Cisco Crosswork Rbac API
The rbac API from Cisco Crosswork — 6 operation(s) for rbac.
Work with this as data
Every API here is available over the APIs.io API and to AI agents over MCP.
MCP server
One button, every client — Claude, Cursor, VS Code and the rest.
https://apis.io/mcp
Tools for apis
7 MCP tools reach this
find_apisBrowse and filter every API in the catalog.get_api_artifactsOne API's artifacts, grouped by type.get_openapiThe primary OpenAPI for this API.find_similar_apisAPIs that look like this one.apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.resolveTurn a domain, URL or GitHub org into the provider it belongs to.find_cohortsEvery scored population of providers in the catalog.
Call it yourself
curl for this page
This API
curl "https://apis.io/api/v1/apis/cisco-crosswork-rbac-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"Discovery needs no key. Ratings and market analysis are Pro.
Get an API key
Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.
A second provider on the same verified email joins the account you already have.
OpenAPI Specification
openapi: 3.2.0
info:
title: Crosswork Rbac API
contact:
name: Crosswork Team, Cisco
email: support@cisco.com
description: Crosswork Role-based Access Control APIs
license:
name: Cisco Software License Agreement
url: http://www.cisco.com/public/sw-license-agreement.html
version: 1.0.0
x-provenance:
method: harvested
authored_by: Cisco Crosswork
harvested_by: API Evangelist
harvested_on: '2026-08-19'
first_party: true
note: Published by Cisco. Retrieved unmodified except for this x-provenance block.
provider_published: true
x-evidence:
- type: source
url: https://github.com/CiscoDevNet/crosswork-openapi-spec/blob/master/NCAHI/3.1APIs/rbac.swagger.json
- type: raw
url: https://raw.githubusercontent.com/CiscoDevNet/crosswork-openapi-spec/master/NCAHI/3.1APIs/rbac.swagger.json
servers:
- url: /crosswork/aaa
security:
- bearerAuth: []
tags:
- name: rbac
paths:
/v1/api:
get:
summary: Get the list of secured APIs.
operationId: GetAuthorizedAPIs
responses:
'200':
description: OK. The request was successful. The result is contained in the response body.
content:
application/json:
schema:
$ref: '#/components/schemas/rbacSecuredAPIs'
'403':
description: Forbidden. The server recognizes the authentication credentials, but the client is not authorized to perform this request.
tags:
- rbac
/v2/api:
get:
summary: Get names and IDs of the secured APIs grouped by the feature they belong to
operationId: GetAuthorizedAPIsByFeature
responses:
'200':
description: OK. The request was successful. The result is contained in the response body.
content:
application/json:
schema:
$ref: '#/components/schemas/rbacSecuredAPIsByFeature'
'403':
description: Forbidden. The server recognizes the authentication credentials, but the client is not authorized to perform this request.
tags:
- rbac
/v1/role:
get:
summary: Get Roles
operationId: GetRoles
responses:
'200':
description: OK. The request was successful. The result is contained in the response body.
content:
application/json:
schema:
$ref: '#/components/schemas/rbacRoles'
'403':
description: Forbidden. The server recognizes the authentication credentials, but the client is not authorized to perform this request.
tags:
- rbac
post:
summary: Create Role
operationId: CreateRole
responses:
'201':
description: Created. The request was successful. One or more new resources were created.
content:
application/json:
schema:
$ref: '#/components/schemas/rbacEmpty'
'403':
description: Forbidden. The server recognizes the authentication credentials, but the client is not authorized to perform this request.
tags:
- rbac
requestBody:
content:
application/json; charset=UTF-8:
schema:
$ref: '#/components/schemas/rbacRoles'
description: Specification of the role. The key represents the role ID. The value represents the role specification.
required: true
/v1/role/{id}:
put:
summary: Update Role
operationId: UpdateRole
responses:
'204':
description: No Content. The request was successful and there is no additional content in the response body.
