Iridium Auth API
The auth API from Iridium — 6 operation(s) for auth.
The auth API from Iridium — 6 operation(s) for auth.
Every API here is available over the APIs.io API and to AI agents over MCP.
One button, every client — Claude, Cursor, VS Code and the rest.
https://apis.io/mcp
find_apisBrowse and filter every API in the catalog.get_api_artifactsOne API's artifacts, grouped by type.get_openapiThe primary OpenAPI for this API.find_similar_apisAPIs that look like this one.apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.resolveTurn a domain, URL or GitHub org into the provider it belongs to.find_cohortsEvery scored population of providers in the catalog.curl "https://apis.io/api/v1/apis/iridiumhqmcp-com:iridiumhqmcp-com-auth-api"
curl "https://apis.io/api/v1/apis?limit=25"
Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.
Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.
A second provider on the same verified email joins the account you already have.
openapi: 3.2.0
info:
title: Iridiumhqmcp Com Auth API
version: 0.1.0
description: 'Operations tagged auth across 2 of this provider''s published API definitions: openapi.json, iridiumhqmcp-com-openapi.json. Each path carries the servers of the definition it was published in.'
tags:
- name: Auth
paths:
/auth/login:
post:
tags:
- Auth
summary: Login
operationId: login_auth_login_post
requestBody:
content:
application/json:
schema:
$ref: '#/components/schemas/LoginRequest'
required: true
responses:
'200':
description: Successful Response
content:
application/json:
schema:
$ref: '#/components/schemas/TokenResponse'
'422':
description: Validation Error
content:
application/json:
schema:
$ref: '#/components/schemas/HTTPValidationError'
/auth/refresh:
post:
tags:
- Auth
summary: Refresh
operationId: refresh_auth_refresh_post
requestBody:
content:
application/json:
schema:
$ref: '#/components/schemas/RefreshRequest'
required: true
responses:
'200':
description: Successful Response
content:
application/json:
schema:
$ref: '#/components/schemas/TokenResponse'
'422':
description: Validation Error
content:
application/json:
schema:
$ref: '#/components/schemas/HTTPValidationError'
/auth/logout:
post:
tags:
- Auth
summary: Logout
operationId: logout_auth_logout_post
requestBody:
content:
application/json:
schema:
$ref: '#/components/schemas/RefreshRequest'
required: true
responses:
'200':
description: Successful Response
content:
application/json:
schema: {}
'422':
description: Validation Error
content:
application/json:
schema:
$ref: '#/components/schemas/HTTPValidationError'
/auth/social-login:
post:
tags:
- Auth
summary: Social Login
operationId: social_login_auth_social_login_post
requestBody:
content:
application/json:
schema:
$ref: '#/components/schemas/SocialLoginRequest'
required: true
responses:
'200':
description: Successful Response
content:
application/json:
schema:
$ref: '#/components/schemas/TokenResponse'
'422':
description: Validation Error
content:
application/json:
schema:
$ref: '#/components/schemas/HTTPValidationError'
/auth/demo:
post:
tags:
- Auth
summary: Demo Login
description: 'Issue a throwaway demo account — the only unauthenticated route that creates a user.
A fresh row per click, not one shared account: the chat transcript is per-user, so a
shared demo would show every visitor everyone else''s conversation.
Consent is NOT recorded here, for the same reason it isn''t in social_login above —
clicking "try the demo" is not agreeing. The demo user lands on the same blocking Terms
screen as everyone else. What they skip is onboarding, which asks for a LinkedIn they
are deliberately not connecting.
The address is a reserved .invalid domain (RFC 2606): unique, and provably unable to
receive the mail this account must never be sent.'
operationId: demo_login_auth_demo_post
responses:
'200':
description: Successful Response
content:
application/json:
schema:
$ref: '#/components/schemas/TokenResponse'
/auth/reactivate:
post:
tags:
- Auth
summary: Reactivate
description: 'Restore a soft-deleted account. The explicit act that signing in no longer performs.
Reachable while inactive: /auth/ is exempt from the deleted_gate middleware, and this route
uses the allow-inactive dependency.
Issues a FRESH token pair — delete_user() revoked every refresh family, so the caller''s old
refresh token is dead even though its access token still decodes.'
operationId: reactivate_auth_reactivate_post
responses:
'200':
description: Successful Response
content:
application/json:
schema:
$ref: '#/components/schemas/TokenResponse'
security:
- HTTPBearer: []
components:
schemas:
RefreshRequest:
properties:
refresh_token:
type: string
title: Refresh Token
type: object
required:
- refresh_token
title: RefreshRequest
SocialLoginRequest:
properties:
supabase_token:
type: string
title: Supabase Token
type: object
required:
- supabase_token
title: SocialLoginRequest
LoginRequest:
properties:
api_key:
type: string
title: Api Key
type: object
required:
- api_key
title: LoginRequest
ValidationError:
properties:
loc:
items:
anyOf:
- type: string
- type: integer
type: array
title: Location
msg:
type: string
title: Message
type:
type: string
title: Error Type
type: object
required:
- loc
- msg
- type
title: ValidationError
TokenResponse:
properties:
access_token:
type: string
title: Access Token
refresh_token:
type: string
title: Refresh Token
token_type:
type: string
title: Token Type
default: bearer
type: object
required:
- access_token
- refresh_token
title: TokenResponse
HTTPValidationError:
properties:
detail:
items:
$ref: '#/components/schemas/ValidationError'
type: array
title: Detail
type: object
title: HTTPValidationError
securitySchemes:
HTTPBearer:
type: http
scheme: bearer
x-refined-from:
- openapi.json
- iridiumhqmcp-com-openapi.json
x-provenance:
method: harvested
publisher: Iridium
source: https://api.iridiumhqmcp.com/openapi.json
note: split by refine-openapis from the provider's own published document, verified by fetch (openapi/_original/*.fetch.json);
stamped by stamp-openapi-provenance.py (roadmap#793)