Work with this as data
Every API here is available over the APIs.io API and to AI agents over MCP.
MCP server
One button, every client — Claude, Cursor, VS Code and the rest.
https://apis.io/mcp
Tools for apis
7 MCP tools reach this
find_apisBrowse and filter every API in the catalog.get_api_artifactsOne API's artifacts, grouped by type.get_openapiThe primary OpenAPI for this API.find_similar_apisAPIs that look like this one.apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.resolveTurn a domain, URL or GitHub org into the provider it belongs to.find_cohortsEvery scored population of providers in the catalog.
Call it yourself
curl for this page
This API
curl "https://apis.io/api/v1/apis/authlete-jose-object-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"Discovery needs no key. Ratings and market analysis are Pro.
Get an API key
Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.
A second provider on the same verified email joins the account you already have.
OpenAPI Specification
openapi: 3.2.0
info:
title: Authlete Jose Object API
description: Welcome to the **Authlete API documentation**.
version: 3.0.16
license:
name: Apache 2.0
url: https://www.apache.org/licenses/LICENSE-2.0.html
servers:
- description: 🇺🇸 US Cluster
url: https://us.authlete.com
- description: 🇯🇵 Japan Cluster
url: https://jp.authlete.com
- description: 🇪🇺 Europe Cluster
url: https://eu.authlete.com
- description: 🇧🇷 Brazil Cluster
url: https://br.authlete.com
security:
- bearer: []
tags:
- name: Jose Object
description: API endpoints for JOSE objects.
x-tag-expanded: false
paths:
/api/{serviceId}/jose/verify:
post:
summary: Verify JOSE
description: This API verifies a JOSE object.
parameters:
- in: path
name: serviceId
description: A service ID.
required: true
schema:
type: string
requestBody:
required: false
content:
application/json:
schema:
$ref: '#/components/schemas/jose_verify_request'
example:
jose: eyJhbGciOiJFUzI1NiJ9.eyJleHAiOjE1NTk4MTE3NTAsImlzcyI6IjU3Mjk3NDA4ODY3In0K.csmdholMVcmjqHe59YWgLGNvm7I5Whp4phQCoGxyrlRGMnTgsfxtwyxBgMXQqEPD5q5k9FaEWNk37K8uAtSwrA
clockSkew: 100
signedByClient: true
clientIdentifier: '57297408867'
application/x-www-form-urlencoded:
schema:
$ref: '#/components/schemas/jose_verify_request'
responses:
'200':
description: ''
content:
application/json:
schema:
$ref: '#/components/schemas/jose_verify_response'
example:
resultCode: A160001
resultMessage: '[A160001] The JOSE is valid.'
signatureValid: true
valid: true
links:
token_exchange:
$ref: '#/components/links/token_exchange'
token_introspect:
$ref: '#/components/links/token_introspect'
'400':
$ref: '#/components/responses/400'
'401':
$ref: '#/components/responses/401'
'403':
$ref: '#/components/responses/403'
'500':
$ref: '#/components/responses/500'
operationId: jose_verify_api
x-code-samples:
- lang: shell
label: curl
source: 'curl -v https://us.authlete.com/api/21653835348762/jose/verify \
-H ''Authorization: Bearer V5a40R6dWvw2gMkCOBFdZcM95q4HC0Z-T0YKD9-nR6F'' \
-d jose=eyJhbGciOiJFUzI1NiJ9.eyJleHAiOjE1NTk4MTE3NTAsImlzcyI6IjU3Mjk3NDA4ODY3In0K.csmdholMVcmjqHe59YWgLGNvm7I5Whp4phQCoGxyrlRGMnTgsfxtwyxBgMXQqEPD5q5k9FaEWNk37K8uAtSwrA \
-d clockSkew=100 \
-d signedByClient=true \
-d clientIdentifier=57297408867
'
- lang: java
label: java
source: 'AuthleteConfiguration conf = ...;
AuthleteApi api = AuthleteApiFactory.create(conf);
JoseVerifyRequest req = new JoseVerifyRequest();
req.setJose("eyJhbGciOiJFUzI1NiJ9.eyJleHAiOjE1NTk4MTE3NTAsImlzcyI6IjU3Mjk3NDA4ODY3In0K.csmdholMVcmjqHe59YWgLGNvm7I5Whp4phQCoGxyrlRGMnTgsfxtw");
req.setClockSkew(100);
req.setSinedByClient(true);
req.setClientIdentifier("57297408867");
api.verifyJose(request);
'
- lang: python
source: 'conf = ...
