Graphiant

Graphiant Auth API

The Auth API from Graphiant — 13 operation(s) for auth.

GitHub OpenAPI

Operations 19

1 of 19 operations are conformant: apis.io called them with no credentials and the responses matched this contract. Checked 2026-11-12. how this works · status file

PUT /v1/auth Replace auth #
DELETE /v1/auth Delete auth #
GET /v1/auth Get auth #
PATCH /v1/auth Update auth #
PATCH /v1/auth/mfa Update auth mfa #
DELETE /v1/auth/mfa Delete auth mfa #
POST /v1/auth/mfa Create auth mfa #
GET /v1/auth/mfa/types Get auth mfa types #
PUT /v1/auth/mfa/types Replace auth mfa types #
GET /v1/auth/login/pre Get auth login pre conformant #
GET /v1/auth/login/saml Get auth login saml #
POST /v1/auth/login/callback Create auth login callback #
GET /v1/auth/user Get auth user #
POST /v1/auth/login Create auth login #
POST /v1/auth/login/temp Create auth login temp #
POST /v1/auth/gcs Create auth gcs #
GET /v1/auth/refresh Get auth refresh #
GET /v1/auth/session Get auth session #
GET /v1/auth/session/root Get auth session root #

Documentation

📖
Documentation
https://docs.graphiant.com/docs/graphiant-portal-rest-api
📖
APIReference
https://docs.graphiant.com/apidocs
📖
Authentication
https://artifacts.apis.io/graphiant/authentication/graphiant-authentication.yml

Specifications

⚙
OpenAPI
https://artifacts.apis.io/graphiant/openapi/graphiant-auth-api-openapi.yml

Schemas & Data

📊
JSONSchema
https://artifacts.apis.io/graphiant/json-schema/graphiant-v1-auth-login-post-response-schema.json
📊
JSONSchema
https://artifacts.apis.io/graphiant/json-schema/graphiant-v1-auth-login-pre-get-response-schema.json
📊
JSONSchema
https://artifacts.apis.io/graphiant/json-schema/graphiant-v1-auth-patch-request-schema.json
📊
JSONSchema
https://artifacts.apis.io/graphiant/json-schema/graphiant-v1-auth-put-request-schema.json
📊
JSONSchema
https://artifacts.apis.io/graphiant/json-schema/graphiant-v1-auth-user-get-response-schema.json
📊
JSONSchema
https://artifacts.apis.io/graphiant/json-schema/graphiant-v1-auth-get-response-schema.json

Other Resources

🔗
ErrorCatalog
https://artifacts.apis.io/graphiant/errors/graphiant-problem-types.yml
🔗
Conventions
https://artifacts.apis.io/graphiant/conventions/graphiant-conventions.yml
🔗
DataModel
https://artifacts.apis.io/graphiant/data-model/graphiant-data-model.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/graphiant:graphiant-auth-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

