# foxauth-dev API

**Canonical:** https://apis.io/apis/foxauth-dev/foxauth-dev-api/  
**Provider:** foxauth-dev — https://apis.io/providers/foxauth-dev/  
**Documentation:** https://foxauth.dev/docs/reference/admin-api

foxauth-dev API is one of 2 APIs that [foxauth-dev](https://apis.io/providers/foxauth-dev/) publishes on the [APIs.io](https://apis.io/) network, described by a machine-readable OpenAPI specification. This API exposes 6 JSON Schema definitions. The published artifact set on APIs.io includes an OpenAPI specification and 6 JSON Schemas.

foxauth-dev API as documented publicly: 91 operations. Contract generated from the documentation by API Evangelist (2026-11-08); not the provider's own document.

## Operations (60 of 91)

| Method | Path | Summary |
|---|---|---|
| GET | `/admin/api/activity` | List every project on the instance with its monthly active users, including the default and administrators projects and deleted projects. |
| GET | `/admin/api/administrators/applications` | The applications a super administrator registered in the administrators' project so internal tools can sign the instance's administrators in: each one's name... |
| POST | `/admin/api/administrators/applications` | Client Console-only; see below. |
| DELETE | `/admin/api/administrators/applications/{clientid}` | Client Console-only; see below. |
| GET | `/admin/api/administrators/applications/{clientid}` | One application of the administrators' project, as administrator_application_list describes it. |
| PATCH | `/admin/api/administrators/applications/{clientid}` | Client Console-only; see below. |
| POST | `/admin/api/administrators/applications/{clientid}/secret` | Client Console-only; see below. |
| GET | `/admin/api/admins` | The administrator accounts of this instance, each marked when it is a super administrator. |
| POST | `/admin/api/admins` | AdminUser Create an administrator account. |
| DELETE | `/admin/api/admins/{id}` | Deactivate an administrator: the account is kept but can no longer sign in. |
| PATCH | `/admin/api/admins/{id}` | Activate or deactivate an administrator, or correct their email address. |
| POST | `/admin/api/admins/{id}/sign-out` | Sign an administrator out everywhere, ending all console sessions and revoking tokens. |
| DELETE | `/admin/api/admins/{id}/super-admin` | Withdraw super‑administrator status from an administrator. |
| POST | `/admin/api/admins/{id}/super-admin` | Make an administrator a super administrator — a member of Super administrators, with authority over the whole instance. |
| DELETE | `/admin/api/admins/{id}/totp` | Reset an administrator's authenticator (TOTP), clearing enrolment and signing them out. |
| GET | `/admin/api/admins/sign-in-readiness` | What turning password sign-in to the console off would do: whether it is on, how many super administrators could still sign in through an identity provider o... |
| GET | `/admin/api/audit` | Admin API |
| GET | `/admin/api/errors` | Admin API |
| GET | `/admin/api/errors/{id}` | Admin API |
| GET | `/admin/api/errors/reference/{reference}` | Admin API |
| POST | `/admin/api/invitations/accept` | Team invitation acceptance (console‑only). |
| GET | `/admin/api/jwks` | Admin API |
| GET | `/admin/api/keyring` | Whether stored secrets are encrypted at rest with the instance keyring, key usage stats and which secrets cannot be opened; never returns key material. |
| POST | `/admin/api/mcp/clients` | McpClientPermission Console-only; see below. |
| DELETE | `/admin/api/mcp/clients/{entryid}` | McpClientPermission Console-only; see below. |
| PATCH | `/admin/api/mcp/clients/{entryid}` | McpClientPermission Console-only; see below. |
| GET | `/admin/api/me` | The administrator this agent is acting as: their id, email, whether they are a super administrator, and the teams they belong to. |
| GET | `/admin/api/plans` | The plan catalogue: each plan’s limits, features, default status and project count. |
| GET | `/admin/api/projects` | The projects: every one for a super-administrator, otherwise those the caller manages. |
| POST | `/admin/api/projects` | Create a project. |
| DELETE | `/admin/api/projects/{id}` | Delete a project (console‑only). |
| GET | `/admin/api/projects/{id}` | One project: its name, owning team, and registration and verification settings. |
| PATCH | `/admin/api/projects/{id}` | Change a project's name, registration, verification and second‑factor settings. |
| GET | `/admin/api/projects/{id}/activity` | Read a project's monthly active users: this month so far, each day of the month and the previous 12 months. |
| POST | `/admin/api/projects/{id}/address` | Move a project to a different address (path, subdomain or host). |
| GET | `/admin/api/projects/{id}/clients` | The OAuth clients (applications) of a project: those an administrator created and those that registered themselves at the project's own address. |
| POST | `/admin/api/projects/{id}/clients` | Client Register an OAuth client (application) in a project; it signs that project’s people in for its whole life, and no operation moves it to another. |
| DELETE | `/admin/api/projects/{id}/clients/{clientid}` | Client Permanently delete an OAuth client and revoke what was issued to it. |
| GET | `/admin/api/projects/{id}/clients/{clientid}` | One OAuth client: redirect URIs, grant types, auth method, and other registered metadata. |
| PATCH | `/admin/api/projects/{id}/clients/{clientid}` | Client Change a client's registered metadata — redirect URIs, grant types, and the rest. |
| POST | `/admin/api/projects/{id}/clients/{clientid}/secret` | Client Issue a new secret for a confidential client and invalidate the old one. |
| GET | `/admin/api/projects/{id}/connected-services` | The services a project lets its people connect their accounts at (Google, GitHub, Slack, Microsoft, an OpenID Connect issuer or a plain OAuth 2.0 provider), ... |
| GET | `/admin/api/projects/{id}/connected-services/{serviceid}` | One connected service of a project, with its scopes, `connectedAccounts` and `callbackUri`. |
| GET | `/admin/api/projects/{id}/federation` | The upstream identity providers configured on a project, in the order their buttons appear on its sign‑in page. |
| GET | `/admin/api/projects/{id}/federation/{providerid}` | One upstream identity provider of a project, with what it takes to run it. |
| GET | `/admin/api/projects/{id}/groups` | A project's groups of end users, each with its member count and, for one a SCIM directory manages, the connection that owns it. |
| GET | `/admin/api/projects/{id}/groups/{gid}` | One group of the project's end users: its name, external id and owning connection if a directory manages it, and its member count. |
| GET | `/admin/api/projects/{id}/groups/{gid}/members` | A page of a group's members (id, email, userName), up to 1,000 at a time, with the total. |
| GET | `/admin/api/projects/{id}/keys` | Admin API |
| GET | `/admin/api/projects/{id}/outside-authorization-servers` | The outside authorization servers a project vouches for its people to with ID‑JAGs (MCP enterprise‑managed authorization): each server's issuer, which of the... |
| GET | `/admin/api/projects/{id}/outside-authorization-servers/{serverid}` | One outside authorization server connection of a project. |
| PUT | `/admin/api/projects/{id}/owner` | Move a project to another team. |
| PUT | `/admin/api/projects/{id}/plan` | Move a tenant’s project to another plan. |
| GET | `/admin/api/projects/{id}/provisioning-connections` | The SCIM provisioning connections of a project, each with its SCIM base URL, token endpoint, client id, managed‑user count and warnings. |
| GET | `/admin/api/projects/{id}/provisioning-connections/{connectionid}` | One SCIM provisioning connection: everything a directory administrator needs to configure it, which credentials it holds, which kinds of credential this inst... |
| GET | `/admin/api/projects/{id}/provisioning-connections/{connectionid}/hold` | Whom a SCIM provisioning connection held by its mass‑deprovisioning guard has been refused the deactivation or deletion of. |
| POST | `/admin/api/projects/{id}/purge` | Purge a project scheduled for deletion (console‑only). |
| GET | `/admin/api/projects/{id}/resources` | Every protected resource (API) declared in a project, sorted by identifier: the audiences this server mints tokens for on that project's behalf, with the sco... |
| POST | `/admin/api/projects/{id}/resources` | Admin API |
| DELETE | `/admin/api/projects/{id}/resources/{resourceid}` | Admin API |

