Work with this as data
Every API here is available over the APIs.io API and to AI agents over MCP.
MCP server
One button, every client — Claude, Cursor, VS Code and the rest.
https://apis.io/mcp
Tools for apis
7 MCP tools reach this
find_apisBrowse and filter every API in the catalog.get_api_artifactsOne API's artifacts, grouped by type.get_openapiThe primary OpenAPI for this API.find_similar_apisAPIs that look like this one.apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.resolveTurn a domain, URL or GitHub org into the provider it belongs to.find_cohortsEvery scored population of providers in the catalog.
Call it yourself
curl for this page
This API
curl "https://apis.io/api/v1/apis/opaque:opaque-auth-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.
Get an API key
Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.
A second provider on the same verified email joins the account you already have.
OpenAPI Specification
openapi: 3.2.0
info:
title: Opaque UI Auth API
version: '2.5'
description: This documentation details the REST API endpoints that the client exposes.
contact:
name: Opaque Systems
email: hello@opaque.co
servers:
- url: http://localhost:5001/
description: Local Server
security:
- sessionToken: []
refreshTokenCookie: []
tags:
- name: Auth
description: Authentication
paths:
/{version}/auth/logout:
parameters:
- $ref: '#/components/parameters/version'
post:
summary: Invalidate session token
operationId: user_logout
responses:
'200':
description: OK
description: Invalidate the session token provided in the header.
tags:
- Auth
/{version}/auth/register-with-sso:
parameters:
- $ref: '#/components/parameters/version'
post:
summary: Register With SSO
operationId: user_register_with_sso
responses:
'200':
description: OK
content:
application/json:
schema:
type: object
properties:
userIdentitySecret:
type: string
x-stoplight:
id: 8667rjfgm3j9y
format: byte
required:
- userIdentitySecret
requestBody:
content:
application/json:
schema:
type: object
properties:
id_token:
type: string
description: ID token returned from auth0, must contain an email claim.
passkey:
type: string
description: Result of passing the password through the PBKDF2-SHA256 algorithm with the email as the salt. This can be done locally (recommended) or via the create_passkey_from_password endpoint.
refreshToken:
type: string
description: refresh token returned from auth0
required:
- id_token
- passkey
description: 'Create a new user using an id_token and access_token gotten from auth0. Access token should be sent as a bearer token like other endpoints. Returns the users user_identity_secret.
Note: This method will only work if the flask server is run with the OPAQUE_FF_USE_SSO_INTEGRATION feature flag set to true.'
tags:
- Auth
parameters:
- schema:
type: string
in: header
name: Set-Cookie
security:
- sessionToken: []
/{version}/auth/refresh-token:
parameters:
- $ref: '#/components/parameters/version'
post:
summary: Get a new session token, id token pair
operationId: refresh_user_tokens
responses:
'200':
description: OK
content:
application/json:
schema:
type: object
properties:
accessToken:
type: string
idToken:
type: string
required:
- accessToken
'400':
description: 'Bad Request
- httpOnly cookie is not set'
content:
application/json:
schema:
$ref: ../models/Error.yaml
'401':
description: 'Unauthorized
- refresh token is expired.'
description: 'Returns a session token from the refresh token. The refresh token will be
taken from the refresh token cookie.'
tags:
- Auth
parameters: []
security:
- sessionToken: []
refreshTokenCookie: []
/{version}/auth/api-key:
parameters:
- $ref: '#/components/parameters/version'
get:
summary: Get API key
operationId: get_api_key
responses:
'200':
description: OK
content:
application/json:
schema:
type: object
properties:
apiKey:
type: string
required:
- apiKey
description: Get the API key for the user.
tags:
- Auth
security:
- userIdentitySecret: []
refreshTokenCookie: []
/{version}/auth/create-passkey-from-password:
parameters:
- $ref: '#/components/parameters/version'
post:
summary: Create passkey from password
tags:
- Auth
responses:
'200':
description: OK
content:
application/json:
schema:
type: object
properties:
passkey:
type: string
required:
- passkey
operationId: create_passkey_from_password
requestBody:
content:
application/json:
schema:
type: object
properties:
email:
type: string
format: email
password:
type: string
required:
- email
- password
description: 'Create a passkey from a password passed through the PBKDF2-SHA256 algorithm configured to use 600,011 iterations and the email as a salt. The supplied password must conform to the following guidelines:
* The password has a minimum length of eight characters.
* The password contains at least three of the following:
* A lowercase letter (a–z)
* An uppercase letter (A–Z)
* A number (0–9)
* A special character (@ $ ! % * # ? &)
Note that it is recommended to perform this encryption yourself locally; use of this endpoint is just an optional backup method.'
security: []
components:
parameters:
version:
in: path
name: version
schema:
type: string
default: v1.2
example: v1.2
description: Version of the API to call
required: true
securitySchemes:
sessionToken:
type: http
scheme: bearer
description: The bearer token is obtained from the `/login` and `/register` endpoints.
userIdentitySecret:
name: userIdentitySecret
type: apiKey
in: cookie
description: A binary blob derived from a user's passkey. It can be obtained from the `/login` and `/register` endpoints.
sessionTokenCookie:
name: sessionTokenCookie
type: apiKey
in: cookie
refreshTokenCookie:
name: refreshTokenCookie
type: apiKey
in: cookie
x-origin: origin
x-extension-with: x-extension-with