Authentik

Authentik Endpoints API

Endpoint device management — the authentik Agent connectors, device enrollment tokens, device bindings, device access groups, Fleet and Google Chrome device-trust connectors, and platform SSO registration.

GitHub OpenAPI

Operations 70

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

GET /endpoints/agents/connectors/ List authentik Agent connectors · Endpoints agents connectors list #
Ask an LLM
“Which authentik Agent connectors are set up for my devices?”
“Can I see only the Agent connectors that are currently enabled?”
Tell an agent
List all authentik Agent connectors.
Show Agent connectors named {name}.
POST /endpoints/agents/connectors/ Create an authentik Agent connector · Endpoints agents connectors create #
Ask an LLM
“How do I set up a new connector for the authentik Agent on endpoints?”
“Can a new Agent connector set how long device auth sessions last?”
Tell an agent
Create an Agent connector named {name}.
Add a new Agent connector {name} with a refresh interval of {refresh_interval}.
GET /endpoints/agents/connectors/{connector_uuid}/ Get an authentik Agent connector · Endpoints agents connectors retrieve #
Ask an LLM
“What settings does a particular Agent connector have?”
“Is the NSS UID offset configured on this Agent connector?”
Tell an agent
Show Agent connector {connector_uuid}.
Fetch the snapshot expiry and session settings of Agent connector {connector_uuid}.
PUT /endpoints/agents/connectors/{connector_uuid}/ Replace an Agent connector's settings · Endpoints agents connectors update #
Ask an LLM
“Can I overwrite the full configuration of an Agent connector in one call?”
“What do I have to resend when fully replacing an Agent connector?”
Tell an agent
Replace every setting of Agent connector {connector_uuid}, naming it {name}.
Fully rewrite Agent connector {connector_uuid} as {name} with auth session duration {auth_session_duration}.
PATCH /endpoints/agents/connectors/{connector_uuid}/ Change some settings on an Agent connector · Endpoints agents connectors partial update #
Ask an LLM
“Can I just disable an Agent connector without touching its other settings?”
“Is it possible to change only the challenge idle timeout on an Agent connector?”
Tell an agent
On Agent connector {connector_uuid}, only set enabled to {enabled}.
Change just the challenge idle timeout of Agent connector {connector_uuid} to {challenge_idle_timeout}.
DELETE /endpoints/agents/connectors/{connector_uuid}/ Delete an authentik Agent connector · Endpoints agents connectors destroy #
Ask an LLM
“How do I remove an Agent connector I no longer use?”
“Is deleting an Agent connector permanent?”
Tell an agent destructive · confirm first
Delete Agent connector {connector_uuid}.
Remove the authentik Agent connector {connector_uuid}.
POST /endpoints/agents/connectors/{connector_uuid}/mdm_config/ Generate MDM config to deploy the Agent · Endpoints agents connectors mdm config create #
Ask an LLM
“How do I get a configuration profile to push the authentik Agent through my MDM?”
“Which platform and enrollment token does the MDM deployment config need?”
Tell an agent
Generate MDM configuration for connector {connector_uuid} on platform {platform} with enrollment token {enrollment_token}.
Build the MDM deployment profile for Agent connector {connector_uuid} targeting {platform}.
GET /endpoints/agents/connectors/{connector_uuid}/used_by/ See what uses an Agent connector · Endpoints agents connectors used by list #
Ask an LLM
“What objects depend on this Agent connector?”
“Would removing an Agent connector break anything else?”
Tell an agent
Show everything that references Agent connector {connector_uuid}.
List objects using Agent connector {connector_uuid}.
GET /endpoints/agents/connectors/agent_config/ Get the running Agent's configuration · Endpoints agents connectors agent config retrieve #
Ask an LLM
“Where does the installed authentik Agent fetch its own configuration from?”
“Can the Agent on a device read the config its connector assigns it?”
Tell an agent
Fetch the Agent configuration for this device.
Get the config the authentik Agent should run with.
