Every API here is available over the APIs.io API and to AI agents over MCP.
openapi: 3.2.0
info:
title: Stytch Consumer Authentication Impersonation API
version: 2.0.0
description: Stytch's Consumer API for passwordless and password-based authentication. Supports Magic Links, SMS/email/WhatsApp OTP, OAuth social login, TOTP, WebAuthn/Passkeys, Crypto Wallets, Sessions, Users, M2M tokens, Fraud / Device Fingerprinting, Connected Apps (OAuth provider / MCP), Impersonation, IDP, and Consumer RBAC.
contact:
name: Stytch
url: https://stytch.com/docs
license:
name: Proprietary
servers:
- url: https://api.stytch.com
description: Production
- url: https://test.stytch.com
description: Test
tags:
- name: Impersonation
paths:
/v1/impersonation/authenticate:
post:
summary: Authenticate
operationId: api_impersonation_v1_Authenticate
tags:
- Impersonation
description: 'Authenticate an impersonation token to impersonate a User. This endpoint requires an impersonation token that is not expired or previously used.
A Stytch session will be created for the impersonated user with a 60 minute duration. Impersonated sessions cannot be extended.
Prior to this step, you can generate an impersonation token by visiting the Stytch Dashboard, viewing a user, and clicking the `Impersonate User` button.'
requestBody:
required: true
content:
application/json:
schema:
$ref: '#/components/schemas/api_impersonation_v1_AuthenticateRequest'
responses:
'200':
description: Successful response
content:
application/json:
schema:
$ref: '#/components/schemas/api_impersonation_v1_AuthenticateResponse'
'400':
description: Bad request
'401':
description: Unauthorized
content:
application/json:
example:
status_code: 401
request_id: request-id-test-b05c992f-ebdc-489d-a754-c7e70ba13141
error_type: unauthorized_credentials
error_message: Unauthorized credentials.
error_url: https://stytch.com/docs/api/errors/401
'429':
description: Too Many Requests
content:
application/json:
example:
status_code: 429
request_id: request-id-test-b05c992f-ebdc-489d-a754-c7e70ba13141
error_type: too_many_requests
error_message: Too many requests have been made.
error_url: https://stytch.com/docs/api/errors/429
'500':
description: Internal server error
content:
application/json:
example:
status_code: 500
request_id: request-id-test-b05c992f-ebdc-489d-a754-c7e70ba13141
error_type: internal_server_error
error_message: Oops, something seems to have gone wrong, please reach out to support@stytch.com to let us know what went wrong.
error_url: https://stytch.com/docs/api/errors/500
x-code-samples:
- lang: csharp
label: C#
source: "// POST /v1/impersonation/authenticate\nconst stytch = require('stytch');\n\nconst client = new stytch.Client({\n project_id: '${projectId}',\n secret: '${secret}',\n});\n\nconst params = {\n impersonation_token: \"${token}\",\n};\n\nclient.Impersonation.Authenticate(params)\n .then(resp => { console.log(resp) })\n .catch(err => { console.log(err) });"
- lang: go
label: Go
source: "// POST /v1/impersonation/authenticate\npackage main\n\nimport (\n\t\"context\"\n\t\"log\"\n\n\t\"github.com/stytchauth/stytch-go/v17/stytch/consumer/impersonation\"\n\t\"github.com/stytchauth/stytch-go/v17/stytch/consumer/stytchapi\"\n)\n\nfunc main() {\n\tclient, err := stytchapi.NewClient(\n\t\t\"${projectId}\",\n\t\t\"${secret}\",\n\t)\n\tif err != nil {\n\t\tlog.Fatalf(\"error instantiating client: %v\", err)\n\t}\n\n\tparams := &impersonation.AuthenticateParams{\n\t\tImpersonationToken: \"${token}\",\n\t}\n\n\tresp, err := client.Impersonation.Authenticate(context.Background(), params)\n\tif err != nil {\n\t\tlog.Fatalf(\"error in method call: %v\", err)\n\t}\n\n\tlog.Println(resp)\n}\n"
- lang: java
label: Java