graphiant-auth-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: Graphiant Auth API
  version: 1.0.0
  description: Graphiant API documentation.
servers:
- url: https://api.graphiant.com
security:
- jwtAuth: []
tags:
- name: Auth
paths:
  /v1/auth:
    put:
      security:
      - jwtAuth: []
      parameters:
      - in: header
        name: Authorization
        required: true
        schema:
          type: string
        description: 'Bearer token. Format: Bearer <your_token_here>'
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/v1AuthPutRequest'
      responses:
        '204':
          description: No Content
      description: Configure Identity Provider (SAML) for enterprise. Creates IDP configuration affecting all users in the enterprise.
      tags:
      - Auth
      summary: Replace auth
      x-summary-source: derived
      operationId: putV1Auth
      x-operation-id-source: derived
    delete:
      security:
      - jwtAuth: []
      parameters:
      - in: header
        name: Authorization
        required: true
        schema:
          type: string
        description: 'Bearer token. Format: Bearer <your_token_here>'
      responses:
        '204':
          description: No Content
      description: Remove Identity Provider configuration and revert to default authentication.
      tags:
      - Auth
      summary: Delete auth
      x-summary-source: derived
      operationId: deleteV1Auth
      x-operation-id-source: derived
    get:
      security:
      - jwtAuth: []
      parameters:
      - in: header
        name: Authorization
        required: true
        schema:
          type: string
        description: 'Bearer token. Format: Bearer <your_token_here>'
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/v1AuthGetResponse'
      description: Get current Identity Provider configuration for enterprise.
      tags:
      - Auth
      summary: Get auth
      x-summary-source: derived
      operationId: getV1Auth
      x-operation-id-source: derived
    patch:
      security:
      - jwtAuth: []
      parameters:
      - in: header
        name: Authorization
        required: true
        schema:
          type: string
        description: 'Bearer token. Format: Bearer <your_token_here>'
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/v1AuthPatchRequest'
      responses:
        '204':
          description: No Content
      description: Update Identity Provider configuration (certificates, endpoints, etc.).
      tags:
      - Auth
      summary: Update auth
      x-summary-source: derived
      operationId: patchV1Auth
      x-operation-id-source: derived
  /v1/auth/mfa:
    patch:
      security:
      - jwtAuth: []
      parameters:
      - in: header
        name: Authorization
        required: true
        schema:
          type: string
        description: 'Bearer token. Format: Bearer <your_token_here>'
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/v1AuthMfaPatchRequest'
      responses:
        '204':
          description: No Content
      description: Enroll tenant in Multi-Factor Authentication (SMS, GoogleAuth).
      tags:
      - Auth
      summary: Update auth mfa
      x-summary-source: derived
      operationId: patchV1AuthMfa
      x-operation-id-source: derived
    delete:
      security:
      - jwtAuth: []
      parameters:
      - in: header
        name: Authorization
        required: true
        schema:
          type: string
        description: 'Bearer token. Format: Bearer <your_token_here>'
      responses:
        '204':
          description: No Content
      description: Remove Multi-Factor Authentication enrollment for the tenant.
      tags:
      - Auth
      summary: Delete auth mfa
      x-summary-source: derived
      operationId: deleteV1AuthMfa
      x-operation-id-source: derived
    post:
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/v1AuthMfaPostRequest'
      responses:
        '200':
          description: MFA verification successful
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/v1AuthLoginPostResponse'
        '400':
          description: Bad request - Missing required fields
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/v1AuthErrorPostResponse'
        '500':
          description: Internal server error
          content:
            application/json:
              schema:
                type: object
                properties:
                  error:
                    type: string
                    example: Internal error
      tags:
      - Auth
      summary: Create auth mfa
      x-summary-source: derived
      operationId: postV1AuthMfa
      x-operation-id-source: derived
  /v1/auth/mfa/types:
    get:
      security:
      - jwtAuth: []
      parameters:
      - in: header
        name: Authorization
        required: true
        schema:
          type: string
        description: 'Bearer token. Format: Bearer <your_token_here>'
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/v1AuthMfaTypesGetResponse'
      description: Get MFA types allowed by enterprise policy.
      tags:
      - Auth
      summary: Get auth mfa types
      x-summary-source: derived
      operationId: getV1AuthMfaTypes
      x-operation-id-source: derived
    put:
      security:
      - jwtAuth: []
      parameters:
      - in: header
        name: Authorization
        required: true
        schema:
          type: string
        description: 'Bearer token. Format: Bearer <your_token_here>'
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/v1AuthMfaTypesPutRequest'
      responses:
        '204':
          description: No Content
      description: Update enterprise MFA policy to allow/disallow specific MFA types.
      tags:
      - Auth
      summary: Replace auth mfa types
      x-summary-source: derived
      operationId: putV1AuthMfaTypes
      x-operation-id-source: derived
  /v1/auth/login/pre:
    get:
      parameters:
      - in: query
        name: email
        required: true
        schema:
          type: string
          example: user@example.com
        description: User email address
      - in: query
        name: relayState
        required: false
        schema:
          type: string
          example: information-to-relay
        description: State to relay after authentication
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/v1AuthLoginPreGetResponse'
        '400':
