Coder Authorization API
The Authorization API from Coder — 7 operation(s) for authorization.
Work with this as data
Every API here is available over the APIs.io API and to AI agents over MCP.
MCP server
One button, every client — Claude, Cursor, VS Code and the rest.
https://apis.io/mcp
Tools for apis
7 MCP tools reach this
find_apisBrowse and filter every API in the catalog.get_api_artifactsOne API's artifacts, grouped by type.get_openapiThe primary OpenAPI for this API.find_similar_apisAPIs that look like this one.apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.resolveTurn a domain, URL or GitHub org into the provider it belongs to.find_cohortsEvery scored population of providers in the catalog.
Call it yourself
curl for this page
This API
curl "https://apis.io/api/v1/apis/coder:coder-authorization-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.
Get an API key
Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.
A second provider on the same verified email joins the account you already have.
OpenAPI Specification
openapi: 3.2.0
info:
description: Coderd is the service created by running coder server. It is a thin API that connects workspaces, provisioners and users. coderd stores its state in Postgres and is the only service that communicates with Postgres.
title: Coder Authorization API
termsOfService: https://coder.com/legal/terms-of-service
contact:
name: API Support
url: https://coder.com
email: support@coder.com
license:
name: AGPL-3.0
url: https://github.com/coder/coder/blob/main/LICENSE
version: '2.0'
servers:
- url: /
tags:
- name: Authorization
paths:
/api/v2/auth/scopes:
get:
tags:
- Authorization
summary: List API key scopes
operationId: list-api-key-scopes
responses:
'200':
description: OK
content:
application/json:
schema:
$ref: '#/components/schemas/codersdk.ExternalAPIKeyScopes'
/api/v2/authcheck:
post:
tags:
- Authorization
summary: Check authorization
operationId: check-authorization
responses:
'200':
description: OK
content:
application/json:
schema:
$ref: '#/components/schemas/codersdk.AuthorizationResponse'
security:
- CoderSessionToken: []
requestBody:
content:
application/json:
schema:
$ref: '#/components/schemas/codersdk.AuthorizationRequest'
description: Authorization request
required: true
/api/v2/users/login:
post:
tags:
- Authorization
summary: Log in user
operationId: log-in-user
responses:
'201':
description: Created
content:
application/json:
schema:
$ref: '#/components/schemas/codersdk.LoginWithPasswordResponse'
requestBody:
content:
application/json:
schema:
$ref: '#/components/schemas/codersdk.LoginWithPasswordRequest'
description: Login request
required: true
/api/v2/users/otp/change-password:
post:
tags:
- Authorization
summary: Change password with a one-time passcode
operationId: change-password-with-a-one-time-passcode
responses:
'204':
description: No Content
requestBody:
content:
application/json:
schema:
$ref: '#/components/schemas/codersdk.ChangePasswordWithOneTimePasscodeRequest'
description: Change password request
required: true
/api/v2/users/otp/request:
post:
tags:
- Authorization
summary: Request one-time passcode
operationId: request-one-time-passcode
responses:
'204':
description: No Content
requestBody:
content:
application/json:
schema:
$ref: '#/components/schemas/codersdk.RequestOneTimePasscodeRequest'
description: One-time passcode request
required: true
/api/v2/users/validate-password:
post:
tags:
- Authorization
summary: Validate user password
operationId: validate-user-password
responses:
'200':
description: OK
content:
application/json:
schema:
$ref: '#/components/schemas/codersdk.ValidateUserPasswordResponse'
security:
- CoderSessionToken: []
requestBody:
content:
application/json:
schema:
$ref: '#/components/schemas/codersdk.ValidateUserPasswordRequest'
description: Validate user password request
required: true
/api/v2/users/{user}/convert-login:
post:
tags:
- Authorization
summary: Convert user from password to oauth authentication
operationId: convert-user-from-password-to-oauth-authentication
parameters:
- description: User ID, name, or me
name: user
in: path
required: true
schema:
type: string
responses:
'201':
description: Created
content:
application/json:
schema:
$ref: '#/components/schemas/codersdk.OAuthConversionResponse'
security:
- CoderSessionToken: []
requestBody:
content:
application/json:
schema:
$ref: '#/components/schemas/codersdk.ConvertLoginRequest'
description: Convert request
required: true
components:
schemas:
codersdk.ConvertLoginRequest:
type: object
required:
- password
- to_type
properties:
password:
type: string
to_type:
description: ToType is the login type to convert to.