source: "// POST /v1/impersonation/authenticate\npackage com.example;\n\nimport com.stytch.java.common.StytchResult;\nimport com.stytch.java.consumer.models.impersonation.AuthenticateRequest;\nimport com.stytch.java.consumer.StytchClient;\n\npublic class Main {\n public static void main(String[] args) {\n StytchClient.configure(\"${projectId}\", \"${secret}\");\n\n AuthenticateRequest params = new AuthenticateRequest();\n params.setImpersonationToken(\"${token}\");\n\n Object result = StytchClient.getImpersonation().authenticate(params);\n if (result instanceof StytchResult.Success) {\n System.out.println(((StytchResult.Success) result).getValue());\n } else {\n System.out.println(((StytchResult.Error) result).getException());\n }\n }\n}"
- lang: kotlin
label: Kotlin
source: "// POST /v1/impersonation/authenticate\npackage com.example\n\nimport com.stytch.java.consumer.StytchClient\nimport com.stytch.java.consumer.models.impersonation.AuthenticateRequest\n\nfun main() {\n StytchClient.configure(\n projectId = \"${projectId}\",\n secret = \"${secret}\",\n )\n\n when (\n val result =\n StytchClient.impersonation.authenticate(\n AuthenticateRequest(\n impersonationToken = \"${token}\",\n ),\n )\n ) {\n is StytchResult.Success -> println(result.value)\n is StytchResult.Error -> println(result.exception)\n }\n}\n"
- lang: javascript
label: Node.js
source: "// POST /v1/impersonation/authenticate\nconst stytch = require('stytch');\n\nconst client = new stytch.Client({\n project_id: '${projectId}',\n secret: '${secret}',\n});\n\nconst params = {\n impersonation_token: \"${token}\",\n};\n\nclient.impersonation.authenticate(params)\n .then(resp => { console.log(resp) })\n .catch(err => { console.log(err) });"
- lang: php
label: PHP
source: "$response = $client->impersonation->authenticate([\n 'impersonation_token' => '${token}',\n]);"
- lang: python
label: Python
source: "# POST /v1/impersonation/authenticate\nfrom stytch import Client\n\nclient = Client(\n project_id=\"${projectId}\",\n secret=\"${secret}\",\n)\n\nresp = client.impersonation.authenticate(\n impersonation_token=\"${token}\",\n)\n\nprint(resp)\n"
- lang: ruby
label: Ruby
source: "# POST /v1/impersonation/authenticate\nrequire 'stytch'\n\nclient = Stytch::Client.new(\n project_id: \"${projectId}\",\n secret: \"${secret}\"\n)\n\nresp = client.impersonation.authenticate(\n impersonation_token: \"${token}\"\n \n)\n\nputs resp"
- lang: rust
label: Rust
source: "// POST /v1/impersonation/authenticate\nuse stytch::consumer::client::Client;\nuse stytch::consumer::impersonation::AuthenticateRequest;\n\nfn main() {\n let client = Client::new(\"${projectId}\", \"${secret}\").unwrap();\n let resp = client.impersonation.authenticate(\n AuthenticateRequest{\n impersonation_token: \"${token}\",\n ..Default::default()\n }\n ).await;\n println!(\"The response is {:?}\", resp);\n}"
- lang: bash
label: cURL
source: "# POST /v1/impersonation/authenticate\ncurl --request POST \\\n --url https://test.stytch.com/v1/impersonation/authenticate \\\n -u '${projectId}:${secret}' \\\n -H 'Content-Type: application/json' \\\n -d '{\n \"impersonation_token\": \"${token}\"\n }'"
components:
schemas:
api_session_v1_AuthenticationFactorDeliveryMethod:
type: string
enum:
- email
- sms
- whatsapp
- embedded
- oauth_google
- oauth_microsoft
- oauth_apple
- webauthn_registration
- authenticator_app
- oauth_github
- recovery_code
- oauth_facebook
- crypto_wallet
- oauth_amazon
- oauth_bitbucket
- oauth_coinbase
- oauth_discord
- oauth_figma
- oauth_gitlab
- oauth_instagram
- oauth_linkedin
- oauth_shopify
- oauth_slack
- oauth_snapchat
- oauth_spotify
- oauth_steam
- oauth_tiktok
- oauth_twitch
- oauth_twitter
- knowledge
- biometric
- sso_saml
- sso_oidc
- oauth_salesforce
- oauth_yahoo
- oauth_hubspot
- imported_auth0
- oauth_exchange_slack
- oauth_exchange_hubspot
- oauth_exchange_github
- oauth_exchange_google
- impersonation
- oauth_access_token_exchange
- trusted_token_exchange
api_user_v1_BiometricRegistration:
type: object
properties:
biometric_registration_id:
type: string
description: The unique ID for a biometric registration.
verified:
type: boolean
description: The verified boolean denotes whether or not this send method, e.g. phone number, email address, etc., has been successfully authenticated by the User.