          description: Bad request
      tags:
      - Auth
      summary: Get auth login pre
      x-summary-source: derived
      operationId: getV1AuthLoginPre
      x-operation-id-source: derived
  /v1/auth/login/saml:
    get:
      parameters:
      - in: query
        name: email
        required: true
        schema:
          type: string
          example: user@example.com
        description: User email address
      - in: query
        name: relayState
        required: false
        schema:
          type: string
          example: information-to-relay
        description: State to relay after authentication
      responses:
        '200':
          description: Redirects to SAML identity provider
        '401':
          description: Missing email parameter
          content:
            application/json:
              schema:
                type: object
                properties:
                  error:
                    type: string
                    example: Missing email query parameter
        '500':
          description: Internal server error
          content:
            application/json:
              schema:
                type: object
                properties:
                  error:
                    type: string
                    example: Invalid email
      tags:
      - Auth
      summary: Get auth login saml
      x-summary-source: derived
      operationId: getV1AuthLoginSaml
      x-operation-id-source: derived
  /v1/auth/login/callback:
    post:
      requestBody:
        required: true
        content:
          application/x-www-form-urlencoded:
            schema:
              $ref: '#/components/schemas/v1AuthLoginCallbackPostRequest'
      responses:
        '302':
          description: Redirects to portal with SSO token
        '401':
          description: Authentication failed
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/v1AuthErrorPostResponse'
        '500':
          description: Internal server error
          content:
            application/json:
              schema:
                type: object
                properties:
                  error:
                    type: string
                    example: Invalid saml response
      tags:
      - Auth
      summary: Create auth login callback
      x-summary-source: derived
      operationId: postV1AuthLoginCallback
      x-operation-id-source: derived
  /v1/auth/user:
    get:
      security:
      - jwtAuth: []
      parameters:
      - in: header
        name: Authorization
        required: true
        schema:
          type: string
        description: 'Bearer token. Format: Bearer <your_token_here>'
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/v1AuthUserGetResponse'
        '403':
          description: Forbidden
      tags:
      - Auth
      summary: Get auth user
      x-summary-source: derived
      operationId: getV1AuthUser
      x-operation-id-source: derived
  /v1/auth/login:
    post:
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/v1AuthLoginPostRequest'
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/v1AuthLoginPostResponse'
        '400':
          description: Not Authenticated
        '401':
          description: Authenticated Failed
      tags:
      - Auth
      summary: Create auth login
      x-summary-source: derived
      operationId: postV1AuthLogin
      x-operation-id-source: derived
  /v1/auth/login/temp:
    post:
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/v1AuthLoginTempPostRequest'
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/v1AuthLoginPostResponse'
        '400':
          description: Not Authenticated
      tags:
      - Auth
      summary: Create auth login temp
      x-summary-source: derived
      operationId: postV1AuthLoginTemp
      x-operation-id-source: derived
  /v1/auth/gcs:
    post:
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/v1AuthGcsPostRequest'
      responses:
        '200':
          description: Authentication successful
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/v1AuthLoginPostResponse'
        '400':
          description: Bad request - Missing required fields
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/v1AuthErrorPostResponse'
        '500':
          description: Internal server error
          content:
            application/json:
              schema:
                type: object
                properties:
                  error:
                    type: string
                    example: Internal error
      tags:
      - Auth
      summary: Create auth gcs
      x-summary-source: derived
      operationId: postV1AuthGcs
      x-operation-id-source: derived
  /v1/auth/refresh:
    get:
      security:
      - jwtAuth: []
      parameters:
      - in: header
        name: Authorization
        required: true
        schema:
          type: string
        description: 'Bearer token. Format: Bearer <your_token_here>'
      - in: query
        name: currentPath
        required: false
        schema:
          type: string
          example: /dashboard
        description: Current path to redirect to after refresh
      responses:
        '200':
          description: Token refreshed successfully
          content:
            application/json:
              schema:
                oneOf:
                - $ref: '#/components/schemas/v1AuthLoginPostResponse'
                - $ref: '#/components/schemas/v1AuthRefreshGetEntryPointResponse'
        '403':
          description: Forbidden - Could not refresh token
          content:
            application/json:
              schema:
                type: object
                properties:
                  error:
                    type: string
                    example: Could not refresh token
        '422':
          description: Unprocessable Entity
          content:
            application/json:
              schema:
                type: object
                properties:
                  error:
                    type: string
                    example: error details
        '500':
          description: Internal server error
          content:
            application/json:
              schema:
                type: object
                properties:
                  error:
                    type: string
                    example: Internal error
      tags:
      - Auth
      summary: Get auth refresh
      x-summary-source: derived
