Strivacity API Security Policy API

The API Security Policy API from Strivacity — 4 operation(s) for api security policy.

Documentation GitHub OpenAPI

Business capability

Operations 9

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

GET /admin/api/v1/accessPolicies List API security policies · List API security policies #

Ask an LLM

“Which API security policies are configured in my instance?”

“Can I filter API security policies by audience or client?”

Tell an agent

List all API security policies.

Find API security policies with audience {audience}.

POST /admin/api/v1/accessPolicies Create an API security policy · Create an API security policy #

Ask an LLM

“How do I protect my API with a new security policy and audience?”

“What do I need to set up an API security policy in Strivacity?”

Tell an agent

Create an API security policy named {name} for audience {audience}.

Set up a new API security policy {name} with audience {audience}.

DELETE /admin/api/v1/accessPolicies/{policyId} Delete an API security policy · Delete an API security policy #

Ask an LLM

“How do I remove an API security policy I no longer use?”

“Can an API security policy be deleted entirely?”

Tell an agent destructive · confirm first

Delete API security policy {policy}.

Remove the API security policy {policy} permanently.

GET /admin/api/v1/accessPolicies/{policyId} Get an API security policy · Get an API security policy #

Ask an LLM

“What audience and settings does a given API security policy use?”

“Can I look up one API security policy by ID?”

Tell an agent

Get API security policy {policy}.

Show the details of API security policy {policy}.

PUT /admin/api/v1/accessPolicies/{policyId} Update an API security policy · Update an API security policy #

Ask an LLM

“How do I change the audience or name of an API security policy?”

“Can I retag an existing API security policy?”

Tell an agent

Update API security policy {policy} to audience {audience}.

Rename API security policy {policy} to {name}.

POST /admin/api/v1/accessPolicies/{policyId}/assignments Assign a client to an API security policy · Assign a client to an API security policy #

Ask an LLM

“How do I let a client call an API protected by a security policy?”

“Which clients can be assigned to an API security policy?”

Tell an agent

Assign client {client} to API security policy {policy} with scopes {scopes}.

Give client {client} access to API policy {policy}.

DELETE /admin/api/v1/accessPolicies/{policyId}/assignments/{clientId} Unassign a client from an API security policy · Delete an API security policy assignment #

Ask an LLM

“How do I revoke a client's access to an API security policy?”

“Can I remove a client assignment from a policy?”

Tell an agent destructive · confirm first

Remove client {client} from API security policy {policy}.

Revoke API policy {policy} access for client {client}.

GET /admin/api/v1/accessPolicies/{policyId}/assignments/{clientId} Get a client's API security policy assignment · Get an API security policy assignment #

Ask an LLM

“Which scopes does a client have on an API security policy?”

“Can I check whether a client is assigned to a policy?”

Tell an agent

Get the assignment of client {client} on API security policy {policy}.

Show scopes granted to client {client} under policy {policy}.

PUT /admin/api/v1/accessPolicies/{policyId}/assignments/{clientId} Change a client's API policy scopes · Update an API security policy assignment #

Ask an LLM

“How do I change the scopes a client has on an API security policy?”

“Can I update an existing client assignment on a policy?”

Tell an agent

Update client {client}'s assignment on policy {policy} to scopes {scopes}.

Change the scopes for client {client} on API security policy {policy}.

Documentation

📖

Documentation

https://docs.strivacity.com/docs/apis-and-sdks

📖

APIReference

https://docs.strivacity.com/reference/getting-started-with-the-admin-api

📖

GettingStarted

https://docs.strivacity.com/reference/getting-started-1

📖

APIReference

https://docs.strivacity.com/reference/getting-started-1

📖

Documentation

https://docs.strivacity.com/docs/oidc-client-using-the-journey-flow-api

Specifications

⚙

OpenAPI

https://raw.githubusercontent.com/api-evangelist/strivacity/refs/heads/main/openapi/strivacity-api-security-policy-api-openapi.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this

find_apisBrowse and filter every API in the catalog.
get_api_artifactsOne API's artifacts, grouped by type.
get_openapiThe primary OpenAPI for this API.
find_similar_apisAPIs that look like this one.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This API

curl "https://apis.io/api/v1/apis/strivacity:strivacity-api-security-policy-api"