content:
application/json:
schema:
$ref: '#/components/schemas/rbacEmpty'
'403':
description: Forbidden. The server recognizes the authentication credentials, but the client is not authorized to perform this request.
parameters:
- name: id
description: Unique ID of the role being updated
in: path
required: true
schema:
type: string
tags:
- rbac
requestBody:
content:
application/json; charset=UTF-8:
schema:
$ref: '#/components/schemas/rbacRole'
description: Updated specification of the role. See GET /role request for an example payload.
required: true
delete:
summary: Delete a role
operationId: DeleteRole
responses:
'204':
description: No Content. The request was successful and there is no additional content in the response body.
content:
application/json:
schema:
$ref: '#/components/schemas/rbacEmpty'
'403':
description: Forbidden. The server recognizes the authentication credentials, but the client is not authorized to perform this request.
'500':
description: Internal Server Error. The server could not fulfill the request.
parameters:
- name: id
description: ID of the role being deleted
in: path
required: true
schema:
type: string
tags:
- rbac
/v1/user:
get:
summary: Query all users from the local authentication store.
operationId: GetUsers
responses:
'200':
description: OK. The request was successful. The result is contained in the response body.
content:
application/json:
schema:
$ref: '#/components/schemas/rbacUsers'
'403':
description: Forbidden. The server recognizes the authentication credentials, but the client is not authorized to perform this request.
tags:
- rbac
post:
summary: Create a user on the local authentication store.
operationId: CreateUser
responses:
'201':
description: Created. The request was successful. One or more new resources were created.
content:
application/json:
schema:
$ref: '#/components/schemas/rbacEmpty'
'403':
description: Forbidden. The server recognizes the authentication credentials, but the client is not authorized to perform this request.
tags:
- rbac
requestBody:
content:
application/json; charset=UTF-8:
schema:
$ref: '#/components/schemas/rbacUsers'
required: true
/v1/user/{Username}:
put:
summary: Update the user on the local authentication store.
description: This API allows updates to the user's PolicyId, FirstName, and LastName only. Updating the user's password is done via the password change API.
operationId: UpdateUser
responses:
'204':
description: No Content. The request was successful and there is no additional content in the response body.
content:
application/json:
schema:
$ref: '#/components/schemas/rbacEmpty'
'403':
description: Forbidden. The server recognizes the authentication credentials, but the client is not authorized to perform this request.
parameters:
- name: Username
description: ID of the user being updated
in: path
required: true
schema:
type: string
tags:
- rbac
requestBody:
content:
application/json; charset=UTF-8:
schema:
$ref: '#/components/schemas/rbacUpdateUserReq'
description: Updated values for the attributes of the user
required: true
delete:
summary: Delete a user on the local authentication store.
operationId: DeleteUser
responses:
'204':
description: No Content. The request was successful and there is no additional content in the response body.
content:
application/json:
schema:
$ref: '#/components/schemas/rbacEmpty'
'403':
description: Forbidden. The server recognizes the authentication credentials, but the client is not authorized to perform this request.
'500':
description: Internal Server Error. The server could not fulfill the request.
