HYPR

HYPR RP Applications API

The RP Applications API from HYPR — 111 operation(s) for rp applications.

GitHub OpenAPI

Operations 132

PUT /cc/api/authenticator/disable Disable authenticator #
PUT /cc/api/authenticator/enable Enable authenticator #
GET /cc/api/action Retrieve authentication policies #
PUT /cc/api/action Create or update an authentication policy #
POST /cc/api/action/delete Delete an authentication policy #
PATCH /rp/api/alias/{appId}/{username} Assign user alias #
GET /rp/api/username/{username}/alias Retrieve aliases for a user #
DELETE /rp/api/username/{username}/alias Delete user aliases #
GET /rp/api/username Get username by alias #
PATCH /rp/api/username/{username}/email Assign user email #
GET /rp/api/username/{username}/email GET the email addresses for a user #
DELETE /rp/api/username/{username}/email Delete user emails #
POST /rp/api/versioned/recoverypin/retrieve Reveals a single recovery PIN and removes it from the database #
PUT /cc/api/user/lock Lock the authenticator for the user #
PUT /cc/api/user/unlock Unlock the authenticator for the user #
GET /cc/api/versioned/rpUser/ Get users #
GET /cc/api/versioned/rpUser/{username} Get user details #
POST /cc/api/rpUser Create RP application user #
PUT /cc/api/rpUser Update RP application user #
POST /cc/api/rpUser/delete Delete RP application user #
GET /cc/api/versioned/audit/search Search for Audit Trail Events #
POST /cc/api/audit/export Export Audit Trail Events #
POST /rp/deviceapi/audit Log a Device Event #
POST /rp/wsapi/audit Log a Workstation Event #
GET /rp/api/oob/client/devices/{rpAppId}/{machineName} Get registered devices by machineName #
GET /rp/api/oob/client/{username}/devices GET all devices by username #
GET /rp/api/oob/client/devices/{rpAppId}/{machineDisplayName} GET all the devices and users in an rpApp by machineDisplayName #
POST /rp/api/oob/client/device/delete/{rpAppId}/{username}/{deviceId} Delete a device from an application user #
POST /rp/api/oob/qr/client/authentication/requests QR authentication request #
POST /rp/api/oob/client/authentication/requests OOB authentication request #
GET /rp/api/oob/client/authentication/requests/{requestId} OOB Authentication request status #
POST /rp/api/oob/client/authentication/requests/transaction OOB authentication transaction request #
POST /rp/deviceapi/device/query/ws/status Device queries the status of registered workstations #
POST /rp/deviceapi/device/query/web/status/reg/confirm Single registration: Device confirms web account creation #
POST /rp/deviceapi/device/query/web/status/reg Single registration: Device checks for the created web account #
DELETE /cc/api/appconfig/device/{name} Delete an application device #
PUT /rp/deviceapi/signal Send device location to the server #
GET /rp/api/signal/device/{deviceId} Get the device signal location information #
POST /rp/deviceapi/device/authorize/ws/complete/{sessionId} Device completes authorization #
POST /rp/deviceapi/device/authorize/ws/cancel Device cancels authorization before user presence is verified #
POST /rp/deviceapi/device/ws/lock Device submits workstation(s) for lock #
POST /rp/deviceapi/device/authorize/ws/unlock Windows unlock from a mobile device #
POST /rp/deviceapi/device/ws/deregister Device submits workstation(s) for deregistration #
POST /rp/deviceapi/device/deregister Deregister a previous registration of the device from your browser #
POST /rp/deviceapi/settings Synchronize SSL PINs across HYPR for a device #
DELETE /cc/api/rpUser/deleteDevice Delete an RP application user's device #
PUT /rp/api/signal/browser Send browser fingerprint data to Control Center #
GET /rp/api/signal/browser/{userName}&signal={signal} Obtain browser fingerprint #