All apis

curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

openapi: 3.2.0
info:
  description: API documentation of Admin Portal
  title: Admin Portal API Security Policy API
  version: v0.0.1
servers:
- url: https://{tenant}
  variables:
    tenant:
      default: example.strivacity.com
      description: Your Strivacity tenant
tags:
- name: API Security Policy
paths:
  /admin/api/v1/accessPolicies:
    get:
      description: 'You can list the existing API security policies by calling this endpoint.


        | REQUIRED API PERMISSION |

        |:------------------------|

        | read:config_api_access |'
      operationId: listApiAccessPolicies
      parameters:
      - description: Audience used for filtering
        in: query
        name: audience
        required: false
        schema:
          type: string
      - description: Assigned clients used for filtering
        in: query
        name: clients
        required: false
        schema:
          uniqueItems: true
          type: array
          items:
            type: string
      - description: Tags used for filtering must exactly match the tag name
        in: query
        name: policyTags
        required: false
        schema:
          uniqueItems: true
          type: array
          items:
            type: string
      - description: Name used for filtering
        in: query
        name: name
        required: false
        schema:
          type: string
      - description: Zero-based page index (0..N)
        in: query
        name: page
        schema:
          type: integer
          format: int64
          default: 0
      - description: The size of the page to be returned
        in: query
        name: size
        schema:
          type: integer
          format: int64
          default: 20
      - description: 'Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.'
        in: query
        name: sort
        schema:
          type: array
          items:
            type: string
      responses:
        '200':
          content:
            '*/*':
              schema:
                $ref: '#/components/schemas/PagedModelApiSecurityPolicyListResponse'
          description: OK
        '401':
          content:
            application/problem+json:
              schema:
                $ref: '#/components/schemas/ProblemJson'
          description: Unauthorized
        '403':
          content:
            application/problem+json:
              schema:
                $ref: '#/components/schemas/ProblemJson'
          description: Forbidden
      security:
      - securityScheme:
        - read:config_api_access
      summary: List API security policies
      tags:
      - API Security Policy
    post:
      description: 'You can create an API security policy by calling this endpoint.


        | REQUIRED API PERMISSION |

        |:------------------------|

        | write:config_api_access |'
      operationId: createApiAccessPolicy
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/ApiSecurityPolicy_InsertRequest'
        required: true
      responses:
        '201':
          content:
            '*/*':
              schema:
                $ref: '#/components/schemas/ApiSecurityPolicyResponse_ApiAccessPolicy'
          description: Created
        '400':
          content:
            '*/*':
              schema:
                $ref: '#/components/schemas/ProblemJson'
          description: Bad Request
        '401':
          content:
            application/problem+json:
              schema:
                $ref: '#/components/schemas/ProblemJson'
          description: Unauthorized
        '403':
          content:
            application/problem+json:
              schema:
                $ref: '#/components/schemas/ProblemJson'
          description: Forbidden
        '409':
          content:
            '*/*':
              schema:
                $ref: '#/components/schemas/ProblemJson'
          description: Conflict
      security:
      - securityScheme:
        - write:config_api_access
      summary: Create an API security policy
      tags:
      - API Security Policy
  /admin/api/v1/accessPolicies/{policyId}:
    delete:
      description: 'You can delete an API security policy by calling this endpoint.


        | REQUIRED API PERMISSION |

        |:------------------------|

        | delete:config_api_access |'
      operationId: deleteApiAccessPolicy
      parameters:
      - in: path
        name: policyId
        required: true
        schema:
          type: string
      responses:
        '204':
          description: No Content
        '401':
          content:
            application/problem+json:
              schema:
                $ref: '#/components/schemas/ProblemJson'
          description: Unauthorized
        '403':
          content:
            application/problem+json:
              schema:
                $ref: '#/components/schemas/ProblemJson'
          description: Forbidden
        '409':
          content:
            '*/*':
              schema:
                $ref: '#/components/schemas/ProblemJson'
          description: API security policy has assigned clients
      security:
      - securityScheme:
        - delete:config_api_access
      summary: Delete an API security policy
      tags:
      - API Security Policy
    get:
      description: 'You can get an API security policy by calling this endpoint.