POST /endpoints/agents/connectors/auth_fed/ Authenticate a device via federated JWT · Endpoints agents connectors auth fed create #
Ask an LLM
“How does an enrolled device sign in to authentik using a federated token?”
“Can a device exchange a JWT from a federation provider for an Agent session?”
Tell an agent
Run federated authentication for device {device}.
Authenticate device {device} through JWT federation.
POST /endpoints/agents/connectors/auth_ia/ Start interactive Agent authentication · Endpoints agents connectors auth ia create #
Ask an LLM
“How does the Agent start an interactive login for a user on a device?”
“Can I pass a login hint when the Agent begins interactive auth?”
Tell an agent
Begin interactive Agent authentication.
Start interactive authentication with login hint {login_hint}.
POST /endpoints/agents/connectors/check_in/ Report a device check-in from the Agent · Endpoints agents connectors check in create #
Ask an LLM
“How does the Agent report a device's OS, disks and installed software to authentik?”
“What inventory can a device send when it checks in?”
Tell an agent
Send a device check-in with operating system {os} and vendor {vendor}.
Check in this device reporting hardware {hardware} and software {software}.
POST /endpoints/agents/connectors/enroll/ Enroll a device with the Agent · Endpoints agents connectors enroll create #
Ask an LLM
“How do I enroll a new laptop into authentik endpoint management?”
“Which details does a device need to provide to enroll?”
Tell an agent
Enroll device {device_name} with serial number {device_serial}.
Register the machine with serial {device_serial} as {device_name}.
GET /endpoints/agents/enrollment_tokens/ List device enrollment tokens · Endpoints agents enrollment tokens list #
Ask an LLM
“What enrollment tokens exist for enrolling devices?”
“Can I see only the enrollment tokens tied to one connector?”
Tell an agent
List all device enrollment tokens.
Show enrollment tokens for connector {connector}.
POST /endpoints/agents/enrollment_tokens/ Create a device enrollment token · Endpoints agents enrollment tokens create #
Ask an LLM
“How do I make a token that devices use to enroll with the Agent?”
“Can an enrollment token expire and drop devices into a device group?”
Tell an agent
Create enrollment token {name} for connector {connector}.
Make an enrollment token {name} on connector {connector} that expires at {expires}.
GET /endpoints/agents/enrollment_tokens/{token_uuid}/ Get a device enrollment token · Endpoints agents enrollment tokens retrieve #
Ask an LLM
“What connector and expiry does a given enrollment token have?”
“Which device group will an enrollment token assign?”
Tell an agent
Show enrollment token {token_uuid}.
Fetch the details of enrollment token {token_uuid}.
PUT /endpoints/agents/enrollment_tokens/{token_uuid}/ Replace an enrollment token's settings · Endpoints agents enrollment tokens update #
Ask an LLM
“Can I overwrite all fields of an enrollment token at once?”
“What must I resend when fully replacing an enrollment token?”
Tell an agent
Replace enrollment token {token_uuid} with name {name} on connector {connector}.
Fully rewrite enrollment token {token_uuid} as {name} for connector {connector}, expiring {expires}.
PATCH /endpoints/agents/enrollment_tokens/{token_uuid}/ Change part of an enrollment token · Endpoints agents enrollment tokens partial update #
Ask an LLM
“Can I just extend an enrollment token's expiry without changing anything else?”
“Is it possible to only move an enrollment token to another device group?”
Tell an agent
Only set the expiry of enrollment token {token_uuid} to {expires}.
Change just the device group of enrollment token {token_uuid} to {device_group}.
DELETE /endpoints/agents/enrollment_tokens/{token_uuid}/ Delete a device enrollment token · Endpoints agents enrollment tokens destroy #
Ask an LLM
“How do I revoke an enrollment token so no more devices can use it?”
“Is deleting an enrollment token irreversible?”
Tell an agent destructive · confirm first
Delete enrollment token {token_uuid}.
Remove device enrollment token {token_uuid}.
GET /endpoints/agents/enrollment_tokens/{token_uuid}/used_by/ See what uses an enrollment token · Endpoints agents enrollment tokens used by list #
