OK Capsule

OK Capsule Authentication API

OK Capsule API uses **Oauth2.0 with OpenID Connect**. It issues **access**, **id**, and **refresh** tokens. **Access** tokens is used to authenticate API requests and are short lived (1 day). *Id token** can be used by a client application to display user's information. It is also short lived (1 day). **Refresh** token is long lived (10 years) and is used to renew **access** and **id** tokens. Authentication to the API is performed via Bearer auth Authorization header: *Authorization: Bearer *.

Documentation GitHub OpenAPI

Operations 5

POST /v2/authentication/token Request access, id, and refresh tokens #

POST /v2/authentication/refresh-token Get new access and id tokens #

POST /v2/authentication/forgot-password Trigger reset password email or text message #

POST /v2/authentication/reset-password Reset password #

GET /v2/authentication/user User information #

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this

find_apisBrowse and filter every API in the catalog.
get_api_artifactsOne API's artifacts, grouped by type.
get_openapiThe primary OpenAPI for this API.
find_similar_apisAPIs that look like this one.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This API

curl "https://apis.io/api/v1/apis/ok-capsule-authentication-api"

All apis

curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

openapi: 3.2.0
info:
  description: '## Overview


    The OK Capsule API enables you to programmatically create supplement orders, manage consumers, and track shipments.'
  version: 2.0.0
  title: OKC core API V2 Authentication API
  contact:
    name: Engineering Department, OKCapsule
    email: lukas@okcapsule.com
  license:
    name: Apache 2.0
    url: https://www.apache.org/licenses/LICENSE-2.0.html
servers:
- description: Production environment
  url: https://na1-prod.okcapsule.app
- description: Stage/Testing environment
  url: https://na1-stage.okcapsule.app
tags:
- name: Authentication
  description: 'OK Capsule API uses **Oauth2.0 with OpenID Connect**. It issues **access**, **id**, and **refresh** tokens. **Access** tokens is used to authenticate API requests and are short lived (1 day). *Id token** can be used by a client application to display user''s information. It is also short lived (1 day). **Refresh** token is long lived (10 years) and is used to renew **access** and **id** tokens. Authentication to the API is performed via Bearer auth Authorization header: *Authorization: Bearer *.'
paths:
  /v2/authentication/token:
    post:
      tags:
      - Authentication
      security:
      - bearerAuth: []
      summary: Request access, id, and refresh tokens
      description: Use username and password to retrieve **access token**, **id token**, and **refresh token**. The access token will include permissions based on the user's assigned role.
      requestBody:
        content:
          application/json:
            schema:
              type: object
              properties:
                username:
                  type: string
                  example: user@example.com
                password:
                  type: string
                  format: password
                  example: password
              required:
              - username
              - password
      responses:
        '200':
          description: Successful response
          content:
            application/json:
              schema:
                type: object
                required:
                - access_token
                - id_token
                - refresh_token
                - token_type
                - expires_in
                - permissions
                properties:
                  access_token:
                    type: string
                    example: eyJra1example
                  id_token:
                    type: string
                    example: eyJra1example
                  refresh_token:
                    type: string
                    example: eyJra1example
                  token_type:
                    type: string
                    example: Bearer
                  expires_in:
                    type: string
                    example: 86400
                  permissions:
                    type: string
                    example: orders/read,orders/create,orders/update,orders/delete,products/read,products/create
        '422':
          description: Validation error response.
          content:
            application/json:
              schema:
                type: object
                required:
                - error
                properties:
                  error:
                    type: object
                    required:
                    - message
                    - errors
                    properties:
                      message:
                        type: string
                        example: Validation error
                      errors:
                        type: array
                        items:
                          type: object
                          properties:
                            message:
                              type: string
                              example: '''username'' is required'
                            type:
                              type: string
                              example: any.required
        default:
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorModel'
          description: Error response.
      operationId: postV2AuthenticationToken
      x-operation-id-source: derived
  /v2/authentication/refresh-token:
    post:
      tags:
      - Authentication
      security:
      - bearerAuth: []
      summary: Get new access and id tokens
      description: Use refresh token to retrieve access and id tokens
      requestBody:
        content:
          application/json:
            schema:
              type: object
              properties:
                refresh_token:
                  type: string
                  example: eyJra1example
              required:
              - refresh_token
      responses:
        '200':
          description: Successful response
          content:
            application/json:
              schema:
                type: object
                required:
                - access_token
                - id_token
                - refresh_token
                - token_type
                - expires_in
                properties:
                  access_token:
                    type: string
                    example: eyJra1example
                  id_token:
                    type: string
                    example: eyJra1example
                  token_type:
                    type: string
                    example: Bearer
                  expires_in:
                    type: string
                    example: 86400
        '422':
          $ref: '#/components/responses/422AuthValidationError'
        default:
          $ref: '#/components/responses/UnknownError'
      operationId: postV2AuthenticationRefreshToken
      x-operation-id-source: derived
  /v2/authentication/forgot-password:
    post:
      tags:
      - Authentication
      security:
      - bearerAuth: []
      summary: Trigger reset password email or text message
      description: Trigger reset password email or text message to receive confirmation code
      requestBody:
        content:
          application/json:
            schema:
              type: object
              properties:
                email:
                  type: string
                  format: email
                  example: user@example.com
              required:
              - email
      responses:
        '200':
          description: Successful response
          content:
            application/json:
              schema:
                type: object
                required:
                - message
                properties:
                  message:
                    type: string
                    example: Confirmation code has been sent to email/phone number ...
        '422':
          $ref: '#/components/responses/422AuthValidationError'