      operationId: getV1AuthRefresh
      x-operation-id-source: derived
  /v1/auth/session:
    get:
      security:
      - jwtAuth: []
      parameters:
      - in: header
        name: Authorization
        required: true
        schema:
          type: string
        description: 'Bearer token. Format: Bearer <your_token_here>'
      - in: query
        name: enterpriseId
        required: true
        schema:
          type: integer
          format: int64
          example: 1234567891011
        description: Enterprise ID to get permissions for
      responses:
        '200':
          description: Session updated successfully
          content:
            application/json:
              schema:
                type: object
                properties: {}
        '403':
          description: Forbidden - Token expired
          content:
            application/json:
              schema:
                type: object
                properties:
                  error:
                    type: string
                    example: Token expired
        '422':
          description: Unprocessable Entity - GRPC error
          content:
            application/json:
              schema:
                type: object
                properties:
                  error:
                    type: string
                    example: GRPC error details
        '500':
          description: Internal server error
          content:
            application/json:
              schema:
                type: object
                properties:
                  error:
                    type: string
                    example: Internal error
      tags:
      - Auth
      summary: Get auth session
      x-summary-source: derived
      operationId: getV1AuthSession
      x-operation-id-source: derived
  /v1/auth/session/root:
    get:
      security:
      - jwtAuth: []
      parameters:
      - in: header
        name: Authorization
        required: true
        schema:
          type: string
        description: 'Bearer token. Format: Bearer <your_token_here>'
      responses:
        '200':
          description: Session updated with root permissions successfully
          content:
            application/json:
              schema:
                type: object
                properties: {}
        '403':
          description: Forbidden - Token expired
          content:
            application/json:
              schema:
                type: object
                properties:
                  error:
                    type: string
                    example: Token expired
        '422':
          description: Unprocessable Entity - GRPC error
          content:
            application/json:
              schema:
                type: object
                properties:
                  error:
                    type: string
                    example: GRPC error details
        '500':
          description: Internal server error
          content:
            application/json:
              schema:
                type: object
                properties:
                  error:
                    type: string
                    example: Internal error
      tags:
      - Auth
      summary: Get auth session root
      x-summary-source: derived
      operationId: getV1AuthSessionRoot
      x-operation-id-source: derived
components:
  schemas:
    authPermissions:
      type: object
      properties:
        billingAndInvoicing:
          type: string
          enum:
          - none
          - read
          - read_write
          example: read_write
        licensing:
          type: string
          enum:
          - none
          - read
          - read_write
          example: read_write
        orderStatus:
          type: string
          enum:
          - none
          - read
          - read_write
          example: read
        support:
          type: string
          enum:
          - none
          - read
          - read_write
          example: read
        userAndTenantManagement:
          type: string
          enum:
          - none
          - read
          - read_write
          example: read_write
        assetManager:
          type: string
          enum:
          - none
          - read
          - read_write
          example: read_write
        globalServices:
          type: string
          enum:
          - none
          - read
          - read_write
          example: read
        networkConfigurations:
          type: string
          enum:
          - none
          - read
          - read_write
          example: read_write
        safetyAndSecurity:
          type: string
          enum:
          - none
          - read
          - read_write
          example: read_write
        servicePolicies:
          type: string
          enum:
          - none
          - read
          - read_write
          example: read_write
        compliance:
          type: string
          enum:
          - none
          - read
          - read_write
          example: read
        developerTools:
          type: string
          enum:
          - none
          - read
          - read_write
          example: read
        insights:
          type: string
          enum:
          - none
          - read
          - read_write
          example: read_write
        logs:
          type: string
          enum:
          - none
          - read
          - read_write
          example: read_write
        monitoringAndTroubleshooting:
          type: string
          enum:
          - none
          - read
          - read_write
          example: read_write
        reports:
          type: string
          enum:
          - none
          - read
          - read_write
          example: read
    v1AuthErrorPostResponse:
      type: object
      properties:
        auth:
          type: boolean
          example: false
        token:
          type:
          - string
          - 'null'
          example: null
        error:
          type: string
          example: email not provided
      required:
      - auth
      - token
      - error
    v1AuthMfaTypesGetResponse:
      type: object
      properties:
        allowedMfaTypes:
          type: array
          items:
            type: string
            example: ENUM_VALUE
      additionalProperties: false
    v1AuthUserGetResponse:
      type: object
      properties:
        userId:
          type: string
          example: user-12345
          description: User identifier
        enterpriseId:
          type: integer
          format: int64
          example: 1234567891011
          description: Enterprise identifier
        permissions:
          $ref: '#/components/schemas/authPermissions'
        timeZone:
          type: string
          example: America/New_York
          description: User timezone
      required:
      - userId
      - enterpriseId
      - permissions
      - timeZone
    v1AuthLoginCallbackPostRequest:
      type: object
      properties:
        SAMLResponse:
          type: string
          example: PHNhbWxwOlJlc3BvbnNl...
        RelayState:
          type: string
          example: information-to-relay
      required:
      - SAMLResponse
    v1AuthLoginTempPostRequest:
      type: object
      properties:
        email:
          type: string
          example: user@example.com
        tempPassword:
          type: string
          example: temp123456
        matchId:
          type: number
          example: 12345
      required:
      - email
      - tempPassword
      - matchId
    v1AuthMfaTypesPutRequest:
      type: object
      properties:
        allowedMfaTypes:
          type: array
          items:
            type: string
            example: ENUM_VALUE
            description: ' (required)'
      additionalProperties: false
      required:
      - allowedMfaTypes
    v1AuthLoginPreGetResponse:
      type: object
      properties:
        method:
          type: string
          enum:
          - SSO
          - PASSWORD
          example: PASSWORD
          description: Authentication method to use
        email:
          type: string
          example: user@example.com
          description: User email address
        iam:
          type: string
          example: Azure
          description: Identity provider name (Azure/Okta)
        relayState:
          type: string
          example: information-to-relay
          description: State to relay after authentication
        entryPoint:
          type: string
          example: https://saml.example.com/sso
          description: SSO entry point URL
      required:
      - method
      - email
    v1AuthLoginPostResponse:
      type: object
      properties:
        auth:
          type: boolean
          example: true
        token:
          type: string
          example: gr-auth-12345678-1234-1234-1234-123456789012-87654321-4321-4321-4321-210987654321
        accountType:
          type: string
          enum:
          - no_account
          - enterprise
          - provider
          - msp
          - graphiant
          example: enterprise
        email:
          type: string
          example: user@example.com
          description: User email address (returned for MFA users)
        mfaType:
          type: string
          example: TOTP
          description: MFA type (returned for MFA users)
        stateToken:
          type: string
          example: state-token-12345
          description: State token for MFA verification (returned for MFA users)
        status:
          type: string
          example: AwaitingMfa
          description: Authentication status (returned for MFA users)
    v1AuthGcsPostRequest:
      type: object
      properties:
        gcsName:
          type: string
          example: my-gcs-instance
        apiKey:
          type: string
          example: api-key-12345
      required:
      - gcsName
      - apiKey
    v1AuthRefreshGetEntryPointResponse:
      type: object
      properties:
        entryPoint:
          type: string
          example: https://saml.example.com/sso
    v1AuthMfaPatchRequest:
      type: object
      properties:
        allowedMfaTypes:
          type: array
          items:
            type: string
            example: ENUM_VALUE
            description: ' (required)'
      additionalProperties: false
      required:
      - allowedMfaTypes
    v1AuthPatchRequest:
      type: object
      properties:
        cert:
          type: string
          example: example string
          description: ' (required)'
        entryPoint:
          type: string
          example: example string
          description: ' (required)'
        iamType:
          type: string
          example: ENUM_VALUE
          description: ' (required)'
        issuer:
          type: string
          example: example string
          description: ' (required)'
      additionalProperties: false
      required:
      - cert
      - entryPoint
      - iamType
      - issuer
    v1AuthGetResponse:
      type: object
      properties:
        cert:
          type: string
          example: example string
        entryPoint:
          type: string
          example: example string
        iamType:
          type: string
          example: ENUM_VALUE
        issuer:
          type: string
          example: example string
      additionalProperties: false
    v1AuthLoginPostRequest:
      type: object
      properties:
        username:
          type: string
          example: user@example.com
        password:
          type: string
          example: password123
      required:
      - username
      - password
    v1AuthMfaPostRequest:
      type: object
      properties:
        email:
          type: string
          example: user@example.com
        mfaType:
          type: string
          example: TOTP
        code:
          type: string
          example: 123456
        stateToken:
          type: string
          example: state-token-12345
      required:
      - email
      - mfaType
      - code
    v1AuthPutRequest:
      type: object
      properties:
        cert:
          type: string
          example: example string
          description: ' (required)'
        entryPoint:
          type: string
          example: example string
          description: ' (required)'
        iamType:
          type: string
          example: ENUM_VALUE
          description: ' (required)'
        issuer:
          type: string
          example: example string
          description: ' (required)'
      additionalProperties: false
      required:
      - cert
      - entryPoint
      - iamType
      - issuer
  securitySchemes:
    jwtAuth:
      type: apiKey
      in: header
      name: authorization
      description: Use `Bearer <token>`