find_apisBrowse and filter every API in the catalog.
get_api_artifactsOne API's artifacts, grouped by type.
get_openapiThe primary OpenAPI for this API.
find_similar_apisAPIs that look like this one.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This API

curl "https://apis.io/api/v1/apis/derive-to:derive-to-oauth-api"

All apis

curl "https://apis.io/api/v1/apis?limit=25"

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

openapi: 3.2.0
info:
  title: Derive OAuth API
  version: 1.0.0
  description: 'Derive''s HTTP API. Every response shape here is the single source of truth for the web client — generated from the same Zod schemas that back this reference, so the docs never drift from the running API.


    **Auth:** a session cookie (browser) or a bearer token (agents and the CLI). Most write routes are scoped to the caller''s active workspace. The `/v1` paths are the stable product surface; `/openapi.json` serves this spec and `/docs` renders it.'
tags:
- name: OAuth
  description: OAuth 2.1 authorization-server endpoints and sign-in capabilities.
paths:
  /oauth/consent/workspace:
    post:
      tags:
      - OAuth
      summary: Scope an OAuth client's grants to a set of workspaces (consent screen)
      responses:
        '200':
          description: The workspace scope was saved.
          content:
            application/json:
              schema:
                type: object
                properties:
                  ok:
                    type: boolean
                required:
                - ok
      operationId: postOauthConsentWorkspace
      x-operation-id-source: derived
  /v1/auth/capabilities:
    get:
      tags:
      - OAuth
      summary: The sign-in methods + flows this instance actually has (capability-adaptive)
      responses:
        '200':
          description: What the login page + Security hub may render here.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/AuthCapabilities'
      operationId: getV1AuthCapabilities
      x-operation-id-source: derived
components:
  schemas:
    AuthCapabilities:
      type: object
      properties:
        password:
          type: boolean
          description: True if email + password sign-in is available (always on here)
        google:
          type: boolean
          description: True if Google sign-in is configured
        github:
          type: boolean
          description: True if GitHub sign-in is configured
        oidc:
          type:
          - object
          - 'null'
          properties:
            providerId:
              type: string
              description: The provider id used to initiate SSO
            label:
              type: string
              description: Human-readable label for the SSO button
          required:
          - providerId
          - label
          description: The enterprise OIDC/SSO provider, or null if none is configured
        emailVerification:
          type: boolean
          description: True if verification emails can be sent (a mail transport is configured)
        passwordReset:
          type: boolean
          description: True if password-reset emails can be sent
        passkey:
          type: boolean
          description: True if passkey (WebAuthn) sign-in works on this instance
      required:
      - password
      - google
      - github
      - oidc
      - emailVerification
      - passwordReset
      - passkey