Frontegg

Frontegg Personal Tokens API

The Personal Tokens API from Frontegg — 4 operation(s) for personal tokens.

GitHub OpenAPI
Business capability
Identity & Access Management BC-620.20

Operations 6

POST /resources/users/access-tokens/v1 Create User Access Token #
GET /resources/users/access-tokens/v1 Get User Access Tokens #
DELETE /resources/users/access-tokens/v1/{id} Delete User Access Token by Token ID #
POST /resources/users/api-tokens/v1 Create User Client Credentials Token #
GET /resources/users/api-tokens/v1 Get User Client Credentials Tokens #
DELETE /resources/users/api-tokens/v1/{id} Delete User Client Credentials Token by Token ID #

Documentation

📖
Documentation
https://developers.frontegg.com/ciam/api/identity
📖
APIReference
https://developers.frontegg.com/ciam/api/identity
📖
Documentation
https://developers.frontegg.com/ciam/api/tenants
📖
Documentation
https://developers.frontegg.com/ciam/api/team
📖
Documentation
https://developers.frontegg.com/ciam/api/scim
📖
Documentation
https://developers.frontegg.com/ciam/api/entitlements
📖
Documentation
https://developers.frontegg.com/ciam/api/agent
📖
Documentation
https://developers.frontegg.com/ciam/api/applications
📖
Documentation
https://developers.frontegg.com/ciam/api/audits
📖
Documentation
https://developers.frontegg.com/ciam/api/overview

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/frontegg/refs/heads/main/openapi/frontegg-personal-tokens-api-openapi.yml

Other Resources

🔗
SpectralRules
https://raw.githubusercontent.com/api-evangelist/frontegg/refs/heads/main/rules/frontegg-identity-rules.yml
🔗
SpectralRules
https://raw.githubusercontent.com/api-evangelist/frontegg/refs/heads/main/rules/frontegg-tenants-rules.yml
🔗
SpectralRules
https://raw.githubusercontent.com/api-evangelist/frontegg/refs/heads/main/rules/frontegg-sso-rules.yml
🔗
SpectralRules
https://raw.githubusercontent.com/api-evangelist/frontegg/refs/heads/main/rules/frontegg-scim-rules.yml
🔗
SpectralRules
https://raw.githubusercontent.com/api-evangelist/frontegg/refs/heads/main/rules/frontegg-entitlements-rules.yml
🔗
SpectralRules
https://raw.githubusercontent.com/api-evangelist/frontegg/refs/heads/main/rules/frontegg-entitlements-agent-rules.yml
🔗
SpectralRules
https://raw.githubusercontent.com/api-evangelist/frontegg/refs/heads/main/rules/frontegg-applications-rules.yml
🔗
SpectralRules
https://raw.githubusercontent.com/api-evangelist/frontegg/refs/heads/main/rules/frontegg-audits-rules.yml
🔗
SourceCode
https://github.com/frontegg/openapi-public

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/frontegg:frontegg-personal-tokens-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

frontegg-personal-tokens-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: Entitlements Agent (PDP) Personal Tokens API
  description: 'The endpoints in this section pertain to the usage of an Entitlements Agent. When your application or service needs to verify entitlements, it can query the Entitlements Agent directly via HTTP.


