foxauth-dev

foxauth-dev API

foxauth-dev API as documented publicly: 91 operations. Contract generated from the documentation by API Evangelist (2026-11-08); not the provider's own document.

GitHub OpenAPI

Operations 91

GET /admin/api/activity List every project on the instance with its monthly active users, including the default and administrators projects and deleted projects. #
GET /admin/api/administrators/applications The applications a super administrator registered in the administrators' project so internal tools can sign the instance's administrators in: each one's name, client id, redirect a #
POST /admin/api/administrators/applications Client Console-only; see below. #
DELETE /admin/api/administrators/applications/{clientid} Client Console-only; see below. #
GET /admin/api/administrators/applications/{clientid} One application of the administrators' project, as administrator_application_list describes it. #
PATCH /admin/api/administrators/applications/{clientid} Client Console-only; see below. #
POST /admin/api/administrators/applications/{clientid}/secret Client Console-only; see below. #
GET /admin/api/admins The administrator accounts of this instance, each marked when it is a super administrator. #
POST /admin/api/admins AdminUser Create an administrator account. #
DELETE /admin/api/admins/{id} Deactivate an administrator: the account is kept but can no longer sign in. #
PATCH /admin/api/admins/{id} Activate or deactivate an administrator, or correct their email address. #
POST /admin/api/admins/{id}/sign-out Sign an administrator out everywhere, ending all console sessions and revoking tokens. #
DELETE /admin/api/admins/{id}/super-admin Withdraw super‑administrator status from an administrator. #
POST /admin/api/admins/{id}/super-admin Make an administrator a super administrator — a member of Super administrators, with authority over the whole instance. #
DELETE /admin/api/admins/{id}/totp Reset an administrator's authenticator (TOTP), clearing enrolment and signing them out. #
GET /admin/api/admins/sign-in-readiness What turning password sign-in to the console off would do: whether it is on, how many super administrators could still sign in through an identity provider of the Administrators pr #
GET /admin/api/audit Admin API #
GET /admin/api/errors Admin API #
GET /admin/api/errors/{id} Admin API #
GET /admin/api/errors/reference/{reference} Admin API #
POST /admin/api/invitations/accept Team invitation acceptance (console‑only). #
GET /admin/api/jwks Admin API #
GET /admin/api/keyring Whether stored secrets are encrypted at rest with the instance keyring, key usage stats and which secrets cannot be opened; never returns key material. #
POST /admin/api/mcp/clients McpClientPermission Console-only; see below. #
DELETE /admin/api/mcp/clients/{entryid} McpClientPermission Console-only; see below. #
PATCH /admin/api/mcp/clients/{entryid} McpClientPermission Console-only; see below. #
GET /admin/api/me The administrator this agent is acting as: their id, email, whether they are a super administrator, and the teams they belong to. #
GET /admin/api/plans The plan catalogue: each plan’s limits, features, default status and project count. #
GET /admin/api/projects The projects: every one for a super-administrator, otherwise those the caller manages. #
POST /admin/api/projects Create a project. #
DELETE /admin/api/projects/{id} Delete a project (console‑only). #
GET /admin/api/projects/{id} One project: its name, owning team, and registration and verification settings. #
PATCH /admin/api/projects/{id} Change a project's name, registration, verification and second‑factor settings. #
GET /admin/api/projects/{id}/activity Read a project's monthly active users: this month so far, each day of the month and the previous 12 months. #
POST /admin/api/projects/{id}/address Move a project to a different address (path, subdomain or host). #
GET /admin/api/projects/{id}/clients The OAuth clients (applications) of a project: those an administrator created and those that registered themselves at the project's own address. #
POST /admin/api/projects/{id}/clients Client Register an OAuth client (application) in a project; it signs that project’s people in for its whole life, and no operation moves it to another. #
DELETE /admin/api/projects/{id}/clients/{clientid} Client Permanently delete an OAuth client and revoke what was issued to it. #
GET /admin/api/projects/{id}/clients/{clientid} One OAuth client: redirect URIs, grant types, auth method, and other registered metadata. #
PATCH /admin/api/projects/{id}/clients/{clientid} Client Change a client's registered metadata — redirect URIs, grant types, and the rest. #
POST /admin/api/projects/{id}/clients/{clientid}/secret Client Issue a new secret for a confidential client and invalidate the old one. #
GET /admin/api/projects/{id}/connected-services The services a project lets its people connect their accounts at (Google, GitHub, Slack, Microsoft, an OpenID Connect issuer or a plain OAuth 2.0 provider), each with `connectedAcc #
GET /admin/api/projects/{id}/connected-services/{serviceid} One connected service of a project, with its scopes, `connectedAccounts` and `callbackUri`. #
GET /admin/api/projects/{id}/federation The upstream identity providers configured on a project, in the order their buttons appear on its sign‑in page. #
GET /admin/api/projects/{id}/federation/{providerid} One upstream identity provider of a project, with what it takes to run it. #
GET /admin/api/projects/{id}/groups A project's groups of end users, each with its member count and, for one a SCIM directory manages, the connection that owns it. #