allOf:
- $ref: '#/components/schemas/codersdk.LoginType'
codersdk.ValidateUserPasswordRequest:
type: object
required:
- password
properties:
password:
type: string
codersdk.AuthorizationRequest:
type: object
properties:
checks:
description: 'Checks is a map keyed with an arbitrary string to a permission check.
The key can be any string that is helpful to the caller, and allows
multiple permission checks to be run in a single request.
The key ensures that each permission check has the same key in the
response.'
type: object
additionalProperties:
$ref: '#/components/schemas/codersdk.AuthorizationCheck'
codersdk.LoginWithPasswordRequest:
type: object
required:
- email
- password
properties:
email:
type: string
format: email
password:
type: string
codersdk.ValidateUserPasswordResponse:
type: object
properties:
details:
type: string
valid:
type: boolean
codersdk.RBACAction:
type: string
enum:
- application_connect
- assign
- create
- create_agent
- delete
- delete_agent
- read
- read_personal
- read_secret
- ssh
- share
- unassign
- update
- update_agent
- update_personal
- use
- view_insights
- start
- stop
x-enum-varnames:
- ActionApplicationConnect
- ActionAssign
- ActionCreate
- ActionCreateAgent
- ActionDelete
- ActionDeleteAgent
- ActionRead
- ActionReadPersonal
- ActionReadSecret
- ActionSSH
- ActionShare
- ActionUnassign
- ActionUpdate
- ActionUpdateAgent
- ActionUpdatePersonal
- ActionUse
- ActionViewInsights
- ActionWorkspaceStart
- ActionWorkspaceStop
codersdk.AuthorizationCheck:
description: AuthorizationCheck is used to check if the currently authenticated user (or the specified user) can do a given action to a given set of objects.
type: object
properties:
action:
enum:
- create
- read
- update
- delete
allOf:
- $ref: '#/components/schemas/codersdk.RBACAction'
object:
description: 'Object can represent a "set" of objects, such as: all workspaces in an organization, all workspaces owned by me, and all workspaces across the entire product.
When defining an object, use the most specific language when possible to
produce the smallest set. Meaning to set as many fields on ''Object'' as
you can. Example, if you want to check if you can update all workspaces
owned by ''me'', try to also add an ''OrganizationID'' to the settings.
Omitting the ''OrganizationID'' could produce the incorrect value, as
workspaces have both `user` and `organization` owners.'
allOf:
- $ref: '#/components/schemas/codersdk.AuthorizationObject'
codersdk.LoginWithPasswordResponse:
type: object
required:
- session_token
properties:
session_token:
type: string
codersdk.ChangePasswordWithOneTimePasscodeRequest:
type: object
required:
- email
- one_time_passcode
- password
properties:
email:
type: string
format: email
one_time_passcode:
type: string
password:
type: string
codersdk.AuthorizationResponse:
type: object
additionalProperties:
type: boolean
codersdk.AuthorizationObject:
description: 'AuthorizationObject can represent a "set" of objects, such as: all workspaces in an organization, all workspaces owned by me, all workspaces across the entire product.'
type: object
properties:
any_org:
description: 'AnyOrgOwner (optional) will disregard the org_owner when checking for permissions.
This cannot be set to true if the OrganizationID is set.'
type: boolean
organization_id:
description: OrganizationID (optional) adds the set constraint to all resources owned by a given organization.
type: string
owner_id:
description: OwnerID (optional) adds the set constraint to all resources owned by a given user.
type: string
resource_id:
description: 'ResourceID (optional) reduces the set to a singular resource. This assigns
a resource ID to the resource type, eg: a single workspace.