    These endpoints can be integrated into any backend framework, enabling you to leverage entitlements for advanced authorization needs.'
  version: '1.0'
tags:
- name: Personal Tokens
  x-displayName: Personal tokens
paths:
  /resources/users/access-tokens/v1:
    servers:
    - url: https://api.frontegg.com/identity
      description: EU Region
    - url: https://api.us.frontegg.com/identity
      description: US Region
    - url: https://api.ca.frontegg.com/identity
      description: CA Region
    - url: https://api.au.frontegg.com/identity
      description: AU Region
    - url: https://{domain}.frontegg.com/identity
      description: Frontegg sub-domain for use with user tokens
      variables:
        domain:
          default: app-xxx
    post:
      operationId: UserAccessTokensV1Controller_createUserAccessToken
      summary: Create User Access Token
      parameters:
      - name: frontegg-tenant-id
        in: header
        description: The account (tenant) ID identifier
        required: true
        schema:
          type: string
      - name: frontegg-user-id
        in: header
        description: The user ID identifier
        required: true
        schema:
          type: string
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/CreateUserAccessTokenRequest'
      responses:
        '201':
          description: ''
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/UserAccessTokenResponse'
      tags:
      - Personal Tokens
      description: Create an access token for a specific user.
      security:
      - bearer: []
    get:
      operationId: UserAccessTokensV1Controller_getUserAccessTokens
      summary: Get User Access Tokens
      parameters:
      - name: frontegg-tenant-id
        in: header
        description: The account (tenant) ID identifier
        required: true
        schema:
          type: string
      - name: frontegg-user-id
        in: header
        description: The user ID identifier
        required: true
        schema:
          type: string
      responses:
        '200':
          description: ''
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/GetUserAccessTokensResponse'
      tags:
      - Personal Tokens
      description: Retrieve all access tokens for a specific user.
      security:
      - bearer: []
  /resources/users/access-tokens/v1/{id}:
    servers:
    - url: https://api.frontegg.com/identity
      description: EU Region
    - url: https://api.us.frontegg.com/identity
      description: US Region
    - url: https://api.ca.frontegg.com/identity
      description: CA Region
    - url: https://api.au.frontegg.com/identity
      description: AU Region
    - url: https://{domain}.frontegg.com/identity
      description: Frontegg sub-domain for use with user tokens
      variables:
        domain:
          default: app-xxx
    delete:
      operationId: UserAccessTokensV1Controller_deleteUserAccessToken
      summary: Delete User Access Token by Token ID
      parameters:
      - name: frontegg-tenant-id
        in: header
        description: The account (tenant) ID identifier
        required: true
        schema:
          type: string
      - name: frontegg-user-id
        in: header
        description: The user ID identifier
        required: true
        schema:
          type: string
      - name: id
        required: true
        in: path
        schema:
          type: string
      responses:
        '200':
          description: ''
      tags:
      - Personal Tokens
      description: Delete a user access token.
      security:
      - bearer: []
  /resources/users/api-tokens/v1:
    servers:
    - url: https://api.frontegg.com/identity
      description: EU Region
    - url: https://api.us.frontegg.com/identity
      description: US Region
    - url: https://api.ca.frontegg.com/identity
      description: CA Region
    - url: https://api.au.frontegg.com/identity
      description: AU Region
    - url: https://{domain}.frontegg.com/identity
      description: Frontegg sub-domain for use with user tokens
      variables:
        domain:
          default: app-xxx
    post:
      operationId: UserApiTokensV1Controller_createTenantApiToken
      summary: Create User Client Credentials Token
      description: Create a user-specific API token.
      parameters:
      - name: frontegg-tenant-id
        in: header
        description: The account (tenant) ID identifier
        required: true
        schema:
          type: string
      - name: frontegg-user-id
        in: header
        description: The user ID identifier
        required: true
        schema:
          type: string
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/CreateUserApiTokenDto'
      responses:
        '201':
          description: ''
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/CreateUserApiTokenResponseDto'
      tags:
      - Personal Tokens
      security:
      - bearer: []
    get:
      operationId: UserApiTokensV1Controller_getApiTokens
      summary: Get User Client Credentials Tokens
      description: Retrieve a user-specific API token.
      parameters:
      - name: frontegg-tenant-id
        in: header
        description: The account (tenant) ID identifier
        required: true
        schema:
          type: string
      - name: frontegg-user-id
        in: header
        description: The user ID identifier
        required: true
        schema:
          type: string