parameters:
- name: Username
description: ID of the user being deleted
in: path
required: true
schema:
type: string
tags:
- rbac
components:
schemas:
rbacPolicyPartitions:
type: object
properties:
quota:
type: boolean
format: boolean
rate_limit:
type: boolean
format: boolean
acl:
type: boolean
format: boolean
rbacCORS:
type: object
rbacAccessSpec:
type: object
properties:
url:
type: string
methods:
type: array
items:
type: string
rbacNotificationsManager:
type: object
rbacProxy:
type: object
rbacUptimeTests:
type: object
rbacAuth:
type: object
rbacSecuredAPIsByFeature:
example:
Change Automations:
- api_id: cwnca
name: NCA api
- api_id: robot-nca
name: robot-nca api
Core Infra:
- api_id: api_v1_services
name: api/v1/services api
- api_id: api_v1_spans
name: api/v1/spans api
- api_id: api_v1_trace
name: api/v1/trace api
- api_id: api_v1_traces
name: api/v1/traces api
- api_id: cwauthconfig
name: Auth Server Config api
- api_id: cwsso
name: Authentication api
- api_id: gcp-service
name: gcp-service api
- api_id: grafana.monitoring
name: grafana.monitoring api
- api_id: nbi_v1_assurance
name: nbi/v1/assurance api
- api_id: nbi_v1_central-inventory
name: nbi/v1/central-inventory api
- api_id: cwpassword
name: Password Change api
- api_id: robot-grafana
name: robot-grafana api
- api_id: robot-logger
name: robot-logger api
- api_id: robot-ui
name: robot-ui api
- api_id: robot
name: Robot_Infra_API_Proxy
- api_id: rpd-service-manager
name: rpd-service-manager api
- api_id: rpd-service-manager-socket
name: rpd-service-manager-socket api
- api_id: vmtime
name: Server Time api
- api_id: cwtopology
name: Topology api
- api_id: cwaaa
name: Users and Roles api
- api_id: zipkin
name: zipkin api
Health Insights:
- api_id: cwhi
name: HI api
Inventory:
- api_id: cwinventory
name: inventory api
Platform:
- api_id: cwplatform
name: Platform api
- api_id: robotctl
name: robotctl api
T-SDN:
- api_id: NSO
name: NSO proxy api
rbacRoles:
type: object
additionalProperties:
$ref: '#/components/schemas/rbacRole'
example:
adminRole:
_id: ''
id: ''
org_id: '1'
rate: 1000
per: 60
quota_max: -1
quota_renewal_rate: 60
access_rights:
api_v1_services:
api_name: api/v1/services api
api_id: api_v1_services
versions:
- Default
allowed_urls:
- url: /.*
methods:
- GET
- POST
- PUT
- PATCH
- DELETE
api_v1_spans:
api_name: api/v1/spans api
api_id: api_v1_spans
versions:
- Default
allowed_urls:
- url: /.*
methods:
- GET
- POST
- PUT
- PATCH
- DELETE
api_v1_trace:
api_name: api/v1/trace api
api_id: api_v1_trace
versions:
- Default
allowed_urls:
- url: /.*
methods:
- GET
- POST
- PUT
- PATCH
- DELETE
api_v1_traces:
api_name: api/v1/traces api
api_id: api_v1_traces
versions:
- Default
allowed_urls:
- url: /.*
methods:
- GET
- POST
- PUT
- PATCH
- DELETE
auth-apis:
api_name: auth-apis api
api_id: auth-apis
versions:
- Default
allowed_urls:
- url: /.*
methods:
- GET
- POST
- PUT
- PATCH
- DELETE
auth-configs:
api_name: auth-configs api
api_id: auth-configs
versions:
- Default
allowed_urls:
- url: /.*
methods:
- GET
- POST
- PUT
- PATCH
- DELETE
