Discovery needs no key. Ratings and market analysis are Pro.
Get an API key
Free tier, no form to fill in. Signing in shares your email address with us — we
store it to create your key and to recognise you if you sign in with another
provider. See our Privacy Policy and
Terms.
openapi: 3.2.0
info:
title: Duo Admin Bulk Bypass Codes API
description: The Duo Admin API provides programmatic access to the administrative functionality of Duo Security for managing users, groups, phones, hardware tokens, WebAuthn credentials, integrations, and bypass codes. Requests are authenticated using HMAC-SHA1 signed HTTP Basic credentials derived from your integration key and secret key.
version: v1
contact:
name: Duo Security
url: https://duo.com/docs/adminapi
x-provenance:
method: derived
authored_by: API Evangelist
derived_on: '2026-08-19'
first_party: false
provider_published: false
source: Modelled from the provider's public HTML documentation.
note: 'Not published by the provider. Probed 2026-08-19: no anonymously fetchable first-party contract. api.duosecurity.com answers 200 with an identical 130,977-byte HTML shell for invented paths — a soft 404, not a spec.'
servers:
- url: https://api-XXXXXXXX.duosecurity.com
description: Duo Admin API host (replace XXXXXXXX with your tenant identifier)
security:
- basicAuth: []
tags:
- name: Bypass Codes
description: Bypass code generation and listing
paths:
/admin/v1/users/{user_id}/bypass_codes:
parameters:
- name: user_id
in: path
required: true
schema:
type: string
get:
operationId: listUserBypassCodes
summary: List user bypass codes
description: Returns paged list of bypass code metadata for a user.
tags:
- Bypass Codes
responses:
'200':
description: Successful response
post:
operationId: createUserBypassCodes
summary: Generate bypass codes
description: Generate bypass codes for the user.
tags:
- Bypass Codes
responses:
'200':
description: Codes generated
components:
securitySchemes:
basicAuth:
type: http
scheme: basic
description: HTTP Basic with HMAC-SHA1 signed credentials (integration key as user, signed signature as password).
externalDocs:
description: Duo Admin API Documentation
url: https://duo.com/docs/adminapi