      responses:
        '200':
          description: ''
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/GetUserApiTokensResponseDto'
      tags:
      - Personal Tokens
      security:
      - bearer: []
  /resources/users/api-tokens/v1/{id}:
    servers:
    - url: https://api.frontegg.com/identity
      description: EU Region
    - url: https://api.us.frontegg.com/identity
      description: US Region
    - url: https://api.ca.frontegg.com/identity
      description: CA Region
    - url: https://api.au.frontegg.com/identity
      description: AU Region
    - url: https://{domain}.frontegg.com/identity
      description: Frontegg sub-domain for use with user tokens
      variables:
        domain:
          default: app-xxx
    delete:
      operationId: UserApiTokensV1Controller_deleteApiToken
      summary: Delete User Client Credentials Token by Token ID
      description: Delete a user-specific API token.
      parameters:
      - name: frontegg-tenant-id
        in: header
        description: The account (tenant) ID identifier
        required: true
        schema:
          type: string
      - name: frontegg-user-id
        in: header
        description: The user ID identifier
        required: true
        schema:
          type: string
      - name: id
        required: true
        in: path
        schema:
          type: string
      responses:
        '200':
          description: ''
      tags:
      - Personal Tokens
      security:
      - bearer: []
components:
  schemas:
    GetUserApiTokensResponseDto:
      type: object
      properties:
        clientId:
          type: string
        description:
          type: string
        metadata:
          type: object
          description: Extra data that will be encoded as part of the JWT
        createdAt:
          format: date-time
          type: string
        expires:
          format: date-time
          type: string
      required:
      - clientId
      - description
      - metadata
      - createdAt
    CreateUserApiTokenResponseDto:
      type: object
      properties:
        clientId:
          type: string
        description:
          type: string
        metadata:
          type: object
          description: Extra data that will be encoded as part of the JWT
        createdAt:
          format: date-time
          type: string
        secret:
          type: string
        expires:
          format: date-time
          type: string
      required:
      - clientId
      - description
      - metadata
      - createdAt
      - secret
    GetUserAccessTokensResponse:
      type: object
      properties:
        accessTokens:
          type: array
          items:
            $ref: '#/components/schemas/UserAccessTokenResponse'
      required:
      - accessTokens
    CreateUserApiTokenDto:
      type: object
      properties:
        metadata:
          type: object
          description: Extra data that will be encoded as part of the JWT
        description:
          type: string
        expiresInMinutes:
          type: number
          minimum: 1
          maximum: 5256000
          description: Token expiration time in minutes. In case of undefined, the token won't be expired
    UserAccessTokenResponse:
      type: object
      properties:
        id:
          type: string
        description:
          type: string
        createdAt:
          format: date-time
          type: string
        secret:
          type: string
        expires:
          format: date-time
          type: string
      required:
      - id
      - createdAt
    CreateUserAccessTokenRequest:
      type: object
      properties:
        description:
          type: string
        expiresInMinutes:
          type: number
          minimum: 1
          description: Token expiration time in minutes. In case of undefined, the token won't be expired
  securitySchemes:
    bearer:
      scheme: bearer
      bearerFormat: JWT
      type: http
x-tagGroups:
- name: Entitlements Agent (PDP)
  tags:
  - Entitlements Check
- name: Audits Overview
  tags:
  - Main
  - Metrics
- name: Entitlements Overview
  tags:
  - Plans
  - API Access Control
  - API Access Control Configurations
  - Features
  - Entitlements
  - Feature Flags
  - ReBAC
- name: Authentication and Identity Management
  tags:
  - API token
  - API tokens
  - Account invitations
  - Account invitations settings
  - Account roles
  - Approval Flows
  - Core settings
  - Custom social OAuth provider
  - Data migration
  - Delegation
  - Domain restrictions
  - Email configuration
  - Email templates
  - General
  - IP restrictions
  - Lockout policy
  - M2M tokens
  - MFA
  - MFA configuration
  - MFA settings
  - Password settings
  - Passwordless
  - Permissions
  - Permissions categories
  - Personal tokens
  - Roles
  - SMS
  - SMS configuration
  - SMS templates
  - Sessions configuration
  - Sessions management
  - User emails policy
  - User groups
  - User management
  - Users
  - User pools
  - User sessions
  - Users-applications management
- name: SCIM Provisioning Overview
  tags:
  - SCIM settings
  - SCIM configurations
- name: Single Sign-On Overview
  tags:
  - SAML configurations
  - SSO settings
  - SSO configurations
  - OIDC configurations
- name: Account Management Overview
  tags:
  - Accounts
  - tenants_other
  - Sub-accounts
  - Account settings
  - Account migration
  - Sub-accounts and hierarchy