cwaaa:
api_name: Users and Roles api
api_id: cwaaa
versions:
- Default
allowed_urls:
- url: /.*
methods:
- GET
- POST
- PUT
- PATCH
- DELETE
cwauthconfig:
api_name: Auth Server Config api
api_id: cwauthconfig
versions:
- Default
allowed_urls:
- url: /.*
methods:
- GET
- POST
- PUT
- PATCH
- DELETE
cwhi:
api_name: HI api
api_id: cwhi
versions:
- Default
allowed_urls:
- url: /.*
methods:
- GET
- POST
- PUT
- PATCH
- DELETE
cwinventory:
api_name: inventory api
api_id: cwinventory
versions:
- Default
allowed_urls:
- url: /.*
methods:
- GET
- POST
- PUT
- PATCH
- DELETE
cwnca:
api_name: NCA api
api_id: cwnca
versions:
- Default
allowed_urls:
- url: /.*
methods:
- GET
- POST
- PUT
- PATCH
- DELETE
cwpassword:
api_name: Password Change api
api_id: cwpassword
versions:
- Default
allowed_urls:
- url: /.*
methods:
- GET
- POST
- PUT
- PATCH
- DELETE
cwplatform:
api_name: Platform api
api_id: cwplatform
versions:
- Default
allowed_urls:
- url: /.*
methods:
- GET
- POST
- PUT
- PATCH
- DELETE
cwtopology:
api_name: Topology api
api_id: cwtopology
versions:
- Default
allowed_urls:
- url: /.*
methods:
- GET
- POST
- PUT
- PATCH
- DELETE
daas:
api_name: WAE Design as service api
api_id: daas
versions:
- Default
allowed_urls:
- url: /.*
methods:
- GET
- POST
- PUT
- PATCH
- DELETE
gcp-service:
api_name: gcp-service api
api_id: gcp-service
versions:
- Default
allowed_urls:
- url: /.*
methods:
- GET
- POST
- PUT
- PATCH
- DELETE
geoserver:
api_name: geoserver api
api_id: geoserver
versions:
- Default
allowed_urls:
- url: /.*
methods:
- GET
- POST
- PUT
- PATCH
- DELETE
grafana.monitoring:
api_name: grafana.monitoring api
api_id: grafana.monitoring
versions:
- Default
allowed_urls:
- url: /.*
methods:
- GET
- POST
- PUT
- PATCH
- DELETE
guacamole:
api_name: guacamole api
api_id: guacamole
versions:
- Default
allowed_urls:
- url: /.*
methods:
- GET
- POST
- PUT
- PATCH
- DELETE
inode-manager:
api_name: inode-manager api
api_id: inode-manager
versions:
- Default
allowed_urls:
- url: /.*
methods:
- GET
- POST
- PUT
- PATCH
- DELETE
kafka-manager:
api_name: kafka-manager api
api_id: kafka-manager
versions:
- Default
allowed_urls:
- url: /.*
methods:
- GET
- POST
- PUT
- PATCH
- DELETE
kibana:
api_name: kibana api
api_id: kibana
versions:
- Default
allowed_urls:
- url: /.*
methods:
- GET
- POST
- PUT
- PATCH
- DELETE
kubernetes-dashboard.kube-system:
api_name: kubernetes-dashboard.kube-system api
api_id: kubernetes-dashboard.kube-system
versions:
- Default
allowed_urls:
- url: /.*
methods:
- GET
- POST
- PUT
- PATCH
- DELETE
nbi_v1_assurance:
api_name: nbi/v1/assurance api
api_id: nbi_v1_assurance
versions:
- Default
allowed_urls:
- url: /.*
methods:
- GET
- POST
- PUT
- PATCH
- DELETE
nbi_v1_central-inventory:
api_name: nbi/v1/central-inventory api
api_id: nbi_v1_central-inventory
versions:
- Default
allowed_urls:
- url: /.*
methods:
- GET
- POST
- PUT
- PATCH
- DELETE
robot:
api_name: Robot_Infra_API_Proxy
api_id: robot
versions:
- Default
allowed_urls:
- url: /.*
methods:
- GET
- POST
- PUT
- PATCH
- DELETE
