Authentik

Authentik Outposts API

Outpost instances and service connections (Docker, Kubernetes) — the deployable components that run the proxy, LDAP and RADIUS providers.

GitHub OpenAPI

Operations 34

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

GET /outposts/instances/ List outposts · Outposts instances list #
Ask an LLM
“Which outposts are deployed in my authentik instance?”
“Can I find outposts that have no providers attached?”
Tell an agent
List all outposts.
Search outposts by name for {search}.
POST /outposts/instances/ Create an outpost · Outposts instances create #
Ask an LLM
“How do I deploy a new proxy or LDAP outpost in authentik?”
“Can I attach several providers to a single new outpost?”
Tell an agent
Create a {type} outpost named {name} serving providers {providers} with config {config}.
Set up outpost {name} of type {type} for providers {providers} on service connection {service_connection} using config {config}.
GET /outposts/instances/{uuid}/ Get an outpost's details · Outposts instances retrieve #
Ask an LLM
“What providers and config does one specific outpost have?”
“Where can I look up a single outpost by its UUID?”
Tell an agent
Show outpost {uuid}.
Get the configuration of outpost {uuid}.
PUT /outposts/instances/{uuid}/ Replace an outpost's settings · Outposts instances update #
Ask an LLM
“Can I overwrite an outpost's whole definition, including name, type, providers and config, in one call?”
“What is required to fully replace an existing outpost's configuration?”
Tell an agent
Replace outpost {uuid} with name {name}, type {type}, providers {providers} and config {config}.
Fully redefine outpost {uuid} as {name} of type {type} serving {providers} with config {config}.
PATCH /outposts/instances/{uuid}/ Change some outpost settings · Outposts instances partial update #
Ask an LLM
“Can I just rename an outpost without resending its config?”
“Is it possible to add providers to an existing outpost by changing only that field?”
Tell an agent
Rename outpost {uuid} to {name}.
Change the providers on outpost {uuid} to {providers}.
DELETE /outposts/instances/{uuid}/ Delete an outpost · Outposts instances destroy #
Ask an LLM
“How do I remove an outpost I no longer run?”
“Can I decommission an outpost from authentik entirely?”
Tell an agent destructive · confirm first
Delete outpost {uuid}.
Remove outpost {uuid} permanently.
GET /outposts/instances/{uuid}/health/ Check an outpost's current health · Outposts instances health list #
Ask an LLM
“Is my outpost connected and healthy right now?”
“What version are my outpost instances running and when did they last check in?”
Tell an agent
Show the health of outpost {uuid}.
Check whether outpost {uuid} is up and reporting in.
GET /outposts/instances/{uuid}/used_by/ See what uses an outpost · Outposts instances used by list #
Ask an LLM
“Which objects depend on a given outpost?”
“Will anything break if I delete this outpost?”
Tell an agent
List objects that use outpost {uuid}.
Show what references outpost {uuid} before I remove it.
GET /outposts/instances/default_settings/ Get the global default outpost config · Outposts instances default settings retrieve #
Ask an LLM
“What default configuration does authentik apply to new outposts?”
“Where can I see the baseline outpost config settings?”
Tell an agent
Show the global default outpost configuration.
Get the default settings new outposts start with.
GET /outposts/ldap/ List LDAP providers served by outposts · Outposts ldap list #
Ask an LLM
“Which LDAP providers is my LDAP outpost serving?”
“Can I search the LDAP providers visible to outposts by name?”
Tell an agent
List LDAP providers for outposts.
Find the outpost LDAP provider named {name}.
GET /outposts/ldap/{id}/check_access/ Check LDAP access to an application · Outposts ldap access check #
Ask an LLM
“Is the current user allowed to bind to an application through the LDAP outpost?”
“Can I verify LDAP access to an app by its slug?”
Tell an agent
Check LDAP provider {id} access to application {app_slug}.
Verify whether LDAP provider {id} grants access.
GET /outposts/proxy/ List proxy providers served by outposts · Outposts proxy list #
Ask an LLM
“Which proxy providers does my proxy outpost pick up?”
“Can I search the proxy providers available to outposts by name?”
Tell an agent
List proxy providers for outposts.
Find the outpost proxy provider named {name}.
GET /outposts/radius/ List RADIUS providers served by outposts · Outposts radius list #
Ask an LLM
“Which RADIUS providers does the RADIUS outpost serve?”
“Can I look up RADIUS providers for outposts by name?”
Tell an agent
List RADIUS providers for outposts.
Find the outpost RADIUS provider named {name}.