The rbac library will not fetch the resource from the database, so if you
are using this option, you should also set the owner ID and organization ID
if possible. Be as specific as possible using all the fields relevant.'
type: string
resource_type:
description: 'ResourceType is the name of the resource.
`./coderd/rbac/object.go` has the list of valid resource types.'
allOf:
- $ref: '#/components/schemas/codersdk.RBACResource'
codersdk.ExternalAPIKeyScopes:
type: object
properties:
external:
type: array
items:
$ref: '#/components/schemas/codersdk.APIKeyScope'
codersdk.OAuthConversionResponse:
type: object
properties:
expires_at:
type: string
format: date-time
state_string:
type: string
to_type:
$ref: '#/components/schemas/codersdk.LoginType'
user_id:
type: string
format: uuid
codersdk.APIKeyScope:
type: string
enum:
- all
- application_connect
- ai_gateway_key:*
- ai_gateway_key:create
- ai_gateway_key:delete
- ai_gateway_key:read
- ai_gateway_key:update
- ai_model_price:*
- ai_model_price:read
- ai_model_price:update
- ai_provider:*
- ai_provider:create
- ai_provider:delete
- ai_provider:read
- ai_provider:update
- ai_seat:*
- ai_seat:create
- ai_seat:read
- aibridge_interception:*
- aibridge_interception:create
- aibridge_interception:read
- aibridge_interception:update
- api_key:*
- api_key:create
- api_key:delete
- api_key:read
- api_key:update
- assign_org_role:*
- assign_org_role:assign
- assign_org_role:create
- assign_org_role:delete
- assign_org_role:read
- assign_org_role:unassign
- assign_org_role:update
- assign_role:*
- assign_role:assign
- assign_role:read
- assign_role:unassign
- audit_log:*
- audit_log:create
- audit_log:read
- boundary_log:*
- boundary_log:create
- boundary_log:delete
- boundary_log:read
- boundary_usage:*
- boundary_usage:delete
- boundary_usage:read
- boundary_usage:update
- chat:*
- chat:create
- chat:delete
- chat:read
- chat:share
- chat:update
- chat_model_config:*
- chat_model_config:create
- chat_model_config:delete
- chat_model_config:read
- chat_model_config:share
- chat_model_config:update
- chat_project:*
- chat_project:create
- chat_project:delete
- chat_project:read
- chat_project:share
- chat_project:update
- chat_project_memory:*
- chat_project_memory:create
- chat_project_memory:delete
- chat_project_memory:read
- coder:all
- coder:apikeys.manage_self
- coder:application_connect
- coder:templates.author
- coder:templates.build
- coder:workspaces.access
- coder:workspaces.create
- coder:workspaces.delete
- coder:workspaces.operate
- connection_log:*
- connection_log:read
- connection_log:update
- crypto_key:*
- crypto_key:create
- crypto_key:delete
- crypto_key:read
- crypto_key:update
- debug_info:*
- debug_info:read
- deployment_config:*
- deployment_config:read
- deployment_config:update
- deployment_stats:*
- deployment_stats:read
- file:*
- file:create
- file:read
- group:*
- group:create
- group:delete
- group:read
- group:update
- group_member:*
- group_member:read
- idpsync_settings:*
- idpsync_settings:read
- idpsync_settings:update
- inbox_notification:*
- inbox_notification:create
- inbox_notification:read