Ask an LLM
“Which objects reference a particular enrollment token?”
“What would be affected if I removed this enrollment token?”
Tell an agent
Show what depends on enrollment token {token_uuid}.
List objects referencing enrollment token {token_uuid}.
GET /endpoints/agents/enrollment_tokens/{token_uuid}/view_key/ Reveal an enrollment token's key · Endpoints agents enrollment tokens view key retrieve #
Ask an LLM
“How do I see the actual secret key of an enrollment token?”
“Is viewing an enrollment token's key logged?”
Tell an agent
Reveal the key for enrollment token {token_uuid}.
Show me the secret value of enrollment token {token_uuid}.
GET /endpoints/agents/psso/ise/ List Platform SSO Secure Enclave keys · Endpoints agents psso ise list #
Ask an LLM
“Which Apple Secure Enclave keys are registered for Platform SSO?”
“Can I filter Platform SSO enclave keys by user?”
Tell an agent
List all Platform SSO Secure Enclave key registrations.
Show Secure Enclave keys registered for user {user}.
POST /endpoints/agents/psso/ise/ Register a Secure Enclave key for a user · Endpoints agents psso ise create #
Ask an LLM
“How do I register an Apple Secure Enclave key for a user's Platform SSO?”
“What does a new Platform SSO enclave key record need?”
Tell an agent
Register Secure Enclave key {apple_secure_enclave_key} with ID {apple_enclave_key_id} for user {user} on a {device_type}.
Save a {device_type} Secure Enclave key {apple_secure_enclave_key} (ID {apple_enclave_key_id}) so {user} can use Platform SSO.
GET /endpoints/agents/psso/ise/{uuid}/ Get a Secure Enclave key registration · Endpoints agents psso ise retrieve #
Ask an LLM
“Which user and device type does a Secure Enclave key record belong to?”
“Can I look up one Platform SSO enclave key registration?”
Tell an agent
Show Secure Enclave key registration {uuid}.
Fetch the Platform SSO enclave key record {uuid}.
PUT /endpoints/agents/psso/ise/{uuid}/ Replace a Secure Enclave key registration · Endpoints agents psso ise update #
Ask an LLM
“Can I overwrite every field of a Platform SSO enclave key record?”
“What is required to fully replace a Secure Enclave key registration?”
Tell an agent
Replace enclave key record {uuid} with key {apple_secure_enclave_key}, ID {apple_enclave_key_id}, user {user}, device type {device_type}.
Overwrite all of enclave registration {uuid}: user {user}, key {apple_secure_enclave_key}, key ID {apple_enclave_key_id}, type {device_type}.
PATCH /endpoints/agents/psso/ise/{uuid}/ Change part of a Secure Enclave key record · Endpoints agents psso ise partial update #
Ask an LLM
“Can I just reassign a Secure Enclave key record to another user?”
“Is it possible to only change the device type on an enclave key registration?”
Tell an agent
Only change the user of enclave key record {uuid} to {user}.
Set just the device type of Secure Enclave registration {uuid} to {device_type}.
DELETE /endpoints/agents/psso/ise/{uuid}/ Delete a Secure Enclave key registration · Endpoints agents psso ise destroy #
Ask an LLM
“How do I remove a user's Platform SSO Secure Enclave key?”
“Is removing an enclave key registration permanent?”
Tell an agent destructive · confirm first
Delete Secure Enclave key registration {uuid}.
Remove the Platform SSO enclave key {uuid}.
GET /endpoints/agents/psso/ise/{uuid}/used_by/ See what uses a Secure Enclave key record · Endpoints agents psso ise used by list #
Ask an LLM
“What objects reference a given Platform SSO enclave key?”
“Does anything depend on this Secure Enclave key registration?”
Tell an agent
Show what references Secure Enclave registration {uuid}.
List objects using enclave key record {uuid}.
POST /endpoints/agents/psso/register/device/ Register a device for Platform SSO · Endpoints agents psso register device create #
Ask an LLM
“How does a Mac register its signing and encryption keys for Platform SSO?”
“Which device keys are needed to register for Platform SSO?”
Tell an agent
Register this device for Platform SSO with signing key {device_signing_key} ({sign_key_id}) and encryption key {device_encryption_key} ({enc_key_id}).
