grafomem-com SSO API

OAuth2/OIDC single sign-on

Operations 8

GET /v1/portal/sso/providers List Providers #
GET /v1/portal/sso/authorize Authorize #
GET /v1/portal/sso/callback Callback #
POST /v1/portal/sso/configure Configure Provider #
GET /v1/portal/sso/saml/metadata Saml Metadata #
POST /v1/portal/sso/saml/configure Configure Saml #
GET /v1/portal/sso/saml/login Saml Login #
POST /v1/portal/sso/saml/acs Saml Acs #

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API
curl "https://apis.io/api/v1/apis/grafomem-com:grafomem-com-sso-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

grafomem-com-sso-api-openapi.yml Raw ↑
openapi: 3.2.0
info:
  title: GRAFOMEM Cloud SSO API
  description: GMP-conformant governed agent memory platform. Provides vector-backed memory stores, multi-agent orchestration, decision trail audit logging, erasure proof certificates, governance policy evaluation, regulatory reports, webhook alerts, SSO/OIDC, and real-time SSE streaming.
  version: 1.9.0
tags:
- name: SSO
  description: OAuth2/OIDC single sign-on
paths:
  /v1/portal/sso/providers:
    get:
      tags:
      - SSO
      summary: List Providers
      description: List available SSO providers.
      operationId: list_providers_v1_portal_sso_providers_get
      responses:
        '200':
          description: Successful Response
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SSOProviderListResponse'
  /v1/portal/sso/authorize:
    get:
      tags:
      - SSO
      summary: Authorize
      description: 'Initiate an OAuth2/OIDC authorization flow.


        Redirects the user to the identity provider''s login page.'
      operationId: authorize_v1_portal_sso_authorize_get
      parameters:
      - name: provider
        in: query
        required: true
        schema:
          type: string
          title: Provider
      responses:
        '200':
          description: Successful Response
          content:
            application/json:
              schema: {}
        '422':
          description: Validation Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/HTTPValidationError'
  /v1/portal/sso/callback:
    get:
      tags:
      - SSO
      summary: Callback
      description: 'Handle the OAuth2 callback from the identity provider.


        Exchanges the authorization code for tokens, resolves the user,

        and returns a GRAFOMEM JWT. For browser flows, redirects to the

        portal with the token in query parameters.'
      operationId: callback_v1_portal_sso_callback_get
      parameters:
      - name: code
        in: query
        required: true
        schema:
          type: string
          title: Code
      - name: state
        in: query
        required: true
        schema:
          type: string
          title: State
      responses:
        '200':
          description: Successful Response
          content:
            application/json:
              schema: {}
        '422':
          description: Validation Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/HTTPValidationError'
  /v1/portal/sso/configure:
    post:
      tags:
      - SSO
      summary: Configure Provider
      description: 'Configure an SSO provider (admin operation).


        Requires authentication via Bearer JWT token. Stores the OAuth

        client credentials for the specified provider.'
      operationId: configure_provider_v1_portal_sso_configure_post
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/ConfigureProviderRequest'
        required: true
      responses:
        '201':
          description: Successful Response
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SSOConfiguredResponse'
        '422':
          description: Validation Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/HTTPValidationError'
  /v1/portal/sso/saml/metadata:
    get:
      tags:
      - SSO
      summary: Saml Metadata
      description: 'Download SP metadata XML for SAML 2.0 configuration.


        This endpoint returns the GRAFOMEM Service Provider metadata

        that the enterprise IdP admin needs to import.'
      operationId: saml_metadata_v1_portal_sso_saml_metadata_get
      responses:
        '200':
          description: Successful Response
          content:
            application/json:
              schema: {}
  /v1/portal/sso/saml/configure:
    post:
      tags:
      - SSO
      summary: Configure Saml
      description: 'Configure a SAML 2.0 Identity Provider (admin operation).


        Accepts either ``metadata_url`` (auto-discovery) or

        ``metadata_xml`` (raw XML paste). Requires authentication.'
      operationId: configure_saml_v1_portal_sso_saml_configure_post
      parameters:
      - name: metadata_url
        in: query
        required: false
        schema:
          type: string
          default: ''
          title: Metadata Url
      - name: metadata_xml
        in: query
        required: false
        schema:
          type: string
          default: ''
          title: Metadata Xml
      - name: sp_entity_id
        in: query
        required: false
        schema:
          type: string
          default: ''
          title: Sp Entity Id
      responses:
        '201':
          description: Successful Response
          content:
            application/json:
              schema: {}
        '422':
          description: Validation Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/HTTPValidationError'
  /v1/portal/sso/saml/login:
    get:
      tags:
      - SSO
      summary: Saml Login
      description: 'Initiate a SAML 2.0 SP-initiated SSO flow.


        Redirects the user to the configured IdP login page.'
      operationId: saml_login_v1_portal_sso_saml_login_get
      responses:
        '200':
          description: Successful Response
          content:
            application/json:
              schema: {}
  /v1/portal/sso/saml/acs:
    post:
      tags:
      - SSO
      summary: Saml Acs
      description: 'SAML 2.0 Assertion Consumer Service (ACS).


        Receives the SAML Response via HTTP-POST binding from the IdP.

        Extracts the user identity and issues a GRAFOMEM JWT.'
      operationId: saml_acs_v1_portal_sso_saml_acs_post
      responses:
        '200':
          description: Successful Response
          content:
            application/json:
              schema: {}
components:
  schemas:
    HTTPValidationError:
      properties:
        detail:
          items:
            $ref: '#/components/schemas/ValidationError'
          type: array
          title: Detail
      type: object
      title: HTTPValidationError
    SSOConfiguredResponse:
      properties:
        config_id:
          type: string
          title: Config Id
        provider:
          type: string
          title: Provider
        enabled:
          type: boolean
          title: Enabled
          default: true
        created_at:
          anyOf:
          - type: string
          - type: 'null'
          title: Created At
      type: object
      required:
      - config_id
      - provider
      title: SSOConfiguredResponse
    ConfigureProviderRequest:
      properties:
        provider:
          type: string
          title: Provider
        client_id:
          type: string
          title: Client Id
        client_secret:
          type: string
          title: Client Secret
        issuer_url:
          type: string
          title: Issuer Url
          default: ''
      type: object
      required:
      - provider
      - client_id
      - client_secret
      title: ConfigureProviderRequest
    ValidationError:
      properties:
        loc:
          items:
            anyOf:
            - type: string
            - type: integer
          type: array
          title: Location
        msg:
          type: string
          title: Message
        type:
          type: string
          title: Error Type
        input:
          title: Input
        ctx:
          type: object
          title: Context
      type: object
      required:
      - loc
      - msg
      - type
      title: ValidationError
    SSOProviderListResponse:
      properties:
        providers:
          items:
            $ref: '#/components/schemas/SSOProviderInfo'
          type: array
          title: Providers
          default: []
      type: object
      title: SSOProviderListResponse
    SSOProviderInfo:
      properties:
        provider:
          type: string
          title: Provider
        name:
          type: string
          title: Name
          default: ''
        enabled:
          type: boolean
          title: Enabled
          default: true
      type: object
      required:
      - provider
      title: SSOProviderInfo