GET /cc/api/application Retrieve all applications #
POST /cc/api/application Create an application #
DELETE /cc/api/application/{rpAppId} Delete an application #
POST /rp/api/certificate Submits encrypted workstation certificates #
GET /rp/api/certificate/requests List any pending certificate issue and revocation requests #
POST /rp/api/certificate/request Trigger or re-trigger a certificate enrollment #
POST /rp/api/certificate/revoke Confirm the status of a certificate revocation request #
GET /rp/api/rpapp/{rpAppId}/certificate/deregistered Get deregistered certificates #
GET /rp/api/client/desktopsso/status/{challenge} Obtain the desktop-to-web SSO challenge status #
GET /rp/api/client/desktopsso/session/status/{machineId} Check if the machine has a valid FIDO session #
POST /rp/api/client/desktopsso/challenge Send a challenge for the desktop client to process #
POST /rp/wsapi/client/desktopsso/complete Respond to a challenge for the HYPRspeed client #
GET /rp/api/client/reg/ Client registration information #
POST /rp/api/client/reg/ New client registration #
PATCH /rp/api/client/reg Update client registration #
GET /rp/wsapi/client/reg Asynchronous Registration: HYPR Passwordless client polls for FIDO_SEND #
POST /rp/wsapi/client/reg Asynchronous Registration: Initial client registration request #
PATCH /rp/wsapi/client/reg Asynchronous Registration: Update client certificates and PINs #
POST /rp/wsapi/client/enroll Asynchronous Web Registration: Workstation initiates enrollment #
POST /rp/wsapi/client/enroll/complete Asynchronous Web Registration: Workstation completes enrollment #
POST /rp/wsapi/ws/query/device Retrieve the workstation's currently registered devices #
POST /rp/wsapi/client/setup Client (website | workstation) setup #
POST /rp/wsapi/client/registrations Client (website | workstation) registration #
POST /rp/wsapi/client/registrations/{sessionId} Client (website | workstation) registration complete #
POST /rp/versioned/client/qr/create Generate a QR code #
DELETE /rp/wsapi/client/reg/{sessionId} Cancel a registration in progress #
DELETE /rp/api/client/reg/{sessionId} Delete a client registration #
POST /rp/wsapi/smartkey/enroll Enroll/re-enroll a security key #
POST /rp/wsapi/smartkey/unenroll Unenroll a security key #
POST /rp/wsapi/smartkey/checksettings Get the CC admin settings for a security key #
POST /rp/wsapi/smartkey/updaterecoverypins Update security key recovery PINs #
POST /cc/api/securitykey/getpinreset Obtain the security key PUK value #
POST /cc/api/securitykey/updatepinreset Update the security key PUK value #
POST /cc/api/securitykey/deletepinreset Delete the security key PUK value #
POST /rp/api/versioned/workstation/lock Lock the workstation #
POST /rp/wsapi/client/lock/complete Workstation verifies that the lock request is complete #
POST /rp/wsapi/client/verification/complete/{sessionId} Workstation indicates user verification completion #
POST /rp/wsapi/client/authorize/unlock Windows polls HYPR Mobile App for unlock #
POST /rp/wsapi/client/authorization/complete/{sessionId} Workstation indicates authentication is complete #
POST /rp/wsapi/client/cancel/complete Client confirms cancel processing #
POST /rp/wsapi/client/device/deregister Workstation de-registers a paired HYPR Mobile App #
PUT /cc/api/appconfig/workstation Update workstation settings #
GET /cc/api/appconfig/workstation Retrieve workstation settings #
POST /rp/wsapi/client/workstation/status The workstation calls this endpoint to report status #
GET /rp/wsapi/client/workstation/poll/{rpAppId}/{machineId} Long polling endpoint for the workstation to get messages #
GET /rp/wsapi/settings Synchronize SSL PINs across HYPR for a machine #