Enroll this Mac in Platform SSO: key IDs {sign_key_id} and {enc_key_id}, keys {device_signing_key} and {device_encryption_key}.
POST /endpoints/agents/psso/register/user/ Register a user for Platform SSO · Endpoints agents psso register user create #
Ask an LLM
“How does a user register their Secure Enclave key for Platform SSO sign-in?”
“What must a user send to complete Platform SSO user registration?”
Tell an agent
Register the Platform SSO user with auth {user_auth}, enclave key {user_secure_enclave_key} and key ID {enclave_key_id}.
Complete Platform SSO user registration using enclave key ID {enclave_key_id}, key {user_secure_enclave_key} and credentials {user_auth}.
GET /endpoints/connectors/ List all endpoint connectors of any type · Endpoints connectors list #
Ask an LLM
“What endpoint connectors of every kind are configured?”
“Can I search across all device connectors regardless of type?”
Tell an agent
List every endpoint connector, whatever its type.
Search all endpoint connectors for {search}.
GET /endpoints/connectors/{connector_uuid}/ Get any endpoint connector by ID · Endpoints connectors retrieve #
Ask an LLM
“How can I look up an endpoint connector when I don't know its type?”
“What type is a given endpoint connector?”
Tell an agent
Show endpoint connector {connector_uuid} regardless of type.
Look up generic endpoint connector {connector_uuid}.
DELETE /endpoints/connectors/{connector_uuid}/ Delete any endpoint connector · Endpoints connectors destroy #
Ask an LLM
“Can I delete an endpoint connector without knowing whether it's Fleet, Chrome or Agent?”
“Is deleting a generic endpoint connector permanent?”
Tell an agent destructive · confirm first
Delete endpoint connector {connector_uuid} of whatever type.
Remove generic endpoint connector {connector_uuid}.
GET /endpoints/connectors/{connector_uuid}/used_by/ See what uses any endpoint connector · Endpoints connectors used by list #
Ask an LLM
“What depends on an endpoint connector of any type?”
“Before removing a generic connector, what references it?”
Tell an agent
Show what uses generic endpoint connector {connector_uuid}.
List dependents of endpoint connector {connector_uuid} across all connector types.
GET /endpoints/connectors/types/ List creatable endpoint connector types · Endpoints connectors types list #
Ask an LLM
“What kinds of endpoint connectors can I create?”
“Which device connector types does this authentik version support?”
Tell an agent
List the endpoint connector types I can create.
Show all available connector types for device management.
GET /endpoints/device_access_groups/ List device access groups · Endpoints device access groups list #
Ask an LLM
“Which device access groups have been defined?”
“Can I find a device access group by name?”
Tell an agent
List all device access groups.
Show device access groups named {name}.
POST /endpoints/device_access_groups/ Create a device access group · Endpoints device access groups create #
Ask an LLM
“How do I create a group to control access for a set of devices?”
“Can a new device access group carry custom attributes?”
Tell an agent
Create a device access group named {name}.
Add device access group {name} with attributes {attributes}.
GET /endpoints/device_access_groups/{pbm_uuid}/ Get a device access group · Endpoints device access groups retrieve #
Ask an LLM
“What attributes are set on a specific device access group?”
“Can I view one device access group's details?”
Tell an agent
Show device access group {pbm_uuid}.
Fetch the attributes of device access group {pbm_uuid}.
PUT /endpoints/device_access_groups/{pbm_uuid}/ Replace a device access group · Endpoints device access groups update #
Ask an LLM
“Can I overwrite a device access group's name and attributes together?”
“What does a full replacement of a device access group require?”
Tell an agent
Replace device access group {pbm_uuid} with name {name}.
Fully rewrite device access group {pbm_uuid} as {name} with attributes {attributes}.
PATCH /endpoints/device_access_groups/{pbm_uuid}/ Change part of a device access group · Endpoints device access groups partial update #
Ask an LLM
“Can I just rename a device access group?”
“Is it possible to only update the attributes of a device access group?”