- inbox_notification:update
- license:*
- license:create
- license:delete
- license:read
- mcp_server_config:*
- mcp_server_config:create
- mcp_server_config:delete
- mcp_server_config:read
- mcp_server_config:share
- mcp_server_config:update
- notification_message:*
- notification_message:create
- notification_message:delete
- notification_message:read
- notification_message:update
- notification_preference:*
- notification_preference:read
- notification_preference:update
- notification_template:*
- notification_template:read
- notification_template:update
- oauth2_app:*
- oauth2_app:create
- oauth2_app:delete
- oauth2_app:read
- oauth2_app:update
- oauth2_app_code_token:*
- oauth2_app_code_token:create
- oauth2_app_code_token:delete
- oauth2_app_code_token:read
- oauth2_app_secret:*
- oauth2_app_secret:create
- oauth2_app_secret:delete
- oauth2_app_secret:read
- oauth2_app_secret:update
- organization:*
- organization:create
- organization:delete
- organization:read
- organization:update
- organization_member:*
- organization_member:create
- organization_member:delete
- organization_member:read
- organization_member:update
- organization_skill:*
- organization_skill:create
- organization_skill:delete
- organization_skill:read
- organization_skill:share
- organization_skill:update
- prebuilt_workspace:*
- prebuilt_workspace:delete
- prebuilt_workspace:update
- provisioner_daemon:*
- provisioner_daemon:create
- provisioner_daemon:delete
- provisioner_daemon:read
- provisioner_daemon:update
- provisioner_jobs:*
- provisioner_jobs:create
- provisioner_jobs:read
- provisioner_jobs:update
- replicas:*
- replicas:read
- system:*
- system:create
- system:delete
- system:read
- system:update
- tailnet_coordinator:*
- tailnet_coordinator:create
- tailnet_coordinator:delete
- tailnet_coordinator:read
- tailnet_coordinator:update
- template:*
- template:create
- template:delete
- template:read
- template:update
- template:use
- template:view_insights
- usage_event:*
- usage_event:create
- usage_event:read
- usage_event:update
- user:*
- user:create
- user:delete
- user:read
- user:read_personal
- user:update
- user:update_personal
- user_secret:*
- user_secret:create
- user_secret:delete
- user_secret:read
- user_secret:update
- user_skill:*
- user_skill:create
- user_skill:delete
- user_skill:read
- user_skill:update
- webpush_subscription:*
- webpush_subscription:create
- webpush_subscription:delete
- webpush_subscription:read
- workspace:*
- workspace:application_connect
- workspace:create
- workspace:create_agent
- workspace:delete
- workspace:delete_agent
- workspace:read
- workspace:share
- workspace:ssh
- workspace:start
- workspace:stop
- workspace:update
- workspace:update_agent
- workspace_agent_devcontainers:*
- workspace_agent_devcontainers:create
- workspace_agent_resource_monitor:*
- workspace_agent_resource_monitor:create
- workspace_agent_resource_monitor:read
- workspace_agent_resource_monitor:update
- workspace_build_orchestration:*
- workspace_build_orchestration:create
- workspace_build_orchestration:delete
- workspace_build_orchestration:read