GET /outposts/radius/{id}/check_access/ Check RADIUS access to an application · Outposts radius access check #
Ask an LLM
“Does the user have access to an application over RADIUS?”
“Can I test RADIUS access to an app by its slug?”
Tell an agent
Check RADIUS provider {id} access to application {app_slug}.
Verify whether RADIUS provider {id} grants access.
GET /outposts/service_connections/all/ List all outpost service connections · Outposts service connections all list #
Ask an LLM
“Which Docker and Kubernetes service connections exist across authentik?”
“Can I search every outpost integration regardless of type by name?”
Tell an agent
List all service connections of every type.
Search all service connections for {search}.
GET /outposts/service_connections/all/{uuid}/ Get any service connection by ID · Outposts service connections all retrieve #
Ask an LLM
“What are the details of a service connection when I don't know if it's Docker or Kubernetes?”
“Where can I look up a generic outpost integration by UUID?”
Tell an agent
Show service connection {uuid}.
Get the generic details of outpost integration {uuid}.
DELETE /outposts/service_connections/all/{uuid}/ Delete any service connection · Outposts service connections all destroy #
Ask an LLM
“Can I remove a service connection without knowing whether it's Docker or Kubernetes?”
“What endpoint deletes an outpost integration of any type?”
Tell an agent destructive · confirm first
Delete service connection {uuid}.
Remove outpost integration {uuid} whatever its type.
GET /outposts/service_connections/all/{uuid}/state/ Check a service connection's state · Outposts service connections all state retrieve #
Ask an LLM
“Is my service connection healthy and reachable?”
“What version of Docker or Kubernetes is a service connection talking to?”
Tell an agent
Show the state of service connection {uuid}.
Check whether service connection {uuid} is reachable.
GET /outposts/service_connections/all/{uuid}/used_by/ See what uses a service connection · Outposts service connections all used by list #
Ask an LLM
“Which outposts rely on a given service connection?”
“Is any object still referencing this outpost integration?”
Tell an agent
List objects that use service connection {uuid}.
Show what depends on outpost integration {uuid}.
GET /outposts/service_connections/all/types/ List creatable service connection types · Outposts service connections all types list #
Ask an LLM
“What kinds of outpost integrations can I create?”
“Which service connection types does authentik support?”
Tell an agent
List the service connection types I can create.
Show available outpost integration types.
GET /outposts/service_connections/docker/ List Docker service connections · Outposts service connections docker list #
Ask an LLM
“Which Docker integrations are configured for outposts?”
“Can I find Docker connections that have TLS verification turned on?”
Tell an agent
List Docker service connections.
Find Docker service connections pointing at {url}.
POST /outposts/service_connections/docker/ Add a Docker service connection · Outposts service connections docker create #
Ask an LLM
“How do I connect authentik to a Docker host so it can deploy outposts?”
“Can I use the local Docker socket instead of a remote URL?”
Tell an agent
Create Docker service connection {name} at {url}.
Add Docker connection {name} for {url} using TLS verification certificate {tls_verification}.
GET /outposts/service_connections/docker/{uuid}/ Get a Docker service connection · Outposts service connections docker retrieve #
Ask an LLM
“What URL and TLS settings does a specific Docker integration use?”
“Where can I view one Docker service connection?”
Tell an agent
Show Docker service connection {uuid}.
Get the Docker integration settings for {uuid}.
PUT /outposts/service_connections/docker/{uuid}/ Replace a Docker service connection · Outposts service connections docker update #
Ask an LLM
“Can I overwrite a Docker connection's name and URL together?”
“What must I send to fully replace a Docker integration?”
Tell an agent
Replace Docker connection {uuid} with name {name} and URL {url}.
Fully redefine Docker integration {uuid} as {name} at {url} with TLS auth cert {tls_authentication}.
PATCH /outposts/service_connections/docker/{uuid}/ Change some Docker connection settings · Outposts service connections docker partial update #
Ask an LLM
“Can I switch just the URL on an existing Docker connection?”
“Is it possible to change only the TLS certificates on a Docker integration?”
Tell an agent
Point Docker connection {uuid} at {url}.
Set TLS verification certificate {tls_verification} on Docker connection {uuid}.
DELETE /outposts/service_connections/docker/{uuid}/ Delete a Docker service connection · Outposts service connections docker destroy #
Ask an LLM