GET /admin/api/projects/{id}/groups/{gid} One group of the project's end users: its name, external id and owning connection if a directory manages it, and its member count. #
GET /admin/api/projects/{id}/groups/{gid}/members A page of a group's members (id, email, userName), up to 1,000 at a time, with the total. #
GET /admin/api/projects/{id}/keys Admin API #
GET /admin/api/projects/{id}/outside-authorization-servers The outside authorization servers a project vouches for its people to with ID‑JAGs (MCP enterprise‑managed authorization): each server's issuer, which of the project's applications #
GET /admin/api/projects/{id}/outside-authorization-servers/{serverid} One outside authorization server connection of a project. #
PUT /admin/api/projects/{id}/owner Move a project to another team. #
PUT /admin/api/projects/{id}/plan Move a tenant’s project to another plan. #
GET /admin/api/projects/{id}/provisioning-connections The SCIM provisioning connections of a project, each with its SCIM base URL, token endpoint, client id, managed‑user count and warnings. #
GET /admin/api/projects/{id}/provisioning-connections/{connectionid} One SCIM provisioning connection: everything a directory administrator needs to configure it, which credentials it holds, which kinds of credential this instance would issue it now #
GET /admin/api/projects/{id}/provisioning-connections/{connectionid}/hold Whom a SCIM provisioning connection held by its mass‑deprovisioning guard has been refused the deactivation or deletion of. #
POST /admin/api/projects/{id}/purge Purge a project scheduled for deletion (console‑only). #
GET /admin/api/projects/{id}/resources Every protected resource (API) declared in a project, sorted by identifier: the audiences this server mints tokens for on that project's behalf, with the scopes each recognises, ho #
POST /admin/api/projects/{id}/resources Admin API #
DELETE /admin/api/projects/{id}/resources/{resourceid} Admin API #
GET /admin/api/projects/{id}/resources/{resourceid} One declared protected resource. #
PATCH /admin/api/projects/{id}/resources/{resourceid} Admin API #
GET /admin/api/projects/{id}/resources/{resourceid}/vouching Whether a declared resource's own protected resource metadata currently vouches for it — describes this identifier and lists the issuer its tokens carry — found by the MCP discover #
POST /admin/api/projects/{id}/restore Bring back a project that is scheduled for deletion. #
GET /admin/api/projects/{id}/summary Count what a project holds, computed when asked. #
GET /admin/api/projects/{id}/users A page of the end‑user accounts held in one project, ordered by email. #
POST /admin/api/projects/{id}/users Create an end‑user account in a project. #
GET /admin/api/projects/{id}/users/{uid} One end‑user of a project, as a row of project_user_list. #
GET /admin/api/projects/{id}/users/{uid}/connected-accounts The accounts one end‑user has connected at the project's connected services, with service, provider account id, label, scopes, missingScopes, connection time and status. #
GET /admin/api/projects/{id}/users/{uid}/identities The upstream identities linked to one end‑user account, by provider. #
GET /admin/api/projects/{id}/users/{uid}/sessions The applications an end‑user is signed in to in this project. #
GET /admin/api/provisioning-holds Every SCIM provisioning connection held by its mass‑deprovisioning guard, across the projects project_list shows the caller. #
GET /admin/api/scope The console's active team and the teams available to switch to. #
GET /admin/api/settings The editable server settings, with the catalogue describing each one and its current value. #
GET /admin/api/settings/attack-reports Whether this server reports attack addresses to FoxTrust each hour, why not if it does not, last delivery time and the exact report. #
GET /admin/api/settings/ipsie-sl1/readiness What turning the IPSIE SL1 profile on would need and refuse, without turning it on: the blocking settings, issuers lacking PS256 keys, and affected applications. #
GET /admin/api/settings/sentry The Sentry integration settings; the ingestion credential is never returned, only whether one is set. #
GET /admin/api/settings/smtp The outbound mail settings; the password is never returned, only whether one is set. #
GET /admin/api/settings/telemetry Whether this server sends its daily anonymous usage report, why not if it does not, its instance identifier, last delivery time and the exact report. #
POST /admin/api/setup Admin API #
GET /admin/api/teams The teams this administrator belongs to (every team, for a super administrator). #
POST /admin/api/teams Create a team. The administrator this agent acts for becomes its first owner. #
DELETE /admin/api/teams/{id} Delete a team (console‑only). #
GET /admin/api/teams/{id} One team: its name, kind, and the administrators in it — each with `role`, `email` and `active`. #
PATCH /admin/api/teams/{id} Rename a team. #
GET /admin/api/teams/{id}/invitations Pending invitations into a team. #
POST /admin/api/teams/{id}/invitations Invite somebody into a team by email, as an owner or a plain member. #
DELETE /admin/api/teams/{id}/invitations/{inviteid} Withdraw a pending invitation before it is accepted. #
POST /admin/api/teams/{id}/members Add an existing administrator to a team as an owner or plain member (super‑admin only). #
DELETE /admin/api/teams/{id}/members/{userid} Remove an administrator from a team. #
PATCH /admin/api/teams/{id}/members/{userid} Promote a member to owner or demote an owner to member. #