- workspace_build_orchestration:update
- workspace_dormant:*
- workspace_dormant:application_connect
- workspace_dormant:create
- workspace_dormant:create_agent
- workspace_dormant:delete
- workspace_dormant:delete_agent
- workspace_dormant:read
- workspace_dormant:share
- workspace_dormant:ssh
- workspace_dormant:start
- workspace_dormant:stop
- workspace_dormant:update
- workspace_dormant:update_agent
- workspace_proxy:*
- workspace_proxy:create
- workspace_proxy:delete
- workspace_proxy:read
- workspace_proxy:update
- workspace_secret:*
- workspace_secret:create
- workspace_secret:read
- workspace_secret:read_secret
- workspace_secret:update
x-enum-varnames:
- APIKeyScopeAll
- APIKeyScopeApplicationConnect
- APIKeyScopeAiGatewayKeyAll
- APIKeyScopeAiGatewayKeyCreate
- APIKeyScopeAiGatewayKeyDelete
- APIKeyScopeAiGatewayKeyRead
- APIKeyScopeAiGatewayKeyUpdate
- APIKeyScopeAiModelPriceAll
- APIKeyScopeAiModelPriceRead
- APIKeyScopeAiModelPriceUpdate
- APIKeyScopeAiProviderAll
- APIKeyScopeAiProviderCreate
- APIKeyScopeAiProviderDelete
- APIKeyScopeAiProviderRead
- APIKeyScopeAiProviderUpdate
- APIKeyScopeAiSeatAll
- APIKeyScopeAiSeatCreate
- APIKeyScopeAiSeatRead
- APIKeyScopeAibridgeInterceptionAll
- APIKeyScopeAibridgeInterceptionCreate
- APIKeyScopeAibridgeInterceptionRead
- APIKeyScopeAibridgeInterceptionUpdate
- APIKeyScopeApiKeyAll
- APIKeyScopeApiKeyCreate
- APIKeyScopeApiKeyDelete
- APIKeyScopeApiKeyRead
- APIKeyScopeApiKeyUpdate
- APIKeyScopeAssignOrgRoleAll
- APIKeyScopeAssignOrgRoleAssign
- APIKeyScopeAssignOrgRoleCreate
- APIKeyScopeAssignOrgRoleDelete
- APIKeyScopeAssignOrgRoleRead
- APIKeyScopeAssignOrgRoleUnassign
- APIKeyScopeAssignOrgRoleUpdate
- APIKeyScopeAssignRoleAll
- APIKeyScopeAssignRoleAssign
- APIKeyScopeAssignRoleRead
- APIKeyScopeAssignRoleUnassign
- APIKeyScopeAuditLogAll
- APIKeyScopeAuditLogCreate
- APIKeyScopeAuditLogRead
- APIKeyScopeBoundaryLogAll
- APIKeyScopeBoundaryLogCreate
- APIKeyScopeBoundaryLogDelete
- APIKeyScopeBoundaryLogRead
- APIKeyScopeBoundaryUsageAll
- APIKeyScopeBoundaryUsageDelete
- APIKeyScopeBoundaryUsageRead
- APIKeyScopeBoundaryUsageUpdate
- APIKeyScopeChatAll
- APIKeyScopeChatCreate
- APIKeyScopeChatDelete
- APIKeyScopeChatRead
- APIKeyScopeChatShare
- APIKeyScopeChatUpdate
- APIKeyScopeChatModelConfigAll
- APIKeyScopeChatModelConfigCreate
- APIKeyScopeChatModelConfigDelete
- APIKeyScopeChatModelConfigRead
- APIKeyScopeChatModelConfigShare
- APIKeyScopeChatModelConfigUpdate
- APIKeyScopeChatProjectAll
- APIKeyScopeChatProjectCreate
- APIKeyScopeChatProjectDelete
- APIKeyScopeChatProjectRead
- APIKeyScopeChatProjectShare
- APIKeyScopeChatProjectUpdate
- APIKeyScopeChatProjectMemoryAll
- APIKeyScopeChatProjectMemoryCreate
- APIKeyScopeChatProjectMemoryDelete
- APIKeyScopeChatProjectMemoryRead
- APIKeyScopeCoderAll
- APIKeyScopeCoderApikeysManageSelf
- APIKeyScopeCoderApplicationConnect
- APIKeyScopeCoderTemplatesAuthor
- APIKeyScopeCoderTemplatesBuild
- APIKeyScopeCoderWorkspacesAccess
- APIKeyScopeCoderWorkspacesCreate
- APIKeyScopeCoderWorkspacesDelete
- APIKeyScopeCoderWorkspacesOperate
