M3ter Service User Credentials API

openapi: 3.2.0
info:
  title: m3ter Service User Credentials API
  description: 'If you are using Postman, you can:

    - Use the **Download** button above to download the m3ter Open API spec JSON file and then import this file as the **m3ter API Collection** into your Workspace. See Importing the m3ter Open API in our main user Documentation for details. - Copy this link: m3ter-Template API Collection and use it to import the **m3ter-Template API Collection** into your Workspace. See Importing the m3ter Template API Collection in our main user Documentation for details. ---


    # Introduction

    The m3ter platform supports two HTTP-based REST APIs returning JSON encoded responses:

    - The **Ingest API**, which you can use for submitting raw data measurements. *(See the Submit Measurements endpoint in this API Reference.)*

    - The **Config API**, which you can use for configuration and management. *(All other endpoints in this API Reference.)*


    ## Authentication and Authorization

    Our APIs use an industry-standard authorization protocol known as the OAuth 2.0 specification. OAuth2 supports several grant types, each designed for a specific use case. m3ter uses the following two grant types:

    - **Authorization Code**: Used for human login access via the m3ter Console. - **Client Credentials**: Used for machine-to-machine communication and API access. Complete the following flow for API access:


    1. **Create a Service User and add Permissions**: Log in to the m3ter Console, go to **Settings**, **Access** then **Service Users** tab, and create a Service User. To enable API calls, grant the user **Administrator** permissions. 2. **Generate Access Keys**: In the Console, open the *Overview* page for the Service User by clicking on the name. Generate an **Access Key id** and **Api Secret**. Make sure you copy the **Api Secret** because it is only visible at the time of creation. See Service Authentication for detailed instructions and an example. 3. **Obtain a Bearer Token using Basic Auth**: We implement the OAuth 2.0 Client Credentials Grant authentication flow for Service User Authentication. Submit a request to the m3ter OAuth Client Credentials authentication flow, using your concatenated **Access Key id** and **Api Secret** to obtain a Bearer Token for your Service User. *See examples below.*


    4. **Bearer Token Usage**: Use the HTTP ''Authorization'' header with the bearer token to authorise all subsequent API requests. > Warning: The Bearer Token is valid for 18,000 seconds or 5 hours. When the token has expired, you must obtain a new one. Below are two examples for obtaining a Bearer Token using Basic Auth: the first in cURL and the second as a Python script. ### cURL Example

    1. Open your terminal or command prompt. 2. Use the following `cURL` command to obtain a Bearer Token:


    ```bash

    curl -X POST https://api.m3ter.com/oauth/token \

    -H ''Content-Type: application/x-www-form-urlencoded'' \

    -u your_access_key_id:your_api_secret \

    -d ''grant_type=client_credentials''

    ```


    Replace `your_access_key_id` and `your_api_secret` with your actual **Access Key id** and **Api Secret**. 3. Run the command, and if successful, it will return a JSON response containing the Bearer Token. The response will look like this:


    ```json

    {

    "access_token": "your_bearer_token",

    "token_type": "Bearer",

    "expires_in": 18000

    }

    ```


    You can then use the Bearer Token *(the value of `"access_token"`)* for subsequent API calls to m3ter. ### Python Example