PUT /rp/wsapi/signal Get workstation signal information #
POST /rp/token/endpoint/exchange/clientcredentials Create an OAuth Token from Credentials #
POST /rp/api/versioned/magiclink Create a Magic Link #
POST /rp/api/versioned/magiclink/multiple Create multiple Magic Links #
GET /cc/api/appconfig/push Get login settings #
PUT /cc/api/appconfig/push Save login settings #
GET /cc/api/fido/facet Retrieve trusted facets #
PUT /cc/api/fido/facet Add a trusted facet #
POST /cc/api/fido/facet Add facetIDs to an RP application #
DELETE /cc/api/fido/facet Delete a FIDO facetID #
POST /rp/wsapi/fido2/listen Workstation listens for mobile device advertisements #
POST /rp/deviceapi/fido2/advertise Mobile device starts/stops advertising #
POST /rp/wsapi/fido2/receive Workstation receives CTAP request from the the FIDO2 Gateway #
POST /rp/deviceapi/fido2/receive Device receives CTAP request from the FIDO2 Gateway #
POST /POST /rp/wsapi/fido2/send Workstation sends the CTAP request #
POST /{bseUrl}/rp/deviceapi/fido2/send Mobile device sends CTAP response #
POST /rp/api/versioned/fido2/settings Save FIDO2/API application settings #
GET /rp/api/versioned/fido2/settings Retrieve FIDO2/API application settings #
POST /rp/api/fido2/authenticators/enable Enable one or more authenticators for a given RP application #
GET /rp/api/fido2/authenticators List all known enabled FIDO2 authenticators #
GET /rp/api/fido2/authenticators/isenabled List all explicitly enabled FIDO2 authenticators #
POST /rp/api/fido2/authenticators/disablehard Disable authenticators and remove them from the whitelist #
POST /rp/api/fido2/authenticators/disable Disable one or more authenticators for a given RP application #
GET /cc/api/fido2/policy Get a FIDO2 policy #
PUT /cc/api/fido2/policy Update a FIDO2 policy #
GET /cc/api/appconfig/oidc Get OIDC configuration #
PUT /cc/api/appconfig/oidc Save OIDC configuration #
DELETE /cc/api/appconfig/oidc/{rpAppId} Delete OIDC configuration #
GET /cc/api/idp/fido2/creationOptions/{rpAppId}/{upn} Get Entra ID user information #
POST /cc/api/idp/fido2/device/{rpAppId}/{upn} Update Entra ID user information #
GET /cc/api/appconfig/devicemanager Get Device Manager configuration #
PUT /cc/api/appconfig/devicemanager Create or update Device Manager configuration #
DELETE /cc/api/appconfig/devicemanager/{rpAppId} Delete Device Manager configuration #
GET /cc/api/appconfig/device Get an application's Device Manager properties #
PUT /cc/api/appconfig/device Save the application's Device Manager properties #

Documentation

📖
APIReference
https://apidocs.hypr.com

Specifications

⚙
OpenAPI
https://artifacts.apis.io/hypr/openapi/hypr-rp-applications-api-openapi.yml

Other Resources

🔗
Postman
https://artifacts.apis.io/hypr/postman/hypr-passwordless-apis-postman-collection.json

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/hypr:hypr-rp-applications-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

hypr-rp-applications-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: HYPR Passwordless RP Applications API
  version: latest
  description: 'AE-AUTHORED: derived mechanically from HYPR''s published Postman collection (https://apidocs.hypr.com, documenter collection 20355028/2sA3kPqQAt). Not published by HYPR as OpenAPI. Paths, methods and summaries only; schemas are not asserted.'
  x-ae-authored: true
  x-method: derived
  x-source: postman/hypr-passwordless-apis-postman-collection.json
servers:
- url: https://{tenant}.hypr.com
  variables:
    tenant:
      default: your-tenant
security:
- bearerAuth: []
tags:


# --- truncated at 32 KB (53 KB total) ---
# Full source: https://artifacts.apis.io/hypr/openapi/hypr-rp-applications-api-openapi.yml