api = AuthleteApiImpl(conf)
req = JoseVerifyRequest()
req.jose = ''eyJhbGciOiJFUzI1NiJ9.eyJleHAiOjE1NTk4MTE3NTAsImlzcyI6IjU3Mjk3NDA4ODY3In0K.csmdholMVcmjqHe59YWgLGNvm7I5Whp4phQCoGxyrlRGMnTgsfxtw''
req.clockSkew = 100
req.sinedByClient = True
req.clientIdentifier = ''57297408867''
api.verifyJose(req)
'
tags:
- Jose Object
components:
responses:
'403':
description: ''
content:
application/json:
schema:
$ref: '#/components/schemas/result'
example:
resultCode: A001215
resultMessage: '[A001215] /auth/authorization, The client (ID = 26837717140341) is locked.'
'500':
description: ''
content:
application/json:
schema:
$ref: '#/components/schemas/result'
example:
resultCode: A001101
resultMessage: '[A001101] /auth/authorization, Authlete Server error.'
'400':
description: ''
content:
application/json:
schema:
$ref: '#/components/schemas/result'
example:
resultCode: A001201
resultMessage: '[A001201] /auth/authorization, TLS must be used.'
'401':
description: ''
content:
application/json:
schema:
$ref: '#/components/schemas/result'
example:
resultCode: A001202
resultMessage: '[A001202] /auth/authorization, Authorization header is missing.'
links:
token_exchange:
operationId: auth_token_api
parameters:
serviceId: $request.path.serviceId
token_introspect:
operationId: auth_introspection_api
parameters:
serviceId: $request.path.serviceId
schemas:
jose_verify_response:
type: object
properties:
resultCode:
type: string
description: The code which represents the result of the API call.
resultMessage:
type: string
description: A short message which explains the result of the API call.
valid:
type: boolean
description: 'The result of the verification on the JOSE object.
'
signatureValid:
type: boolean
description: 'The result of the signature verification.
'
missingClaims:
type: array
items:
type: string
description: 'The list of missing claims.
'
invalidClaims:
type: array
items:
type: string
description: 'The list of invalid claims.
'
errorDescriptions:
type: array
items:
type: string
description: 'The list of error messages.
'
result:
type: object
properties:
resultCode:
type: string
description: The code which represents the result of the API call.
resultMessage:
type: string
description: A short message which explains the result of the API call.
jose_verify_request:
type: object
required:
- jose
properties:
jose:
type: string
description: 'A JOSE object.
'
mandatoryClaims:
type: array
items:
type: string
description: 'Mandatory claims that are required to be included in the JOSE object.
'
clockSkew:
type: integer
format: int32
description: 'Allowable clock skew in seconds.
'
clientIdentifier:
type: string
description: 'The identifier of the client application whose keys are required for verification of the JOSE
object.
'
signedByClient:
type: boolean
description: 'The flag which indicates whether the signature of the JOSE object has been signed by a client
application with the client''s private key or a shared symmetric key.
'
securitySchemes:
bearer:
type: http
scheme: bearer
bearerFormat: JWT
description: 'Authenticate every request with a **Service Access Token** or **Organization Token**.
Set the token value in the `Authorization: Bearer <token>` header.
**Service Access Token**: Scoped to a single service. Use when automating service-level configuration or runtime flows.
**Organization Token**: Scoped to the organization; inherits permissions across services. Use for org-wide automation or when managing multiple services programmatically.
Both token types are issued by the Authlete console or provisioning APIs.
'