        | REQUIRED API PERMISSION |

        |:------------------------|

        | read:config_api_access |'
      operationId: getApiAccessPolicy
      parameters:
      - in: path
        name: policyId
        required: true
        schema:
          type: string
      responses:
        '200':
          content:
            '*/*':
              schema:
                $ref: '#/components/schemas/ApiSecurityPolicyResponse_ApiAccessPolicy'
          description: OK
        '401':
          content:
            application/problem+json:
              schema:
                $ref: '#/components/schemas/ProblemJson'
          description: Unauthorized
        '403':
          content:
            application/problem+json:
              schema:
                $ref: '#/components/schemas/ProblemJson'
          description: Forbidden
        '404':
          content:
            '*/*':
              schema:
                $ref: '#/components/schemas/ProblemJson'
          description: Not Found
      security:
      - securityScheme:
        - read:config_api_access
      summary: Get an API security policy
      tags:
      - API Security Policy
    put:
      description: 'You can update an API security policy by calling this endpoint.


        | REQUIRED API PERMISSION |

        |:------------------------|

        | write:config_api_access |'
      operationId: updateApiAccessPolicy
      parameters:
      - in: path
        name: policyId
        required: true
        schema:
          type: string
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/ApiSecurityPolicyUpsertRequest_ApiAccessPolicy'
        required: true
      responses:
        '200':
          content:
            '*/*':
              schema:
                $ref: '#/components/schemas/ApiSecurityPolicyResponse_ApiAccessPolicy'
          description: OK
        '400':
          content:
            '*/*':
              schema:
                $ref: '#/components/schemas/ProblemJson'
          description: Bad Request
        '401':
          content:
            application/problem+json:
              schema:
                $ref: '#/components/schemas/ProblemJson'
          description: Unauthorized
        '403':
          content:
            application/problem+json:
              schema:
                $ref: '#/components/schemas/ProblemJson'
          description: Forbidden
        '404':
          content:
            '*/*':
              schema:
                $ref: '#/components/schemas/ProblemJson'
          description: Not Found
        '409':
          content:
            '*/*':
              schema:
                $ref: '#/components/schemas/ProblemJson'
          description: Conflict
      security:
      - securityScheme:
        - write:config_api_access
      summary: Update an API security policy
      tags:
      - API Security Policy
  /admin/api/v1/accessPolicies/{policyId}/assignments:
    post:
      description: 'You can assign a client to an API security policy by calling this endpoint. Only available clients can be assigned.


        | REQUIRED API PERMISSION |

        |:------------------------|

        | write:config_api_access |'
      operationId: createApplicationAssignment
      parameters:
      - in: path
        name: policyId
        required: true
        schema:
          type: string
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/ApiSecurityPolicyAssignmentUpsertRequest_ApiAccessPolicy'
        required: true
      responses:
        '201':
          content:
            '*/*':
              schema:
                $ref: '#/components/schemas/ApiSecurityPolicyAssignmentResponse_ApiAccessPolicy'
          description: Created
        '400':
          content:
            '*/*':
              schema:
                $ref: '#/components/schemas/ProblemJson'
          description: Bad Request
        '401':
          content:
            application/problem+json:
              schema:
                $ref: '#/components/schemas/ProblemJson'
          description: Unauthorized
        '403':
          content:
            application/problem+json:
              schema:
                $ref: '#/components/schemas/ProblemJson'
          description: Forbidden
        '404':
          content:
            '*/*':
              schema:
                $ref: '#/components/schemas/ProblemJson'
          description: Not Found
        '409':
          content:
            '*/*':
              schema:
                $ref: '#/components/schemas/ProblemJson'
          description: Conflict
      security:
      - securityScheme:
        - write:config_api_access
      summary: Assign a client to an API security policy
      tags:
      - API Security Policy
  /admin/api/v1/accessPolicies/{policyId}/assignments/{clientId}:
    delete:
      description: 'You can delete an API security policy assignment by calling this endpoint.