robot-grafana:
api_name: robot-grafana api
api_id: robot-grafana
versions:
- Default
allowed_urls:
- url: /.*
methods:
- GET
- POST
- PUT
- PATCH
- DELETE
robot-logger:
api_name: robot-logger api
api_id: robot-logger
versions:
- Default
allowed_urls:
- url: /.*
methods:
- GET
- POST
- PUT
- PATCH
- DELETE
robot-nca:
api_name: robot-nca api
api_id: robot-nca
versions:
- Default
allowed_urls:
- url: /.*
methods:
- GET
- POST
- PUT
- PATCH
- DELETE
robot-openbmp-mysql:
api_name: robot-openbmp-mysql api
api_id: robot-openbmp-mysql
versions:
- Default
allowed_urls:
- url: /.*
methods:
- GET
- POST
- PUT
- PATCH
- DELETE
robot-pulse:
api_name: robot-pulse api
api_id: robot-pulse
versions:
- Default
allowed_urls:
- url: /.*
methods:
- GET
- POST
- PUT
- PATCH
- DELETE
robot-pulsecore:
api_name: robot-pulsecore api
api_id: robot-pulsecore
versions:
- Default
allowed_urls:
- url: /.*
methods:
- GET
- POST
- PUT
- PATCH
- DELETE
robot-pycon:
api_name: robot-pycon api
api_id: robot-pycon
versions:
- Default
allowed_urls:
- url: /.*
methods:
- GET
- POST
- PUT
- PATCH
- DELETE
robot-telemetry-broker:
api_name: robot-telemetry-broker api
api_id: robot-telemetry-broker
versions:
- Default
allowed_urls:
- url: /.*
methods:
- GET
- POST
- PUT
- PATCH
- DELETE
robotctl:
api_name: robotctl api
api_id: robotctl
versions:
- Default
allowed_urls:
- url: /.*
methods:
- GET
- POST
- PUT
- PATCH
- DELETE
rpd-service-manager:
api_name: rpd-service-manager api
api_id: rpd-service-manager
versions:
- Default
allowed_urls:
- url: /.*
methods:
- GET
- POST
- PUT
- PATCH
- DELETE
rpd-service-manager-socket:
api_name: rpd-service-manager-socket api
api_id: rpd-service-manager-socket
versions:
- Default
allowed_urls:
- url: /.*
methods:
- GET
- POST
- PUT
- PATCH
- DELETE
topology:
api_name: topology api
api_id: topology
versions:
- Default
allowed_urls:
- url: /.*
methods:
- GET
- POST
- PUT
- PATCH
- DELETE
zipkin:
api_name: zipkin api
api_id: zipkin
versions:
- Default
allowed_urls:
- url: /.*
methods:
- GET
- POST
- PUT
- PATCH
- DELETE
hmac_enabled: false
active: true
is_inactive: false
tags: []
key_expires_in: -1
partitions:
quota: false
rate_limit: false
acl: false
last_updated: ''
rbacobject:
type: object
rbacSessionProviderMeta:
type: object
rbacAuthProviderMeta:
type: object
rbacEmpty:
type: object
rbacRole:
type: object
properties:
id:
type: string
org_id:
type: string
rate:
type: number
format: float
per:
type: number
format: float
quota_max:
type: string
format: int64
quota_renewal_rate:
type: string
format: int64
access_rights:
type: object
additionalProperties:
$ref: '#/components/schemas/rbacAccessDefinition'
hmac_enabled:
type: boolean
format: boolean
active:
type: boolean
format: boolean
is_inactive:
type: boolean
format: boolean
tags:
type: array
items:
type: string
key_expires_in:
type: string
format: int64
partitions:
$ref: '#/components/schemas/rbacPolicyPartitions'
last_updated:
type: string
title: Role represents a collection of security options, such as access rights to APIs, which are deployed on the system.
