DBT Capital Identity API

Identity and authentication

Operations 63

POST /auth/bankid Start BankID authentication #
GET /auth/bankid Collect BankID authentication #
DELETE /auth/bankid Cancel BankID authentication #
GET /auth/google/oauth/callback Handle Google OAuth callback and redirect to given target in state #
GET /auth/google/oauth/consent Redirect to Google OAuth consent screen #
POST /auth/google/oauth/code-exchange Exchange Google OAuth code for JWT token #
GET /auth/oauth/redirect Handle OAuth provider redirect and store credentials #
POST /auth/oauth/consents/consents Create OAuth consent #
GET /auth/oauth/consents/consents List OAuth consents for requesting user #
GET /auth/oauth/consents/consents/{consentId} Get OAuth consent by id for requesting user #
POST /auth/oauth/consents/consents/{consentId}/abort Abort pending OAuth consent by id for requesting user #
POST /auth/refresh Refresh access token using refresh token #
DELETE /auth/refresh Sign out by revoking the presented refresh token #
GET /me Get profile #
POST /organizations/{orgId}/invoice-addresses Add invoice address to organization #
GET /organizations/{orgId}/invoice-addresses Get invoice address by organization #
PATCH /organizations/{orgId}/invoice-addresses Update invoice address by organization #
POST /organizations/{orgId}/kyc-fetches Request a KYC fetch for an organization #
GET /organizations/{orgId}/kyc/activity The organization's KYC and identity activity and updates, newest first #
POST /organizations/{orgId}/kyc/activity/updates Post an update on the organization's identity timeline #
POST /organizations/{orgId}/kyc/activity/touch Mark the organization's identity timeline as seen #
GET /organizations/{orgId}/kyc Get an organization's KYC #
POST /organizations List organizations #
GET /organizations/kyc-statuses List the KYC status of several organizations #
POST /organizations/kyc-fetches/refetch-outdated Refetch the outdated KYC of several organizations #
POST /organizations/kyc-screenings Screen one person or organization against PEP and sanctions lists #
GET /physical-persons List physical persons #
POST /physical-persons/lookup Look up physical persons #
GET /physical-persons/{person} Get a physical person #
GET /contacts/forms List contact forms #
POST /contacts/forms Saves a contact form #
POST /contacts/forms/{id}/handle Respond to contact request #
POST /contacts/forms/claim/{creationKey} Claims a contact form #
GET /cases/contacts List case contacts #
POST /cases/{caseId}/contacts Add a contact to a case #
PATCH /cases/{caseId}/contacts/{contactId} Update a case contact #
GET /cases/{caseId}/kyc/activity Get the KYC and identity activity of a case's orgs #
GET /cases/{caseId}/kyc Get a case's KYC #
GET /cases/{caseId}/identified-persons List the persons identified with BankID for a case #
GET /staff Get staff #
GET /staff/{email} Get public staff member by email #
GET /search/organization/{searchPhrase} Find an organization #
GET /inbox List inbox #
POST /inbox/seen Mark an inbox person as seen #
GET /meetings/slots/{email} Get available meeting slots for a specific staff member #
POST /meetings Book a meeting #
GET /meetings/{eventId} Get calendar event #
GET /meetings/{eventId}/ics Download calendar event as ICS #
POST /relationships/owners Upsert ownership relationship (ORG_OWNS) #
DELETE /relationships/owners Delete ownership relationship (ORG_OWNS) #
POST /relationships/graph Fetch relationship graphs for organizations #
POST /relationships/org-ownership-request Trigger fetching of org ownership structure from Roaring #
GET /relationships/org-ownership-requests Get org ownership requests by id and/or orgId #
POST /relationships/owners/revert Drop DBT staff's change to an ownership relationship, or a case's own change… #
POST /relationships/ownership-history Get the history of the real ownership structure around some organizations #
POST /application Create an application form #
GET /application/{contactFormCreationKey} Get a contact form by ID #
GET /.well-known/jwt Get JWT public key #
GET /.well-known/oauth-protected-resource OAuth 2.0 protected resource metadata #
GET /.well-known/oauth-authorization-server OAuth 2.0 authorization server metadata #
GET /oauth/authorize OAuth 2.0 authorization endpoint (authorization code + PKCE) #
GET /oauth/complete Issue an authorization code once staff login has completed #
POST /oauth/token OAuth 2.0 token endpoint #

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API
curl "https://apis.io/api/v1/apis/dbt-se:dbt-se-identity-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

dbt-se-identity-api-openapi.yml Raw ↑
openapi: 3.2.0
info:
  title: DBT Capital Identity API
  version: 1.0.0
  description: Identity and authentication
servers:
- url: https://api.p.dbt.se
  description: Current environment
tags:


# --- truncated at 32 KB (200 KB total) ---
# Full source: https://artifacts.apis.io/dbt-se/openapi/dbt-se-identity-api-openapi.yml