- APIKeyScopeConnectionLogAll
- APIKeyScopeConnectionLogRead
- APIKeyScopeConnectionLogUpdate
- APIKeyScopeCryptoKeyAll
- APIKeyScopeCryptoKeyCreate
- APIKeyScopeCryptoKeyDelete
- APIKeyScopeCryptoKeyRead
- APIKeyScopeCryptoKeyUpdate
- APIKeyScopeDebugInfoAll
- APIKeyScopeDebugInfoRead
- APIKeyScopeDeploymentConfigAll
- APIKeyScopeDeploymentConfigRead
- APIKeyScopeDeploymentConfigUpdate
- APIKeyScopeDeploymentStatsAll
- APIKeyScopeDeploymentStatsRead
- APIKeyScopeFileAll
- APIKeyScopeFileCreate
- APIKeyScopeFileRead
- APIKeyScopeGroupAll
- APIKeyScopeGroupCreate
- APIKeyScopeGroupDelete
- APIKeyScopeGroupRead
- APIKeyScopeGroupUpdate
- APIKeyScopeGroupMemberAll
- APIKeyScopeGroupMemberRead
- APIKeyScopeIdpsyncSettingsAll
- APIKeyScopeIdpsyncSettingsRead
- APIKeyScopeIdpsyncSettingsUpdate
- APIKeyScopeInboxNotificationAll
- APIKeyScopeInboxNotificationCreate
- APIKeyScopeInboxNotificationRead
- APIKeyScopeInboxNotificationUpdate
- APIKeyScopeLicenseAll
- APIKeyScopeLicenseCreate
- APIKeyScopeLicenseDelete
- APIKeyScopeLicenseRead
- APIKeyScopeMcpServerConfigAll
- APIKeyScopeMcpServerConfigCreate
- APIKeyScopeMcpServerConfigDelete
- APIKeyScopeMcpServerConfigRead
- APIKeyScopeMcpServerConfigShare
- APIKeyScopeMcpServerConfigUpdate
- APIKeyScopeNotificationMessageAll
- APIKeyScopeNotificationMessageCreate
- APIKeyScopeNotificationMessageDelete
- APIKeyScopeNotificationMessageRead
- APIKeyScopeNotificationMessageUpdate
- APIKeyScopeNotificationPreferenceAll
- APIKeyScopeNotificationPreferenceRead
- APIKeyScopeNotificationPreferenceUpdate
- APIKeyScopeNotificationTemplateAll
- APIKeyScopeNotificationTemplateRead
- APIKeyScopeNotificationTemplateUpdate
- APIKeyScopeOauth2AppAll
- APIKeyScopeOauth2AppCreate
- APIKeyScopeOauth2AppDelete
- APIKeyScopeOauth2AppRead
- APIKeyScopeOauth2AppUpdate
- APIKeyScopeOauth2AppCodeTokenAll
- APIKeyScopeOauth2AppCodeTokenCreate
- APIKeyScopeOauth2AppCodeTokenDelete
- APIKeyScopeOauth2AppCodeTokenRead
- APIKeyScopeOauth2AppSecretAll
- APIKeyScopeOauth2AppSecretCreate
- APIKeyScopeOauth2AppSecretDelete
- APIKeyScopeOauth2AppSecretRead
- APIKeyScopeOauth2AppSecretUpdate
- APIKeyScopeOrganizationAll
- APIKeyScopeOrganizationCreate
- APIKeyScopeOrganizationDelete
- APIKeyScopeOrganizationRead
- APIKeyScopeOrganizationUpdate
- APIKeyScopeOrganizationMemberAll
- APIKeyScopeOrganizationMemberCreate
- APIKeyScopeOrganizationMemberDelete
- APIKeyScopeOrganizationMemberRead
- APIKeyScopeOrganizationMemberUpdate
- APIKeyScopeOrganizationSkillAll
- APIKeyScopeOrganizationSkillCreate
- APIKeyScopeOrganizationSkillDelete
- APIKeyScopeOrganizationSkillRead
- APIKeyScopeOrganizationSkillShare
- APIKeyScopeOrganizationSkillUpdate
- APIKeyScopePrebuiltWorkspaceAll
- APIKeyScopePrebuiltWorkspaceDelete
- APIKeyScopePrebuiltWorkspaceUpdate
- APIKeyScopeProvisionerDaemonAll
- APIKeyScopeProvisionerDaemonCreate
- APIKeyScopeProvisionerDaemonDelete
- APIKeyScopeProvisionerDaemonRead
- APIKeyScopeProvisionerDaemonUpdate
- APIKeyScopeProvisionerJobsAll
- APIKeyScopeProvisionerJobsCreate
- APIKeyScopeProvisionerJobsRead
- APIKeyScopeProvisionerJobsUpdate
- APIKeyScopeReplicasAll
