Resilience Identity (Auth0 Authorization Server)

The only publicly documented, machine-readable surface Resilience operates. portal.cyberresilience.com — the gated client and broker application — redirects through /v2/api/auth/login to an Auth0 tenant at auth.cyberresilience.com, which serves OpenID Connect Discovery 1.0 and RFC 8414 OAuth 2.0 Authorization Server Metadata anonymously, along with a JWKS. The tenant issues authorization-code + PKCE (S256) tokens for the private audience https://api.prod.resilienceinsurance.app and advertises client_credentials, device code, token exchange, JWT bearer, CIBA backchannel authentication, backchannel logout and DPoP (ES256). This is an identity surface, not a product API: the audience it names is an internal product API that 404s every discovery path anonymously, there is no self-serve client registration, and access requires an appointed-broker or policyholder relationship. It is catalogued because it is real, anonymous and machine-readable — and because it marks the honest boundary of what Resilience publishes.

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools

Call it yourself

curl for this page
This API
curl "https://apis.io/api/v1/apis/resilience-identity-auth0-authorization-server"
All apis
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no email required.

A second provider on the same verified email joins the account you already have.

API entry from apis.yml

apis.yml Raw ↑
name: Resilience Identity (Auth0 Authorization Server)
description: 'The only publicly documented, machine-readable surface Resilience operates. portal.cyberresilience.com
  — the gated client and broker application — redirects through /v2/api/auth/login to an Auth0 tenant
  at auth.cyberresilience.com, which serves OpenID Connect Discovery 1.0 and RFC 8414 OAuth 2.0 Authorization
  Server Metadata anonymously, along with a JWKS. The tenant issues authorization-code + PKCE (S256) tokens
  for the private audience https://api.prod.resilienceinsurance.app and advertises client_credentials,
  device code, token exchange, JWT bearer, CIBA backchannel authentication, backchannel logout and DPoP
  (ES256). This is an identity surface, not a product API: the audience it names is an internal product
  API that 404s every discovery path anonymously, there is no self-serve client registration, and access
  requires an appointed-broker or policyholder relationship. It is catalogued because it is real, anonymous
  and machine-readable — and because it marks the honest boundary of what Resilience publishes.'
humanURL: https://portal.cyberresilience.com/
baseURL: https://auth.cyberresilience.com
tags:
- Authentication
- OpenID Connect
- Identity
- Insurance
tags_raw:
- Authentication
- OpenID Connect
- OAuth 2.0
- Identity
- Insurance
properties:
- type: OpenIDConnect
  url: https://auth.cyberresilience.com/.well-known/openid-configuration
- type: WellKnown
  url: well-known/resilience-cyber-well-known.yml
- type: Authentication
  url: authentication/resilience-cyber-authentication.yml
- type: OAuthScopes
  url: scopes/resilience-cyber-scopes.yml