Elaichi

Elaichi SCIM v2 API

The SCIM v2 API from Elaichi — 7 operation(s) for scim v2.

GitHub OpenAPI

Operations 15

GET /scim/v2/ServiceProviderConfig Get SCIM service provider configuration #
GET /scim/v2/ResourceTypes List SCIM resource types #
GET /scim/v2/Schemas List SCIM schemas #
GET /scim/v2/Users List users (SCIM) #
POST /scim/v2/Users Create a user (SCIM) #
GET /scim/v2/Users/{id} Get a user (SCIM) #
PUT /scim/v2/Users/{id} Replace a user (SCIM) #
PATCH /scim/v2/Users/{id} Update a user (SCIM) #
DELETE /scim/v2/Users/{id} Delete a user (SCIM) #
GET /scim/v2/Groups List groups (SCIM) #
POST /scim/v2/Groups Create a group (SCIM) #
GET /scim/v2/Groups/{id} Get a group (SCIM) #
PUT /scim/v2/Groups/{id} Replace a group (SCIM) #
PATCH /scim/v2/Groups/{id} Update a group (SCIM) #
DELETE /scim/v2/Groups/{id} Delete a group (SCIM) #

Specifications

⚙
OpenAPI
https://artifacts.apis.io/elaichi-ai/openapi/elaichi-ai-scim-v2-api-openapi.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/elaichi-ai:elaichi-ai-scim-v2-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