Tell an agent
Only rename device access group {pbm_uuid} to {name}.
Change just the attributes of device access group {pbm_uuid} to {attributes}.
DELETE /endpoints/device_access_groups/{pbm_uuid}/ Delete a device access group · Endpoints device access groups destroy #
Ask an LLM
“How do I remove a device access group?”
“Is deleting a device access group reversible?”
Tell an agent destructive · confirm first
Delete device access group {pbm_uuid}.
Remove the device access group {pbm_uuid}.
GET /endpoints/device_access_groups/{pbm_uuid}/used_by/ See what uses a device access group · Endpoints device access groups used by list #
Ask an LLM
“Which devices or objects reference a device access group?”
“What would break if I deleted this device access group?”
Tell an agent
Show what references device access group {pbm_uuid}.
List objects using device access group {pbm_uuid}.
GET /endpoints/device_bindings/ List device policy bindings · Endpoints device bindings list #
Ask an LLM
“Which policies, users or groups are bound to device access targets?”
“Can I list only the enabled device bindings for one target?”
Tell an agent
List all device policy bindings.
Show device bindings for target {target}.
POST /endpoints/device_bindings/ Bind a policy, user or group to a device target · Endpoints device bindings create #
Ask an LLM
“How do I bind a policy to a device access group?”
“Can a device binding be negated or given a timeout?”
Tell an agent
Bind policy {policy} to device target {target} at order {order}.
Create a device binding for group {group} on target {target} with order {order}.
GET /endpoints/device_bindings/{policy_binding_uuid}/ Get a device policy binding · Endpoints device bindings retrieve #
Ask an LLM
“What policy and order does a particular device binding use?”
“Is a given device binding negated?”
Tell an agent
Show device binding {policy_binding_uuid}.
Fetch the settings of device policy binding {policy_binding_uuid}.
PUT /endpoints/device_bindings/{policy_binding_uuid}/ Replace a device policy binding · Endpoints device bindings update #
Ask an LLM
“Can I overwrite every field of a device binding at once?”
“What must be resent when fully replacing a device binding?”
Tell an agent
Replace device binding {policy_binding_uuid} with target {target} at order {order}.
Fully rewrite device binding {policy_binding_uuid} to bind policy {policy} to {target} at order {order}.
PATCH /endpoints/device_bindings/{policy_binding_uuid}/ Change part of a device policy binding · Endpoints device bindings partial update #
Ask an LLM
“Can I just disable a device binding without deleting it?”
“Is it possible to only change a device binding's order?”
Tell an agent
Only set enabled on device binding {policy_binding_uuid} to {enabled}.
Change just the order of device binding {policy_binding_uuid} to {order}.
DELETE /endpoints/device_bindings/{policy_binding_uuid}/ Delete a device policy binding · Endpoints device bindings destroy #
Ask an LLM
“How do I unbind a policy from a device target?”
“Is deleting a device binding permanent?”
Tell an agent destructive · confirm first
Delete device binding {policy_binding_uuid}.
Remove the device policy binding {policy_binding_uuid}.
GET /endpoints/device_bindings/{policy_binding_uuid}/used_by/ See what uses a device policy binding · Endpoints device bindings used by list #
Ask an LLM
“What objects reference a given device binding?”
“Does anything depend on this device policy binding?”
Tell an agent
Show what references device binding {policy_binding_uuid}.
List dependents of device policy binding {policy_binding_uuid}.
GET /endpoints/devices/ List managed devices · Endpoints devices list #
Ask an LLM
“Which devices are registered in authentik?”
“Can I find a device by its identifier or name?”
Tell an agent
List all managed devices.
Find devices named {name}.
GET /endpoints/devices/{device_uuid}/ Get a managed device · Endpoints devices retrieve #
Ask an LLM
“What access group and expiry does a particular device have?”
“Can I see the attributes recorded for one device?”
Tell an agent
Show device {device_uuid}.
Fetch the details of managed device {device_uuid}.