rbacAccessDefinition:
type: object
properties:
api_name:
type: string
api_id:
type: string
versions:
type: array
items:
type: string
allowed_urls:
type: array
items:
$ref: '#/components/schemas/rbacAccessSpec'
rbacOpenIDOptions:
type: object
rbacBasicAuth:
type: object
rbacAuthTypeEnum:
type: string
rbacSecuredAPIs:
type: array
items:
$ref: '#/components/schemas/rbacSecuredAPI'
example:
- name: nbi/v1/assurance api
slug: ''
api_id: nbi_v1_assurance
org_id: '1'
use_keyless: false
use_oauth2: false
use_openid: false
openid_options:
providers: null
segregate_by_client: false
oauth_meta:
allowed_access_types: null
allowed_authorize_types: null
auth_login_redirect: ''
auth:
use_param: false
param_name: ''
use_cookie: false
cookie_name: ''
auth_header_name: Authorization
use_certificate: false
use_basic_auth: false
basic_auth:
disable_caching: false
cache_ttl: 0
use_mutual_tls_auth: false
client_certificates: null
upstream_certificates: null
pinned_public_keys: null
enable_jwt: true
use_standard_auth: false
enable_coprocess_auth: false
jwt_signing_method: hmac
jwt_source: TlRjMFlqVTVOREkyT1RabU5qZ3pOek0wTnpnME5qY3hOR0UyWVRSaE56WTJZalJsTlRVMU1UWm1OemczTURjM05qUTFNelV5TmpnME5USmlNbUkxT0RZNE5EWTNNalU1TlRFMk56VXlOVGszTmpjeE56TXpaQT09
jwt_identity_base_field: sub
jwt_client_base_field: ''
jwt_policy_field_name: policy_id
jwt_issued_at_validation_skew: 0
jwt_expires_at_validation_skew: 0
jwt_not_before_validation_skew: 0
jwt_skip_kid: false
notifications:
shared_secret: ''
oauth_on_keychange_url: ''
enable_signature_checking: false
hmac_allowed_clock_skew: 0
base_identity_provided_by: ''
definition:
location: header
key: version
strip_path: false
version_data:
not_versioned: true
default_version: ''
versions:
Default:
name: Default
expires: 3000-01-02 15:04
paths:
ignored: null
white_list: null
black_list: null
use_extended_paths: true
extended_paths: {}
global_headers: null
global_headers_remove: null
global_size_limit: 0
override_target: ''
uptime_tests:
check_list: null
config:
expire_utime_after: 0
service_discovery:
use_discovery_service: false
query_endpoint: ''
use_nested_query: false
parent_data_path: ''
data_path: ''
port_data_path: ''
target_path: ''
use_target_list: false
cache_timeout: 0
endpoint_returns_list: false
recheck_wait: 0
proxy:
preserve_host_header: false
listen_path: /nbi/v1/assurance/
target_url: http://robot-assurance:8082
disable_strip_prefix: false
strip_listen_path: true
enable_load_balancing: false
target_list: null
check_host_against_uptime_tests: false
service_discovery:
use_discovery_service: false
query_endpoint: ''
use_nested_query: false
parent_data_path: ''
data_path: ''
port_data_path: ''
target_path: ''
use_target_list: false
cache_timeout: 0
endpoint_returns_list: false
transport:
ssl_ciphers: null
ssl_min_version: 0
proxy_url: ''
disable_rate_limit: false
disable_quota: false
custom_middleware:
pre: null
post: null
post_key_auth: null
auth_check:
name: ''
path: ''
require_session: false
response: null
driver: ''
id_extractor:
extract_from: ''
extract_with: ''
extractor_config: null
custom_middleware_bundle: ''
cache_options:
cache_timeout: 0
enable_cache: false
cache_all_safe_requests: false
cache_response_codes: null
enable_upstream_cache_control: false
cache_control_ttl_header: ''
session_lifetime: 0
active: false
auth_provider:
name: ''
storage_engine: ''
meta: null
session_provider:
name: ''
storage_engine: ''
meta: null
event_handlers:
events: null
enable_batch_request_support: true
allowed_ips: null
dont_set_quota_on_create: false
expire_analytics_after: 0
response_processors: null
CORS:
enable: false
allowed_origins: null
allowed_methods: null
allowed_headers: null
exposed_headers: null
allow_credentials: false
max_age: 24
options_passthrough: true
debug: false
domain: ''
do_not_track: false
tags:
- jwt
enable_context_vars: false
config_data: null
tag_headers: null
global_rate_limit:
rate: 0
per: 0
strip_auth_data: false
- name: WAE Design as service api
slug: ''
api_id: daas
org_id: '1'
use_keyless: false
use_oauth2: false
use_openid: false
openid_options:
providers: null
segregate_by_client: false
oauth_meta:
allowed_access_types: null
allowed_authorize_types: null
auth_login_redirect: ''
auth:
use_param: false
# --- truncated at 32 KB (238 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/cisco-crosswork/refs/heads/main/openapi/cisco-crosswork-rbac-api-openapi.yml