…and 31 more operations. They are listed in full on the page.

## Machine-readable artifacts (7)

- **OpenAPI** — https://artifacts.apis.io/foxauth-dev/openapi/_ae-authored/foxauth-dev-openapi-generated.yml
- **JSONSchema** — https://artifacts.apis.io/foxauth-dev/json-schema/foxauth-dev-get-admin-api-projects-id-federation-providerid-response-schema.json
- **JSONSchema** — https://artifacts.apis.io/foxauth-dev/json-schema/foxauth-dev-patch-admin-api-projects-id-request-schema.json
- **JSONSchema** — https://artifacts.apis.io/foxauth-dev/json-schema/foxauth-dev-get-admin-api-projects-response-schema.json
- **JSONSchema** — https://artifacts.apis.io/foxauth-dev/json-schema/foxauth-dev-get-admin-api-projects-id-summary-response-schema.json
- **JSONSchema** — https://artifacts.apis.io/foxauth-dev/json-schema/foxauth-dev-get-admin-api-projects-id-response-schema.json
- **JSONSchema** — https://artifacts.apis.io/foxauth-dev/json-schema/foxauth-dev-get-admin-api-projects-id-users-uid-connected-accounts-response-schema.json

## Other foxauth-dev APIs (1)

- [FoxAuth](https://apis.io/apis/foxauth-dev/foxauth/)

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/apis/foxauth-dev/foxauth-dev-api/). The API's provider profile, Kin Score and agent-readiness rating are at https://apis.io/providers/foxauth-dev/.