Specifications

⚙
OpenAPI
https://artifacts.apis.io/foxauth-dev/openapi/_ae-authored/foxauth-dev-openapi-generated.yml

Schemas & Data

📊
JSONSchema
https://artifacts.apis.io/foxauth-dev/json-schema/foxauth-dev-get-admin-api-projects-id-federation-providerid-response-schema.json
📊
JSONSchema
https://artifacts.apis.io/foxauth-dev/json-schema/foxauth-dev-patch-admin-api-projects-id-request-schema.json
📊
JSONSchema
https://artifacts.apis.io/foxauth-dev/json-schema/foxauth-dev-get-admin-api-projects-response-schema.json
📊
JSONSchema
https://artifacts.apis.io/foxauth-dev/json-schema/foxauth-dev-get-admin-api-projects-id-summary-response-schema.json
📊
JSONSchema
https://artifacts.apis.io/foxauth-dev/json-schema/foxauth-dev-get-admin-api-projects-id-response-schema.json
📊
JSONSchema
https://artifacts.apis.io/foxauth-dev/json-schema/foxauth-dev-get-admin-api-projects-id-users-uid-connected-accounts-response-schema.json

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/foxauth-dev:foxauth-dev-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

foxauth-dev-openapi-generated.yml Raw ↑ 
openapi: 3.1.0
info:
  title: foxauth-dev API
  version: '2026-11-08'
  description: 'GENERATED FROM DOCUMENTATION by API Evangelist on 2026-11-08: 91 operation(s) read from 1 public documentation page(s) (each operation
    names its page in x-source). This is not the provider''s published contract; foxauth-dev has published no machine-readable contract that the
    pipeline could find. Engine: local.'
  x-evidence-tiers:
    code-example: 0
    documentation: 91
    pages-with-code: 0
    pages-read: 1
  x-generated-from: documentation
  x-provenance: generated
  x-authored-by: API Evangelist
  x-generated: '2026-11-08'
  x-generator: generate-contract-from-docs.py
  x-engine: local
  x-sources:


# --- truncated at 32 KB (70 KB total) ---
# Full source: https://artifacts.apis.io/foxauth-dev/openapi/_ae-authored/foxauth-dev-openapi-generated.yml