        | REQUIRED API PERMISSION |

        |:------------------------|

        | write:config_api_access |'
      operationId: deleteApplicationAssignmentFromApiAccessPolicy
      parameters:
      - in: path
        name: policyId
        required: true
        schema:
          type: string
      - in: path
        name: clientId
        required: true
        schema:
          type: string
      responses:
        '204':
          description: No Content
        '401':
          content:
            application/problem+json:
              schema:
                $ref: '#/components/schemas/ProblemJson'
          description: Unauthorized
        '403':
          content:
            application/problem+json:
              schema:
                $ref: '#/components/schemas/ProblemJson'
          description: Forbidden
        '404':
          content:
            '*/*':
              schema:
                $ref: '#/components/schemas/ProblemJson'
          description: Not Found
      security:
      - securityScheme:
        - write:config_api_access
      summary: Delete an API security policy assignment
      tags:
      - API Security Policy
    get:
      description: 'You can get an API security policy assignment for a given client ID by calling this endpoint.


        | REQUIRED API PERMISSION |

        |:------------------------|

        | read:config_api_access |'
      operationId: getApiAccessPolicyAssignmentByClientId
      parameters:
      - in: path
        name: policyId
        required: true
        schema:
          type: string
      - in: path
        name: clientId
        required: true
        schema:
          type: string
      responses:
        '200':
          content:
            '*/*':
              schema:
                $ref: '#/components/schemas/ApiSecurityPolicyAssignmentResponse_ApiAccessPolicy'
          description: OK
        '401':
          content:
            application/problem+json:
              schema:
                $ref: '#/components/schemas/ProblemJson'
          description: Unauthorized
        '403':
          content:
            application/problem+json:
              schema:
                $ref: '#/components/schemas/ProblemJson'
          description: Forbidden
        '404':
          content:
            '*/*':
              schema:
                $ref: '#/components/schemas/ProblemJson'
          description: Not Found
      security:
      - securityScheme:
        - read:config_api_access
      summary: Get an API security policy assignment
      tags:
      - API Security Policy
    put:
      description: 'You can update an API security policy assignment by calling this endpoint.