“How can I remove a Docker integration I stopped using?”
“Can I delete one Docker service connection by its ID?”
Tell an agent destructive · confirm first
Delete Docker service connection {uuid}.
Remove Docker integration {uuid}.
GET /outposts/service_connections/docker/{uuid}/used_by/ See what uses a Docker connection · Outposts service connections docker used by list #
Ask an LLM
“Which outposts are deployed through a given Docker integration?”
“Does anything still depend on this Docker service connection?”
Tell an agent
List objects that use Docker connection {uuid}.
Show what references Docker integration {uuid}.
GET /outposts/service_connections/kubernetes/ List Kubernetes service connections · Outposts service connections kubernetes list #
Ask an LLM
“Which Kubernetes clusters is authentik connected to for outposts?”
“Can I list only the in-cluster local Kubernetes connections?”
Tell an agent
List Kubernetes service connections.
Find the Kubernetes connection named {name}.
POST /outposts/service_connections/kubernetes/ Add a Kubernetes service connection · Outposts service connections kubernetes create #
Ask an LLM
“How do I let authentik deploy outposts into a Kubernetes cluster?”
“Can I connect a cluster by pasting a kubeconfig?”
Tell an agent
Create Kubernetes service connection {name}.
Add Kubernetes connection {name} using kubeconfig {kubeconfig}.
GET /outposts/service_connections/kubernetes/{uuid}/ Get a Kubernetes service connection · Outposts service connections kubernetes retrieve #
Ask an LLM
“What settings does a specific Kubernetes integration have?”
“Where can I view one Kubernetes service connection?”
Tell an agent
Show Kubernetes service connection {uuid}.
Get the Kubernetes integration details for {uuid}.
PUT /outposts/service_connections/kubernetes/{uuid}/ Replace a Kubernetes service connection · Outposts service connections kubernetes update #
Ask an LLM
“Can I overwrite a Kubernetes connection's name and kubeconfig at once?”
“What does fully replacing a Kubernetes integration require?”
Tell an agent
Replace Kubernetes connection {uuid} with name {name}.
Fully redefine Kubernetes integration {uuid} as {name} with kubeconfig {kubeconfig}.
PATCH /outposts/service_connections/kubernetes/{uuid}/ Change some Kubernetes connection settings · Outposts service connections kubernetes partial update #
Ask an LLM
“Can I rotate just the kubeconfig on an existing Kubernetes connection?”
“Is it possible to turn off SSL verification for a Kubernetes integration only?”
Tell an agent
Swap the kubeconfig on Kubernetes connection {uuid} for {kubeconfig}.
Set SSL verification on Kubernetes connection {uuid} to {verify_ssl}.
DELETE /outposts/service_connections/kubernetes/{uuid}/ Delete a Kubernetes service connection · Outposts service connections kubernetes destroy #
Ask an LLM
“How can I disconnect authentik from a Kubernetes cluster?”
“Can I delete one Kubernetes service connection by its ID?”
Tell an agent destructive · confirm first
Delete Kubernetes service connection {uuid}.
Remove Kubernetes integration {uuid}.
GET /outposts/service_connections/kubernetes/{uuid}/used_by/ See what uses a Kubernetes connection · Outposts service connections kubernetes used by list #
Ask an LLM
“Which outposts are deployed through a given Kubernetes integration?”
“Does anything still depend on this Kubernetes service connection?”
Tell an agent
List objects that use Kubernetes connection {uuid}.
Show what references Kubernetes integration {uuid}.

Documentation

📖
Documentation
https://docs.goauthentik.io
📖
APIReference
https://api.goauthentik.io/

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/authentik/refs/heads/main/openapi/authentik-outposts-api-openapi.yml

SDKs

📦
GitHubRepository
https://github.com/goauthentik/authentik

Other Resources

🔗
Overlay
https://raw.githubusercontent.com/api-evangelist/authentik/refs/heads/main/overlays/authentik-outposts-api-overlay.yaml
🔗
SDKs
https://www.npmjs.com/package/@goauthentik/api
🔗
SDKs
https://pypi.org/project/authentik-client/

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/authentik:authentik-outposts-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

authentik-outposts-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: authentik Outposts API
  version: 2026.11.0-rc1
  description: Making authentication simple.
  contact:
    email: hello@goauthentik.io
  license:
    name: MIT
    url: https://github.com/goauthentik/authentik/blob/main/LICENSE
  x-source-url: https://api.goauthentik.io/schema.yml
  x-last-validated: '2026-09-04'
servers:
- url: /api/v3
tags:


# --- truncated at 32 KB (63 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/authentik/refs/heads/main/openapi/authentik-outposts-api-openapi.yml