- APIKeyScopeReplicasRead
- APIKeyScopeSystemAll
- APIKeyScopeSystemCreate
- APIKeyScopeSystemDelete
- APIKeyScopeSystemRead
- APIKeyScopeSystemUpdate
- APIKeyScopeTailnetCoordinatorAll
- APIKeyScopeTailnetCoordinatorCreate
- APIKeyScopeTailnetCoordinatorDelete
- APIKeyScopeTailnetCoordinatorRead
- APIKeyScopeTailnetCoordinatorUpdate
- APIKeyScopeTemplateAll
- APIKeyScopeTemplateCreate
- APIKeyScopeTemplateDelete
- APIKeyScopeTemplateRead
- APIKeyScopeTemplateUpdate
- APIKeyScopeTemplateUse
- APIKeyScopeTemplateViewInsights
- APIKeyScopeUsageEventAll
- APIKeyScopeUsageEventCreate
- APIKeyScopeUsageEventRead
- APIKeyScopeUsageEventUpdate
- APIKeyScopeUserAll
- APIKeyScopeUserCreate
- APIKeyScopeUserDelete
- APIKeyScopeUserRead
- APIKeyScopeUserReadPersonal
- APIKeyScopeUserUpdate
- APIKeyScopeUserUpdatePersonal
- APIKeyScopeUserSecretAll
- APIKeyScopeUserSecretCreate
- APIKeyScopeUserSecretDelete
- APIKeyScopeUserSecretRead
- APIKeyScopeUserSecretUpdate
- APIKeyScopeUserSkillAll
- APIKeyScopeUserSkillCreate
- APIKeyScopeUserSkillDelete
- APIKeyScopeUserSkillRead
- APIKeyScopeUserSkillUpdate
- APIKeyScopeWebpushSubscriptionAll
- APIKeyScopeWebpushSubscriptionCreate
- APIKeyScopeWebpushSubscriptionDelete
- APIKeyScopeWebpushSubscriptionRead
- APIKeyScopeWorkspaceAll
- APIKeyScopeWorkspaceApplicationConnect
- APIKeyScopeWorkspaceCreate
- APIKeyScopeWorkspaceCreateAgent
- APIKeyScopeWorkspaceDelete
- APIKeyScopeWorkspaceDeleteAgent
- APIKeyScopeWorkspaceRead
- APIKeyScopeWorkspaceShare
- APIKeyScopeWorkspaceSsh
- APIKeyScopeWorkspaceStart
- APIKeyScopeWorkspaceStop
- APIKeyScopeWorkspaceUpdate
- APIKeyScopeWorkspaceUpdateAgent
- APIKeyScopeWorkspaceAgentDevcontainersAll
- APIKeyScopeWorkspaceAgentDevcontainersCreate
- APIKeyScopeWorkspaceAgentResourceMonitorAll
- APIKeyScopeWorkspaceAgentResourceMonitorCreate
- APIKeyScopeWorkspaceAgentResourceMonitorRead
- APIKeyScopeWorkspaceAgentResourceMonitorUpdate
- APIKeyScopeWorkspaceBuildOrchestrationAll
- APIKeyScopeWorkspaceBuildOrchestrationCreate
- APIKeyScopeWorkspaceBuildOrchestrationDelete
- APIKeyScopeWorkspaceBuildOrchestrationRead
- APIKeyScopeWorkspaceBuildOrchestrationUpdate
- APIKeyScopeWorkspaceDormantAll
- APIKeyScopeWorkspaceDormantApplicationConnect
- APIKeyScopeWorkspaceDormantCreate
- APIKeyScopeWorkspaceDormantCreateAgent
- APIKeyScopeWorkspaceDormantDelete
- APIKeyScopeWorkspaceDormantDeleteAgent
- APIKeyScopeWorkspaceDormantRead
- APIKeyScopeWorkspaceDormantShare
- APIKeyScopeWorkspaceDormantSsh
- APIKeyScopeWorkspaceDormantStart
- APIKeyScopeWorkspaceDormantStop
- APIKeyScopeWorkspaceDormantUpdate
- APIKeyScopeWorkspaceDormantUpdateAgent
- APIKeyScopeWorkspaceProxyAll
- APIKeyScopeWorkspaceProxyCreate
- APIKeyScopeWorkspaceProxyDelete
- APIKeyScopeWorkspaceProxyRead
- APIKeyScopeWorkspaceProxyUpdate
- APIKeyScopeWorkspaceSecretAll
- APIKeyScopeWorkspaceSecretCreate
- APIKeyScopeWorkspaceSecretRead
- APIKeyScopeWorkspaceSecretReadSecret
- APIKeyScopeWorkspaceSecretUpdate
codersdk.RequestOneTimePasscodeRequest:
type: object
required:
- email
properties:
email:
type: string
format: email