elaichi-ai-scim-v2-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: Elaichi SCIM v2 API
  version: 0.1.0
  description: 'Control-plane HTTP API for Elaichi, the MCP control plane for SaaS teams. Authenticate with an organization API token (create one in the Elaichi app under Settings → API tokens) sent as a bearer token, plus the `X-Organization-Id` header on org-scoped routes; the MCP and OAuth endpoints use their own protocols. A few actions are deliberately not available to an API token and must be done by a person in the Elaichi app: managing API and SCIM tokens, creating an organization, approving an access request, deleting an organization, and changing the two-factor requirement. The operations concerned say so. Endpoints used only by the Elaichi app itself (sign-in, consent screens, browser redirects, inbound webhooks) are not documented.'
servers:
- url: https://api.elaichi.ai
  description: Production
tags:
- name: SCIM v2
paths:
  /scim/v2/ServiceProviderConfig:
    get:
      operationId: scimServiceProviderConfig
      summary: Get SCIM service provider configuration
      tags:
      - SCIM v2
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                type: object
                additionalProperties: true
                description: SCIM 2.0 resource or ListResponse, served as `application/scim+json`.
        '400':
          description: Bad request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '403':
          description: Forbidden
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '404':
          description: Not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '429':
          description: Rate limited
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
      description: Advertises which SCIM features this server supports (PATCH yes, bulk no, filter yes).
      security:
      - bearerAuth: []
  /scim/v2/ResourceTypes:
    get:
      operationId: scimResourceTypes
      summary: List SCIM resource types
      tags:
      - SCIM v2
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                type: object
                additionalProperties: true
                description: SCIM 2.0 resource or ListResponse, served as `application/scim+json`.
        '400':
          description: Bad request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '403':
          description: Forbidden
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '404':
          description: Not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '429':
          description: Rate limited
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
      description: 'The resource types served here: `User` and `Group`.'
      security:
      - bearerAuth: []
  /scim/v2/Schemas:
    get:
      operationId: scimSchemas
      summary: List SCIM schemas
      tags:
      - SCIM v2
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                type: object
                additionalProperties: true
                description: SCIM 2.0 resource or ListResponse, served as `application/scim+json`.
        '400':
          description: Bad request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '403':
          description: Forbidden
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '404':
          description: Not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '429':
          description: Rate limited
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
      description: The core User and Group schemas this server implements.
      security:
      - bearerAuth: []
  /scim/v2/Users:
    get:
      operationId: scimListUsers
      summary: List users (SCIM)
      tags:
      - SCIM v2
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                type: object
                additionalProperties: true
                description: SCIM 2.0 resource or ListResponse, served as `application/scim+json`.
        '400':
          description: Bad request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '403':
          description: Forbidden
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '404':
          description: Not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '429':
          description: Rate limited
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
      description: Lists the users provisioned into the token’s organization. The SCIM endpoints are authenticated by a SCIM bearer token (created in the app under Settings → SSO and SCIM), not a session or an org API token; the organization comes from the token, so send no `X-Organization-Id`. They paginate with SCIM’s `startIndex` and `count`, not this API’s cursors.
      security:
      - bearerAuth: []
      parameters:
      - name: filter
        in: query
        required: false
        description: SCIM filter expression, e.g. `userName eq "a@b.com"`.
        schema:
          type: string
      - name: startIndex
        in: query
        required: false
        description: 1-based index of the first result (SCIM pagination, not this API's cursors).
        schema:
          type: integer
          default: 1
      - name: count
        in: query
        required: false
        description: Page size. Defaults to 100; the service advertises a maximum of 200.
        schema:
          type: integer
          default: 100
    post:
      operationId: scimCreateUser
      summary: Create a user (SCIM)
      tags:
      - SCIM v2
      responses:
        '201':
          description: Created
          content:
            application/json:
              schema:
                type: object
                additionalProperties: true
                description: SCIM 2.0 resource or ListResponse, served as `application/scim+json`.
        '400':
          description: Bad request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '403':
          description: Forbidden
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '404':
          description: Not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '429':
          description: Rate limited
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
      description: Provisions a member into the token's organization. Called by the IdP.
      security:
      - bearerAuth: []
      requestBody:
        required: true
        content:
          application/json:
            schema:
              type: object
              additionalProperties: true
              description: SCIM 2.0 resource or ListResponse, served as `application/scim+json`.
  /scim/v2/Users/{id}:
    get:
      operationId: scimGetUser
      summary: Get a user (SCIM)
      tags:
      - SCIM v2
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                type: object
                additionalProperties: true
                description: SCIM 2.0 resource or ListResponse, served as `application/scim+json`.
        '400':
          description: Bad request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '403':
          description: Forbidden
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '404':
          description: Not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '429':
          description: Rate limited
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
      description: Returns one provisioned user by SCIM id.
      security:
      - bearerAuth: []
      parameters:
      - name: id
        in: path
        required: true
        schema:
          type: string
        description: SCIM user id.
    put:
      operationId: scimReplaceUser
      summary: Replace a user (SCIM)
      tags:
      - SCIM v2
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                type: object
                additionalProperties: true
                description: SCIM 2.0 resource or ListResponse, served as `application/scim+json`.
        '400':
          description: Bad request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '403':
          description: Forbidden
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '404':
          description: Not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '429':
          description: Rate limited
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
      description: REPLACES the resource with the body — SCIM PUT semantics. Use PATCH for partial changes.
      security:
      - bearerAuth: []
      requestBody:
        required: true
        content:
          application/json:
            schema:
              type: object
              additionalProperties: true
              description: SCIM 2.0 resource or ListResponse, served as `application/scim+json`.
      parameters:
      - name: id
        in: path
        required: true
        schema:
          type: string
        description: SCIM user id.
    patch:
      operationId: scimPatchUser
      summary: Update a user (SCIM)
      tags:
      - SCIM v2
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                type: object
                additionalProperties: true
                description: SCIM 2.0 resource or ListResponse, served as `application/scim+json`.
        '400':
          description: Bad request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '403':
          description: Forbidden
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '404':
          description: Not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '429':
          description: Rate limited
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
      description: SCIM PATCH operations (`add`/`replace`/`remove`) — this is how an IdP deactivates a user.
      security:
      - bearerAuth: []
      requestBody:
        required: true
        content:
          application/json:
            schema:
              type: object
              additionalProperties: true
              description: SCIM 2.0 resource or ListResponse, served as `application/scim+json`.
      parameters:
      - name: id
        in: path
        required: true
        schema:
          type: string
        description: SCIM user id.
    delete:
      operationId: scimDeleteUser
      summary: Delete a user (SCIM)
      tags:
      - SCIM v2
      responses:
        '204':
          description: No content.
        '400':
          description: Bad request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '403':
          description: Forbidden
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '404':