PUT /endpoints/devices/{device_uuid}/ Replace a managed device's settings · Endpoints devices update #
Ask an LLM
“Can I overwrite all editable fields of a device in one request?”
“What must I resend when fully replacing a device record?”
Tell an agent
Replace device {device_uuid} with name {name}.
Fully rewrite device {device_uuid} as {name} in access group {access_group}.
PATCH /endpoints/devices/{device_uuid}/ Change part of a managed device · Endpoints devices partial update #
Ask an LLM
“Can I just move a device into a different access group?”
“Is it possible to only set an expiry on a device?”
Tell an agent
Only move device {device_uuid} into access group {access_group}.
Set just the expiry of device {device_uuid} to {expires}.
DELETE /endpoints/devices/{device_uuid}/ Delete a managed device · Endpoints devices destroy #
Ask an LLM
“How do I remove a device from authentik?”
“Is deleting a device record permanent?”
Tell an agent destructive · confirm first
Delete device {device_uuid}.
Remove managed device {device_uuid} from authentik.
GET /endpoints/devices/{device_uuid}/used_by/ See what uses a managed device · Endpoints devices used by list #
Ask an LLM
“What objects reference a particular device?”
“Before deleting a device, what depends on it?”
Tell an agent
Show what references device {device_uuid}.
List objects using managed device {device_uuid}.
GET /endpoints/devices/summary/ Get a summary of managed devices · Endpoints devices summary retrieve #
Ask an LLM
“Is there an overview of my device fleet's counts?”
“What does the device summary report?”
Tell an agent
Show the managed device summary.
Give me an overview of all devices.
GET /endpoints/fleet/connectors/ List Fleet connectors · Endpoints fleet connectors list #
Ask an LLM
“Which Fleet device management connectors are configured?”
“Can I find a Fleet connector by name?”
Tell an agent
List all Fleet connectors.
Show Fleet connectors named {name}.
POST /endpoints/fleet/connectors/ Connect a Fleet server · Endpoints fleet connectors create #
Ask an LLM
“How do I connect my Fleet server to authentik for device data?”
“Can a Fleet connector map Fleet users and teams to access groups?”
Tell an agent
Create Fleet connector {name} for URL {url} with token {token}.
Add Fleet connector {name} at {url} using token {token}, mapping teams to access groups: {map_teams_access_group}.
GET /endpoints/fleet/connectors/{connector_uuid}/ Get a Fleet connector · Endpoints fleet connectors retrieve #
Ask an LLM
“What URL and mapping options does a Fleet connector use?”
“Is user mapping turned on for this Fleet connector?”
Tell an agent
Show Fleet connector {connector_uuid}.
Fetch the settings of Fleet connector {connector_uuid}.
PUT /endpoints/fleet/connectors/{connector_uuid}/ Replace a Fleet connector · Endpoints fleet connectors update #
Ask an LLM
“Can I overwrite a Fleet connector's URL, token and name together?”
“What must I resend to fully replace a Fleet connector?”
Tell an agent
Replace Fleet connector {connector_uuid} as {name} at {url} with token {token}.
Overwrite all settings of Fleet connector {connector_uuid}: name {name}, server {url}, token {token}, map users {map_users}.
PATCH /endpoints/fleet/connectors/{connector_uuid}/ Change part of a Fleet connector · Endpoints fleet connectors partial update #
Ask an LLM
“Can I just rotate the API token on a Fleet connector?”
“Is it possible to only toggle user mapping on a Fleet connector?”
Tell an agent
Only update the token of Fleet connector {connector_uuid} to {token}.
Set just map users on Fleet connector {connector_uuid} to {map_users}.
DELETE /endpoints/fleet/connectors/{connector_uuid}/ Delete a Fleet connector · Endpoints fleet connectors destroy #
Ask an LLM
“How do I disconnect a Fleet server from authentik?”
“Is deleting a Fleet connector permanent?”
Tell an agent destructive · confirm first
Delete Fleet connector {connector_uuid}.
Remove the Fleet connector {connector_uuid}.
GET /endpoints/fleet/connectors/{connector_uuid}/used_by/ See what uses a Fleet connector · Endpoints fleet connectors used by list #
Ask an LLM
“What depends on a particular Fleet connector?”
“Which objects reference this Fleet connector?”
Tell an agent