codersdk.RBACResource:
type: string
enum:
- '*'
- ai_gateway_key
- ai_model_price
- ai_provider
- ai_seat
- aibridge_interception
- api_key
- assign_org_role
- assign_role
- audit_log
- boundary_log
- boundary_usage
- chat
- chat_model_config
- chat_project
- chat_project_memory
- connection_log
- crypto_key
- debug_info
- deployment_config
- deployment_stats
- file
- group
- group_member
- idpsync_settings
- inbox_notification
- license
- mcp_server_config
- notification_message
- notification_preference
- notification_template
- oauth2_app
- oauth2_app_code_token
- oauth2_app_secret
- organization
- organization_member
- organization_skill
- prebuilt_workspace
- provisioner_daemon
- provisioner_jobs
- replicas
- system
- tailnet_coordinator
- template
- usage_event
- user
- user_secret
- user_skill
- webpush_subscription
- workspace
- workspace_agent_devcontainers
- workspace_agent_resource_monitor
- workspace_build_orchestration
- workspace_dormant
- workspace_proxy
- workspace_secret
x-enum-varnames:
- ResourceWildcard
- ResourceAIGatewayKey
- ResourceAiModelPrice
- ResourceAIProvider
- ResourceAiSeat
- ResourceAibridgeInterception
- ResourceApiKey
- ResourceAssignOrgRole
- ResourceAssignRole
- ResourceAuditLog
- ResourceBoundaryLog
- ResourceBoundaryUsage
- ResourceChat
- ResourceChatModelConfig
- ResourceChatProject
- ResourceChatProjectMemory
- ResourceConnectionLog
- ResourceCryptoKey
- ResourceDebugInfo
- ResourceDeploymentConfig
- ResourceDeploymentStats
- ResourceFile
- ResourceGroup
- ResourceGroupMember
- ResourceIdpsyncSettings
- ResourceInboxNotification
- ResourceLicense
- ResourceMCPServerConfig
- ResourceNotificationMessage
- ResourceNotificationPreference
- ResourceNotificationTemplate
- ResourceOauth2App
- ResourceOauth2AppCodeToken
- ResourceOauth2AppSecret
- ResourceOrganization
- ResourceOrganizationMember
- ResourceOrganizationSkill
- ResourcePrebuiltWorkspace
- ResourceProvisionerDaemon
- ResourceProvisionerJobs
- ResourceReplicas
- ResourceSystem
- ResourceTailnetCoordinator
- ResourceTemplate
- ResourceUsageEvent
- ResourceUser
- ResourceUserSecret
- ResourceUserSkill
- ResourceWebpushSubscription
- ResourceWorkspace
- ResourceWorkspaceAgentDevcontainers
- ResourceWorkspaceAgentResourceMonitor
- ResourceWorkspaceBuildOrchestration
- ResourceWorkspaceDormant
- ResourceWorkspaceProxy
- ResourceWorkspaceSecret
codersdk.LoginType:
type: string
enum:
- ''
- password
- github
- oidc
- token
- none
x-enum-varnames:
- LoginTypeUnknown
- LoginTypePassword
- LoginTypeGithub
- LoginTypeOIDC
- LoginTypeToken
- LoginTypeNone
securitySchemes:
AIGatewayKey:
type: apiKey
name: X-AI-Governance-Gateway-Key
in: header
Authorization:
type: apiKey
name: Authorization
in: header
CoderSessionToken:
type: apiKey
name: Coder-Session-Token
in: header
x-provenance:
method: harvested
publisher: Coder
source: https://raw.githubusercontent.com/coder/coder/main/coderd/apidoc/swagger.json
note: split by refine-openapis from the provider's own published document, verified by fetch (openapi/_original/*.fetch.json);
stamped by stamp-openapi-provenance.py (roadmap#793)