          description: Not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '429':
          description: Rate limited
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
      description: Deprovisions the member — the organization-access consequences of `DELETE /member/{userId}` apply.
      security:
      - bearerAuth: []
      parameters:
      - name: id
        in: path
        required: true
        schema:
          type: string
        description: SCIM user id.
  /scim/v2/Groups:
    get:
      operationId: scimListGroups
      summary: List groups (SCIM)
      tags:
      - SCIM v2
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                type: object
                additionalProperties: true
                description: SCIM 2.0 resource or ListResponse, served as `application/scim+json`.
        '400':
          description: Bad request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '403':
          description: Forbidden
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '404':
          description: Not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '429':
          description: Rate limited
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
      description: Lists the groups the IdP has pushed. Paginates with SCIM’s `startIndex` and `count`.
      security:
      - bearerAuth: []
      parameters:
      - name: filter
        in: query
        required: false
        description: SCIM filter expression, e.g. `userName eq "a@b.com"`.
        schema:
          type: string
      - name: startIndex
        in: query
        required: false
        description: 1-based index of the first result (SCIM pagination, not this API's cursors).
        schema:
          type: integer
          default: 1
      - name: count
        in: query
        required: false
        description: Page size. Defaults to 100; the service advertises a maximum of 200.
        schema:
          type: integer
          default: 100
    post:
      operationId: scimCreateGroup
      summary: Create a group (SCIM)
      tags:
      - SCIM v2
      responses:
        '201':
          description: Created
          content:
            application/json:
              schema:
                type: object
                additionalProperties: true
                description: SCIM 2.0 resource or ListResponse, served as `application/scim+json`.
        '400':
          description: Bad request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '403':
          description: Forbidden
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '404':
          description: Not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '429':
          description: Rate limited
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
      description: Groups created here are what `GET /scim-group` lists and what group mappings point at.
      security:
      - bearerAuth: []
      requestBody:
        required: true
        content:
          application/json:
            schema:
              type: object
              additionalProperties: true
              description: SCIM 2.0 resource or ListResponse, served as `application/scim+json`.
  /scim/v2/Groups/{id}:
    get:
      operationId: scimGetGroup
      summary: Get a group (SCIM)
      tags:
      - SCIM v2
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                type: object
                additionalProperties: true
                description: SCIM 2.0 resource or ListResponse, served as `application/scim+json`.
        '400':
          description: Bad request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '403':
          description: Forbidden
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '404':
          description: Not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '429':
          description: Rate limited
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
      description: Returns one group by SCIM id, with its members.
      security:
      - bearerAuth: []
      parameters:
      - name: id
        in: path
        required: true
        schema:
          type: string
        description: SCIM group id.
    put:
      operationId: scimReplaceGroup
      summary: Replace a group (SCIM)
      tags:
      - SCIM v2
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                type: object
                additionalProperties: true
                description: SCIM 2.0 resource or ListResponse, served as `application/scim+json`.
        '400':
          description: Bad request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '403':
          description: Forbidden
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '404':
          description: Not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '429':
          description: Rate limited
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
      description: REPLACES the group, membership included. Membership changes recompute mapped roles for everyone affected.
      security:
      - bearerAuth: []
      requestBody:
        required: true
        content:
          application/json:
            schema:
              type: object
              additionalProperties: true
              description: SCIM 2.0 resource or ListResponse, served as `application/scim+json`.
      parameters:
      - name: id
        in: path
        required: true
        schema:
          type: string
        description: SCIM group id.
    patch:
      operationId: scimPatchGroup
      summary: Update a group (SCIM)
      tags:
      - SCIM v2
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                type: object
                additionalProperties: true
                description: SCIM 2.0 resource or ListResponse, served as `application/scim+json`.
        '400':
          description: Bad request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '403':
          description: Forbidden
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '404':
          description: Not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '429':
          description: Rate limited
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
      description: SCIM PATCH operations, typically adding or removing members.
      security:
      - bearerAuth: []
      requestBody:
        required: true
        content:
          application/json:
            schema:
              type: object
              additionalProperties: true
              description: SCIM 2.0 resource or ListResponse, served as `application/scim+json`.
      parameters:
      - name: id
        in: path
        required: true
        schema:
          type: string
        description: SCIM group id.
    delete:
      operationId: scimDeleteGroup
      summary: Delete a group (SCIM)
      tags:
      - SCIM v2
      responses:
        '204':
          description: No content.
        '400':
          description: Bad request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '403':
          description: Forbidden
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '404':
          description: Not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '429':
          description: Rate limited
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
      description: Members lose any roles granted through a mapping onto this group; manually assigned roles are unaffected.
      security:
      - bearerAuth: []
      parameters:
      - name: id
        in: path
        required: true
        schema:
          type: string
        description: SCIM group id.
components:
  schemas:
    Error:
      type: object
      required:
      - error
      description: The Elaichi error envelope. The MCP OAuth endpoints under `/oauth` are the exception — they return RFC 6749 errors instead (see `OAuthError`).
      properties:
        error:
          type: object
          required:
          - message
          - code
          properties:
            message:
              type: string
              description: Human-readable. 5xx messages are deliberately generic.
            code:
              type: string
              description: Stable machine-readable code, e.g. `not_found`, `subscription_required`.
            details:
              description: Structured detail for codes that carry one, e.g. `toolboxes_need_resolution`.
            feature:
              type: string
              description: The gated feature, on entitlement failures.
            plan:
              type:
              - string
              - 'null'
              enum:
              - personal
              - gold
              - black
              - null
          additionalProperties: true
  securitySchemes:
    bearerAuth:
      type: http
      scheme: bearer
      bearerFormat: session or API token
      description: '`Authorization: Bearer <token>` with an org-scoped API token (`elch_{org_id}_{64 hex}`), created in the Elaichi app under Settings → API tokens. The Elaichi app itself signs in with a session cookie, which is also accepted but is not meant for integrations. Two other credential families exist and are NOT interchangeable with this one: an MCP OAuth access token (`POST /mcp` only) and a SCIM token (`/scim/v2/*` only).'
    mcpOAuth:
      type: oauth2
      description: MCP OAuth access token, used only by `POST /mcp` — not interchangeable with `bearerAuth`. Discovered per RFC 9728/8414 at `/.well-known/oauth-protected-resource` and `/.well-known/oauth-authorization-server`.
      flows:
        authorizationCode:
          authorizationUrl: https://api.elaichi.ai/oauth/authorize
          tokenUrl: https://api.elaichi.ai/oauth/token
          scopes:
            mcp:read: Anything you can already see in Elaichi. Never secret values. It can also ask an admin for access to something restricted for you.
            mcp:write: Create and change teams, roles, toolboxes, templates and connections, and share access.
            mcp:destructive: Permanently delete data and remove access in Elaichi. This cannot be undone.
            mcp:tools: Run tools from the toolboxes you choose next, deleting in your connected apps included. It can also ask an admin for access to something restricted for you.
            openid: That you are signed in, and the user ID we use for you. Nothing else.
            email: Your email address, and whether it is verified. Apps use this to check your domain.