        | REQUIRED API PERMISSION |

        |:------------------------|

        | write:config_api_access |'
      operationId: updateApplicationAssignment
      parameters:
      - in: path
        name: policyId
        required: true
        schema:
          type: string
      - in: path
        name: clientId
        required: true
        schema:
          type: string
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/ApiSecurityPolicyAssignmentUpsertRequest_ApiAccessPolicy'
        required: true
      responses:
        '200':
          content:
            '*/*':
              schema:
                $ref: '#/components/schemas/ApiSecurityPolicyAssignmentResponse_ApiAccessPolicy'
          description: OK
        '400':
          content:
            '*/*':
              schema:
                $ref: '#/components/schemas/ProblemJson'
          description: Bad Request
        '401':
          content:
            application/problem+json:
              schema:
                $ref: '#/components/schemas/ProblemJson'
          description: Unauthorized
        '403':
          content:
            application/problem+json:
              schema:
                $ref: '#/components/schemas/ProblemJson'
          description: Forbidden
        '404':
          content:
            '*/*':
              schema:
                $ref: '#/components/schemas/ProblemJson'
          description: Not Found
      security:
      - securityScheme:
        - write:config_api_access
      summary: Update an API security policy assignment
      tags:
      - API Security Policy
components:
  schemas:
    PageMetadata:
      type: object
      properties:
        number:
          type: integer
          format: int64
        size:
          type: integer
          format: int64
        totalElements:
          type: integer
          format: int64
        totalPages:
          type: integer
          format: int64
    ApiSecurityPolicyAssignmentResponse_ApiAccessPolicy:
      type: object
      properties:
        apiAccessPolicy:
          $ref: '#/components/schemas/IdReferenceResponse_ApiAccessPolicy'
        application:
          $ref: '#/components/schemas/NameAndId_ApiAccessPolicy'
        client:
          $ref: '#/components/schemas/NameAndId_ApiAccessPolicy'
        scopes:
          uniqueItems: true
          type: array
          items:
            $ref: '#/components/schemas/ScopeResponse_ApiAccessPolicy'
    IdReferenceResponse_ApiAccessPolicy:
      type: object
      properties:
        id:
          type: string
          description: ID of the represented entity
    ApiSecurityPolicyUpsertRequest_ApiAccessPolicy:
      required:
      - audience
      - id
      - name
      type: object
      properties:
        audience:
          maxLength: 767
          minLength: 1
          pattern: '[^|]*'
          type: string
        description:
          maxLength: 1024
          minLength: 0
          type: string
        id:
          type: string
        name:
          maxLength: 255
          minLength: 1
          pattern: ^$|^[\p{L}\p{N}\-.:\/_(){}\[\]|&'"?!@+*°]([\p{L}\p{N}\-.:\/_(){}\[\]|&'"?!@+*° ]*[\p{L}\p{N}\-.:\/_(){}\[\]|&'"?!@+*°])?$
          type: string
        policyTag:
          pattern: ^[a-z0-9_]{2,32}$
          type: string
          description: Must be an existing policy tag name
    PagedModelApiSecurityPolicyListResponse:
      type: object
      properties:
        content:
          type: array
          items:
            $ref: '#/components/schemas/ApiSecurityPolicyListResponse'
        page:
          $ref: '#/components/schemas/PageMetadata'
    ApiSecurityPolicyAssignmentUpsertRequest_ApiAccessPolicy:
      required:
      - apiAccessPolicy
      - client
      - scopes
      type: object
      properties:
        apiAccessPolicy:
          $ref: '#/components/schemas/IdReferenceRequest_ApiAccessPolicy'
        client:
          $ref: '#/components/schemas/IdReferenceRequest_ApiAccessPolicy'
        scopes:
          maxItems: 2147483647
          minItems: 1
          type: array
          items:
            $ref: '#/components/schemas/IdReferenceRequest_ApiAccessPolicy'
    NameAndId_ApiAccessPolicy:
      type: object
      properties:
        id:
          type: string
          description: ID of the represented entity
    FieldError:
      type: object
      properties:
        field:
          type: string
        message:
          type: string
        objectName:
          type: string
    ScopeResponse_ApiAccessPolicy:
      type: object
      properties:
        displayName:
          type: string
        id:
          type: string
        name:
          type: string
    IdReferenceRequest_ApiAccessPolicy:
      required:
      - id
      type: object
      properties:
        id:
          pattern: ^[a-zA-Z0-9-]{1,36}$
          type: string
          description: ID of the represented entity
    ApiSecurityPolicyListResponse:
      type: object
      properties:
        audience:
          type: string
        description:
          type: string
        id:
          type: string
        name:
          type: string
        policyTag:
          type: string
    ProblemJson:
      type: object
      properties:
        detail:
          type: string
        entityName:
          type: string
          description: The name of the entity within the error has occurred
        errorKey:
          type: string
          description: A unique identifier of the error
        fieldErrors:
          type: array
          description: Field constraint violation errors
          items:
            $ref: '#/components/schemas/FieldError'
        message:
          type: string
          description: A unique identifier in format of 'error.{errorKey}'
        params:
          type: array
          description: Further information related to the actual error
          items:
            type: object
            additionalProperties:
              type: object
        path:
          type: string
          description: Request URI
        status:
          type: integer
          description: Status code
          format: int32
        title:
          type: string
      description: Based on [RFC 7807](https://datatracker.ietf.org/doc/html/rfc7807)
    ApiSecurityPolicyResponse_ApiAccessPolicy:
      type: object
      properties:
        assignments:
          uniqueItems: true
          type: array
          items:
            $ref: '#/components/schemas/ApiSecurityPolicyAssignmentResponse_ApiAccessPolicy'
        audience:
          type: string
        description:
          type: string
        id:
          type: string
        name:
          type: string
        policyTag:
          type: string
        scopes:
          uniqueItems: true
          type: array
          items:
            $ref: '#/components/schemas/ScopeResponse_ApiAccessPolicy'
    ApiSecurityPolicy_InsertRequest:
      required:
      - audience
      - name
      type: object
      properties:
        audience:
          maxLength: 767
          minLength: 1
          pattern: '[^|]*'
          type: string
        description:
          maxLength: 1024
          minLength: 0
          type: string
        name:
          maxLength: 255
          minLength: 1
          pattern: ^$|^[\p{L}\p{N}\-.:\/_(){}\[\]|&'"?!@+*°]([\p{L}\p{N}\-.:\/_(){}\[\]|&'"?!@+*° ]*[\p{L}\p{N}\-.:\/_(){}\[\]|&'"?!@+*°])?$
          type: string
        policyTag:
          pattern: ^[a-z0-9_]{2,32}$
          type: string
          description: Must be an existing policy tag name
  securitySchemes:
    securityScheme:
      scheme: bearer
      type: http