Show what references Fleet connector {connector_uuid}.
List objects using Fleet connector {connector_uuid}.
GET /endpoints/google_chrome/connectors/ List Google Chrome connectors · Endpoints google chrome connectors list #
Ask an LLM
“Which Google Chrome device connectors are set up?”
“Can I find a Chrome connector by name?”
Tell an agent
List all Google Chrome connectors.
Show Google Chrome connectors named {name}.
POST /endpoints/google_chrome/connectors/ Create a Google Chrome connector · Endpoints google chrome connectors create #
Ask an LLM
“How do I connect Google Chrome device data to authentik?”
“What credentials does a new Chrome connector need?”
Tell an agent
Create Google Chrome connector {name} with credentials {credentials}.
Add a Chrome connector {name} using credentials {credentials}, enabled: {enabled}.
GET /endpoints/google_chrome/connectors/{connector_uuid}/ Get a Google Chrome connector · Endpoints google chrome connectors retrieve #
Ask an LLM
“What is configured on a specific Google Chrome connector?”
“Is this Chrome connector enabled?”
Tell an agent
Show Google Chrome connector {connector_uuid}.
Fetch the settings of Chrome connector {connector_uuid}.
PUT /endpoints/google_chrome/connectors/{connector_uuid}/ Replace a Google Chrome connector · Endpoints google chrome connectors update #
Ask an LLM
“Can I overwrite a Chrome connector's name and credentials together?”
“What must I resend to fully replace a Google Chrome connector?”
Tell an agent
Replace Google Chrome connector {connector_uuid} as {name} with credentials {credentials}.
Overwrite the whole Chrome connector {connector_uuid}: name {name}, credentials {credentials}, enabled {enabled}.
PATCH /endpoints/google_chrome/connectors/{connector_uuid}/ Change part of a Google Chrome connector · Endpoints google chrome connectors partial update #
Ask an LLM
“Can I just swap the credentials on a Chrome connector?”
“Is it possible to only disable a Google Chrome connector?”
Tell an agent
Only update credentials of Chrome connector {connector_uuid} to {credentials}.
Set just enabled on Google Chrome connector {connector_uuid} to {enabled}.
DELETE /endpoints/google_chrome/connectors/{connector_uuid}/ Delete a Google Chrome connector · Endpoints google chrome connectors destroy #
Ask an LLM
“How do I remove a Google Chrome connector?”
“Is deleting a Chrome connector reversible?”
Tell an agent destructive · confirm first
Delete Google Chrome connector {connector_uuid}.
Remove the Chrome connector {connector_uuid}.
GET /endpoints/google_chrome/connectors/{connector_uuid}/used_by/ See what uses a Google Chrome connector · Endpoints google chrome connectors used by list #
Ask an LLM
“What depends on a given Google Chrome connector?”
“Which objects reference this Chrome connector?”
Tell an agent
Show what references Google Chrome connector {connector_uuid}.
List objects using Chrome connector {connector_uuid}.

Documentation

📖
Documentation
https://docs.goauthentik.io
📖
APIReference
https://api.goauthentik.io/

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/authentik/refs/heads/main/openapi/authentik-endpoints-api-openapi.yml

SDKs

📦
GitHubRepository
https://github.com/goauthentik/authentik

Other Resources

🔗
Overlay
https://raw.githubusercontent.com/api-evangelist/authentik/refs/heads/main/overlays/authentik-endpoints-api-overlay.yaml
🔗
SDKs
https://www.npmjs.com/package/@goauthentik/api
🔗
SDKs
https://pypi.org/project/authentik-client/

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/authentik:authentik-endpoints-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

authentik-endpoints-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: authentik Endpoints API
  version: 2026.11.0-rc1
  description: Making authentication simple.
  contact:
    email: hello@goauthentik.io
  license:
    name: MIT
    url: https://github.com/goauthentik/authentik/blob/main/LICENSE
  x-source-url: https://api.goauthentik.io/schema.yml
  x-last-validated: '2026-09-04'
servers:
- url: /api/v3
tags:


# --- truncated at 32 KB (113 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/authentik/refs/heads/main/openapi/authentik-endpoints-api-openapi.yml