    1. Install the `requests` library if you haven''t already:


    ```bash

    pip install requests

    ```


    2.'
  version: '1.0'
  x-logo:
    url: https://console.m3ter.com/m3ter-logo-black.svg
servers:
- url: https://api.m3ter.com
security:
- OAuth2: []
tags:
- name: ServiceUserCredentials
  description: Endpoints for creating/activating/deactivating/deleting service user credentials
paths:
  /organizations/{orgId}/serviceusers/{id}/credentials:
    get:
      tags:
      - ServiceUserCredentials
      summary: List ServiceUser Credentials
      description: Retrieve the credentials key pairs for a service user.
      operationId: ListServiceUserCredentials
      parameters:
      - name: orgId
        in: path
        description: UUID of the organization
        required: true
        style: simple
        explode: false
        schema:
          type: string
      - name: id
        in: path
        description: UUID of the service user.
        required: true
        style: simple
        explode: false
        schema:
          type: string
      responses:
        '200':
          description: Returns a list of ServiceUser credentials
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/PaginatedServiceCredentialsResponseData'
        4XX:
          $ref: '#/components/responses/Error'
        5XX:
          $ref: '#/components/responses/Error'
    post:
      tags:
      - ServiceUserCredentials
      summary: Create ServiceUser Credentials
      description: Create a new credentials key pair for a service user.
      operationId: PostServiceUserCredentials
      parameters:
      - name: orgId
        in: path
        description: UUID of the organization
        required: true
        style: simple
        explode: false
        schema:
          type: string
      - name: id
        in: path
        description: UUID of the service user.
        required: true
        style: simple
        explode: false
        schema:
          type: string
      responses:
        '200':
          description: Returns the new ServiceUser credentials
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ServiceCredentialsResponse'
        4XX:
          $ref: '#/components/responses/Error'
        5XX:
          $ref: '#/components/responses/Error'
  /organizations/{orgId}/serviceusers/{id}/credentials/{apiKey}:
    get:
      tags:
      - ServiceUserCredentials
      summary: Retrieve ServiceUser Credentials
      description: Retrieve a credentials key pair for a service user.
      operationId: GetServiceUserCredentials
      parameters:
      - name: orgId
        in: path
        description: UUID of the organization
        required: true
        style: simple
        explode: false
        schema:
          type: string
      - name: id
        in: path
        description: UUID of the service user.
        required: true
        style: simple
        explode: false
        schema:
          type: string
      - name: apiKey
        in: path
        description: API key for the service user credentials.
        required: true
        style: simple
        explode: false
        schema:
          type: string
      responses:
        '200':
          description: Returns the ServiceUser credentials
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ServiceCredentialsResponse'
        4XX:
          $ref: '#/components/responses/Error'
        5XX:
          $ref: '#/components/responses/Error'
    delete:
      tags:
      - ServiceUserCredentials
      summary: Delete ServiceUser Credentials
      description: Delete a deactivated credentials key pair for a service user.
      operationId: DeleteServiceUserCredentials
      parameters:
      - name: orgId
        in: path
        description: UUID of the organization
        required: true
        style: simple
        explode: false
        schema:
          type: string
      - name: id
        in: path
        description: UUID of the service user.
        required: true
        style: simple
        explode: false
        schema:
          type: string
      - name: apiKey
        in: path
        description: API key for the service user credentials.
        required: true
        style: simple
        explode: false
        schema:
          type: string
      responses:
        '200':
          description: Returns the ServiceUser credentials that were deleted
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ServiceCredentialsResponse'
        4XX:
          $ref: '#/components/responses/Error'
        5XX:
          $ref: '#/components/responses/Error'
  /organizations/{orgId}/serviceusers/{id}/credentials/{apiKey}/activate:
    put:
      tags:
      - ServiceUserCredentials
      summary: Activate ServiceUser Credentials
      description: Activate a credentials key pair for a service user.
      operationId: ActivateServiceUserCredentials
      parameters:
      - name: orgId
        in: path
        description: UUID of the organization
        required: true
        style: simple
        explode: false
        schema:
          type: string
      - name: id
        in: path
        description: UUID of the service user.
        required: true
        style: simple
        explode: false
        schema:
          type: string
      - name: apiKey
        in: path
        description: API key for the service user credentials.
        required: true
        style: simple
        explode: false
        schema:
          type: string
      responses:
        '200':
          description: Returns the activated ServiceUser credentials
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ServiceCredentialsResponse'
        4XX:
          $ref: '#/components/responses/Error'
        5XX:
          $ref: '#/components/responses/Error'
  /organizations/{orgId}/serviceusers/{id}/credentials/{apiKey}/inactivate:
    put:
      tags:
      - ServiceUserCredentials
      summary: Deactivate ServiceUser Credentials
      description: Deactivate a credentials key pair for a service user.
      operationId: InactivateServiceUserCredentials
      parameters:
      - name: orgId
        in: path
        description: UUID of the organization
        required: true
        style: simple
        explode: false
        schema:
          type: string
      - name: id
        in: path
        description: UUID of the service user.
        required: true
        style: simple
        explode: false
        schema:
          type: string
      - name: apiKey
        in: path
        description: API key for the service user credentials.
        required: true
        style: simple
        explode: false
        schema:
          type: string
      responses:
        '200':
          description: Returns the deactivated ServiceUser credentials
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ServiceCredentialsResponse'
        4XX:
          $ref: '#/components/responses/Error'
        5XX:
          $ref: '#/components/responses/Error'
components:
  responses:
    Error:
      description: Error message
      content:
        application/json:
          schema:
            type: object
            properties:
              message:
                type: string
  schemas:
    PaginatedServiceCredentialsResponseData:
      type: object
      properties:
        data:
          type: array
          description: ''
          items:
            $ref: '#/components/schemas/ServiceCredentialsResponse'
        nextToken:
          type: string
          description: ''
      description: ''
    AbstractResponse:
      required:
      - id
      type: object
      properties:
        id:
          type: string
          description: 'The UUID of the entity. '
        version:
          type: integer
          description: 'The version number:

            - **Create:** On initial Create to insert a new entity, the version is set at 1 in the response.

            - **Update:** On successful Update, the version is incremented by 1 in the response.'
          format: int64
          x-stainless-terraform-configurability: computed
          x-stainless-terraform-always-send: true
      description: ''
    ServiceCredentialsResponse:
      type: object
      description: ''
      allOf:
      - $ref: '#/components/schemas/AbstractResponse'
      - type: object
        properties:
          apiKey:
            type: string
            description: ''
          apiSecret:
            type: string
            description: ''
          inactive:
            type: boolean
            description: ''
          dtCreated:
            type: string
            description: The DateTime when the service credentials were created.
            format: date-time
          dtLastModified:
            type: string
            description: The DateTime when the service credentials were last modified.
            format: date-time
          createdBy:
            type: string
            description: The id of the user who created these service credentials.
          lastModifiedBy:
            type: string
            description: The id of the user who last modified these service credentials.
  securitySchemes:
    OAuth2:
      type: oauth2
      description: "m3ter supports machine to machine authentication using the `clientCredentials` OAuth2 flow.\n\nThe `authorizationCode` flow controls access for human users via the m3ter Console application. \n"
      flows:
        clientCredentials:
          tokenUrl: /oauth/token
          scopes:
            m3ter-resources/m3ter-scope: m3ter resources
        authorizationCode:
          authorizationUrl: https://m3ter.auth.us-east-1.amazoncognito.com/oauth2/authorize
          tokenUrl: https://m3ter.auth.us-east-1.amazoncognito.com/oauth2/token
          scopes:
            m3ter-resources/m3ter-scope: m3ter resources
            openid: OpenID
            email: email
x-provenance:
  method: harvested
  publisher: M3ter
  source: https://docs.m3ter.com/openapi.json
  note: split by refine-openapis from the provider's own published document, verified by fetch (openapi/_original/*.fetch.json);
    stamped by stamp-openapi-provenance.py (roadmap#793)