        default:
          $ref: '#/components/responses/UnknownError'
      operationId: postV2AuthenticationForgotPassword
      x-operation-id-source: derived
  /v2/authentication/reset-password:
    post:
      tags:
      - Authentication
      security:
      - bearerAuth: []
      summary: Reset password
      description: Use confirmation code to reset password
      requestBody:
        content:
          application/json:
            schema:
              type: object
              properties:
                username:
                  type: string
                  example: user@example.com
                password:
                  type: string
                  format: password
                confirmation_code:
                  type: string
              required:
              - username
              - password
              - confirmation_code
      responses:
        '201':
          description: Successful response
          content:
            application/json:
              schema:
                type: object
                required:
                - message
                properties:
                  message:
                    type: string
                    example: Password has been reset
        '422':
          $ref: '#/components/responses/422AuthValidationError'
        default:
          $ref: '#/components/responses/UnknownError'
      operationId: postV2AuthenticationResetPassword
      x-operation-id-source: derived
  /v2/authentication/user:
    get:
      tags:
      - Authentication
      security:
      - bearerAuth: []
      summary: User information
      description: Get information about the user who issued token
      responses:
        '200':
          description: Successful response
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/User'
        '401':
          $ref: '#/components/responses/UnauthorizedError'
        default:
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorModel'
          description: Error response.
      operationId: getV2AuthenticationUser
      x-operation-id-source: derived
components:
  schemas:
    ErrorModel:
      title: Error Model
      description: An error response from the OK Capsule API
      type: object
      properties:
        error:
          title: Error Model Content
          type: object
          description: Error details object
          required:
          - message
          properties:
            errorCode:
              description: For some errors that could be handled programmatically, a short string indicating the error code.
              maxLength: 5000
              type: string
              example: RESOURCE_NOT_FOUND
            message:
              description: A human-readable message providing more details about the error.
              maxLength: 40000
              type: string
              example: The requested resource was not found
        message:
          description: Top-level error message (present in some error responses)
          type: string
          example: Internal Server Error
      required:
      - error
    User:
      allOf:
      - type: object
        required:
        - id
        - client_id
        properties:
          id:
            type: string
            format: uuid
            readOnly: true
            example: d290f1ee-6c54-4b01-90e6-d701748f0851
          client_id:
            type:
            - string
            - 'null'
            format: uuid
            example: d290f1ee-6c54-4b01-90e6-d701748f0851
          user_type:
            type: string
            enum:
            - client
            - internal
            example: client
          name:
            type: string
            example: John Doe
          username:
            type: string
            format: uuid
            readOnly: true
            example: 087078ea-4b50-4a46-bb4d-322cf17db3ca
            description: Same as id (Cognito sub)
          email:
            type: string
            format: email
            example: user@example.com
          locale:
            type:
            - string
            - 'null'
            example: en-US
          roles:
            type: array
            items:
              type: string
              enum:
              - Client_Admin
              - Client_Manager
              - Client_Developer
              - Client_User
              - Internal_Admin
              - Internal_Manager
              - Internal_Developer
              - Internal_User
            example:
            - Client_Manager
            - Client_Developer
          phone_number:
            type:
            - string
            - 'null'
            format: E.164
            example: 12133734253
          last_login:
            type:
            - string
            - 'null'
            format: date-time
            readOnly: true
            example: '2023-06-29T11:12:28Z'
      - type: object
        required:
        - created_at
        - updated_at
        properties:
          created_at:
            type: string
            format: date-time
            readOnly: true
            example: '2023-03-20T09:12:28Z'
          updated_at:
            type: string
            format: date-time
            readOnly: true
            example: '2023-03-20T09:12:28Z'
  responses:
    422AuthValidationError:
      description: Validation error response from authentication endpoints (gateway service)
      content:
        application/json:
          schema:
            type: object
            required:
            - error
            properties:
              error:
                type: object
                required:
                - message
                - errors
                properties:
                  message:
                    type: string
                    example: Validation error
                  errors:
                    type: array
                    items:
                      type: object
                      required:
                      - message
                      - type
                      properties:
                        message:
                          type: string
                          example: '''username'' is required'
                        type:
                          type: string
                          example: any.required
    UnknownError:
      description: Error response.
      content:
        application/json:
          schema:
            title: Error Model
            description: An error response from the OK Capsule API
            type: object
            properties:
              error:
                title: Error Model Content
                type: object
                description: Error details object
                required:
                - message
                properties:
                  errorCode:
                    description: For some errors that could be handled programmatically, a short string indicating the error code.
                    maxLength: 5000
                    type: string
                    example: RESOURCE_NOT_FOUND
                  message:
                    description: A human-readable message providing more details about the error.
                    maxLength: 40000
                    type: string
                    example: The requested resource was not found
              message:
                description: Top-level error message (present in some error responses)
                type: string
                example: Internal Server Error
            required:
            - error
    UnauthorizedError:
      description: Authentication information is missing or invalid
      content:
        application/json:
          schema:
            properties:
              error:
                properties:
                  message:
                    type: string
                    example: Unauthorized
                required:
                - message
                type: object
            required:
            - error
            type: object
  securitySchemes:
    bearerAuth:
      type: http
      scheme: bearer
      bearerFormat: JWT