SmallStep

SmallStep Protect API

Manage access to protected resources

GitHub OpenAPI

Operations 43

GET /accounts List Accounts #
POST /accounts Create Account #
DELETE /accounts/{accountID} Delete Account #
GET /accounts/{accountID} Get Account #
PUT /accounts/{accountID} Update Account #
GET /endpoint-configurations List Endpoint Configurations #
POST /endpoint-configurations Create Endpoint Configuration #
DELETE /endpoint-configurations/{endpointConfigurationID} Delete Endpoint Configuration #
GET /endpoint-configurations/{endpointConfigurationID} Get Endpoint Configuration #
PUT /endpoint-configurations/{endpointConfigurationID} Update Endpoint Configuration #
GET /managed-radius List Managed RADIUS Servers #
POST /managed-radius Create Managed RADIUS #
DELETE /managed-radius/{managedRadiusID} Delete Managed RADIUS #
GET /managed-radius/{managedRadiusID} Get Managed RADIUS #
PUT /managed-radius/{managedRadiusID} Put Managed RADIUS #
GET /protect/browser List Browser mTLS Configurations #
POST /protect/browser Create Browser mTLS Configuration #
DELETE /protect/browser/{browserID} Delete Browser mTLS Configuration #
GET /protect/browser/{browserID} Get Browser mTLS Configuration #
PUT /protect/browser/{browserID} Update Browser mTLS Configuration #
GET /protect/ethernet List Ethernet Device Configurations #
POST /protect/ethernet Create Ethernet Device Configuration #
DELETE /protect/ethernet/{ethernetID} Delete Ethernet Device Configuration #
GET /protect/ethernet/{ethernetID} Get Ethernet Device Configuration #
PUT /protect/ethernet/{ethernetID} Update Ethernet Device Configuration #
GET /protect/vpn List VPN Device Configurations #
POST /protect/vpn Create VPN Device Configuration #
DELETE /protect/vpn/{vpnID} Delete VPN Device Configuration #
GET /protect/vpn/{vpnID} Get VPN Device Configuration #
PUT /protect/vpn/{vpnID} Update VPN Device Configuration #
GET /protect/wifi List Wi-Fi Device Configurations #
POST /protect/wifi Create Wi-Fi Device Configuration #
DELETE /protect/wifi/{wifiID} Delete Wi-Fi Device Configuration #
GET /protect/wifi/{wifiID} Get Wi-Fi Device Configuration #
PUT /protect/wifi/{wifiID} Update Wi-Fi Device Configuration #
DELETE /sso Delete Identity Provider #
GET /sso Get Identity Provider #
PUT /sso Create Identity Provider #
GET /sso/clients List IdP Clients #
POST /sso/clients Create IdP Client #
DELETE /sso/clients/{idpClientID} Delete IdP Client #
GET /sso/clients/{idpClientID} Get IdP Client #
PUT /sso/clients/{idpClientID} Update IdP Client #

Documentation

📖
Documentation
https://smallstep.com/docs/platform/smallstep-api/
📖
APIReference
https://gateway.smallstep.com/v2025-01-01

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/smallstep/refs/heads/main/openapi/smallstep-protect-api-openapi.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/smallstep-protect-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

smallstep-protect-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  contact:
    email: support@smallstep.com
    name: Smallstep Support
    url: https://support.smallstep.com
  description: '# Getting Started

    First you''ll need to get an API token from the Team Settings page of your Smallstep dashboard.


    Then you can try listing certificates for your first API call:

    ```

    set +o history

    echo "Authorization: Bearer [your API token]" > api_headers

    set -o history

    curl -H @api_headers https://gateway.smallstep.com/api/certificates

    ```


    More resources:

    * Terraform Provider

    * Python Client'
  license:
    name: Apache 2.0
    url: https://www.apache.org/licenses/LICENSE-2.0
  summary: Smallstep API
  title: Smallstep Protect API
  version: '2025-01-01'
servers:
- url: https://gateway.smallstep.com/api
security:
- JWT: []
tags:


# --- truncated at 32 KB (82 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/smallstep/refs/heads/main/openapi/smallstep-protect-api-openapi.yml