Overwrite my own security key record {id}, setting its name to {name}.
PATCH /authenticators/webauthn/{id}/ Rename one of my WebAuthn devices · Authenticators webauthn partial update #
Ask an LLM
“Can I give my passkey a name that tells my devices apart?”
“How do I change only the label on my own security key?”
Tell an agent
Rename my WebAuthn device {id} to {name}.
Change just the name of my own security key {id} to {name}.
DELETE /authenticators/webauthn/{id}/ Remove one of my WebAuthn devices · Authenticators webauthn destroy #
Ask an LLM
“How do I remove a lost security key from my account?”
“Can I delete one of my own passkeys?”
Tell an agent destructive · confirm first
Delete my WebAuthn device {id}.
Remove my own lost security key {id}.
GET /authenticators/webauthn/{id}/used_by/ See what references my WebAuthn device · Authenticators webauthn used by list #
Ask an LLM
“What objects reference my WebAuthn security key?”
“Is anything still using a passkey before I remove it?”
Tell an agent
List everything that uses WebAuthn device {id}.
Check what depends on my security key {id}.

Documentation

📖
Documentation
https://docs.goauthentik.io
📖
APIReference
https://api.goauthentik.io/

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/authentik/refs/heads/main/openapi/authentik-authenticators-api-openapi.yml

SDKs

📦
GitHubRepository
https://github.com/goauthentik/authentik

Other Resources

🔗
Overlay
https://raw.githubusercontent.com/api-evangelist/authentik/refs/heads/main/overlays/authentik-authenticators-api-overlay.yaml
🔗
SDKs
https://www.npmjs.com/package/@goauthentik/api
🔗
SDKs
https://pypi.org/project/authentik-client/

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/authentik:authentik-authenticators-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

authentik-authenticators-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: authentik Authenticators API
  version: 2026.11.0-rc1
  description: Making authentication simple.
  contact:
    email: hello@goauthentik.io
  license:
    name: MIT
    url: https://github.com/goauthentik/authentik/blob/main/LICENSE
  x-source-url: https://api.goauthentik.io/schema.yml
  x-last-validated: '2026-09-04'
servers:
- url: /api/v3
tags:


# --- truncated at 32 KB (88 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/authentik/refs/heads/main/openapi/authentik-authenticators-api-openapi.yml