required:
- biometric_registration_id
- verified
api_session_v1_OAuthAccessTokenExchangeFactor:
type: object
properties:
client_id:
type: string
description: The ID of the Connected App client.
required:
- client_id
api_session_v1_InstagramOAuthFactor:
type: object
properties:
id:
type: string
provider_subject:
type: string
email_id:
type: string
required:
- id
- provider_subject
api_session_v1_SteamOAuthFactor:
type: object
properties:
id:
type: string
provider_subject:
type: string
email_id:
type: string
required:
- id
- provider_subject
api_session_v1_GitLabOAuthFactor:
type: object
properties:
id:
type: string
provider_subject:
type: string
email_id:
type: string
required:
- id
- provider_subject
api_session_v1_SAMLSSOFactor:
type: object
properties:
id:
type: string
description: The unique ID of an SSO Registration.
provider_id:
type: string
description: Globally unique UUID that identifies a specific SAML Connection.
external_id:
type: string
description: The ID of the member given by the identity provider.
required:
- id
- provider_id
- external_id
api_session_v1_LinkedInOAuthFactor:
type: object
properties:
id:
type: string
provider_subject:
type: string
email_id:
type: string
required:
- id
- provider_subject
api_session_v1_BitbucketOAuthFactor:
type: object
properties:
id:
type: string
provider_subject:
type: string
email_id:
type: string
required:
- id
- provider_subject
api_session_v1_ImpersonatedFactor:
type: object
properties:
impersonator_id:
type: string
description: For impersonated sessions initiated via the Stytch Dashboard, the `impersonator_id` will be the impersonator's Stytch Dashboard `member_id`.
impersonator_email_address:
type: string
description: The email address of the impersonator.
required:
- impersonator_id
- impersonator_email_address
api_session_v1_AppleOAuthFactor:
type: object
properties:
id:
type: string
provider_subject:
type: string
email_id:
type: string
required:
- id
- provider_subject
api_impersonation_v1_AuthenticateResponse:
type: object
properties:
request_id:
type: string
description: Globally unique UUID that is returned with every API call. This value is important to log for debugging purposes; we may ask for this value to help identify a specific API call when helping you debug an issue.
user_id:
type: string
description: The unique ID of the affected User.
user:
$ref: '#/components/schemas/api_user_v1_User'
description: The `user` object affected by this API call. See the [Get user endpoint](https://stytch.com/docs/api/get-user) for complete response field details.
session_token:
type: string
description: A secret token for a given Stytch Session.
session_jwt:
type: string
description: The JSON Web Token (JWT) for a given Stytch Session.
status_code:
type: integer
format: int32
description: The HTTP status code of the response. Stytch follows standard HTTP response status code patterns, e.g. 2XX values equate to success, 3XX values are redirects, 4XX are client errors, and 5XX are server errors.
session:
$ref: '#/components/schemas/api_session_v1_Session'
description: "If you initiate a Session, by including `session_duration_minutes` in your authenticate call, you'll receive a full Session object in the response.\n\n See [Session object](https://stytch.com/docs/api/session-object) for complete response fields.\n "
required:
- request_id
- user_id
- user
- session_token
- session_jwt
- status_code
api_session_v1_FigmaOAuthFactor:
type: object
properties:
id:
type: string
provider_subject:
type: string
email_id:
type: string
required:
- id
- provider_subject
api_user_v1_OAuthProvider:
type: object
properties:
provider_type:
type: string
description: Denotes the OAuth identity provider that the user has authenticated with, e.g. Google, Facebook, GitHub etc.
provider_subject:
type: string
description: The unique identifier for the User within a given OAuth provider. Also commonly called the "sub" or "Subject field" in OAuth protocols.
profile_picture_url:
type: string
description: If available, the `profile_picture_url` is a url of the User's profile picture set in OAuth identity the provider that the User has authenticated with, e.g. Facebook profile picture.
locale:
type: string
description: If available, the `locale` is the User's locale set in the OAuth identity provider that the user has authenticated with.
oauth_user_registration_id:
type: string
description: The unique ID for an OAuth registration.
required:
- provider_type
- provider_subject
- profile_picture_url
- locale
- oauth_user_registration_id
api_session_v1_MicrosoftOAuthFactor:
type: object
properties:
id:
type: string
description: The unique ID of an OAuth registration.
provider_subject:
type: string
description: The unique identifier for the User within a given OAuth provider. Also commonly called the `sub` or "Subject field" in OAuth protocols.
email_id:
type: string
description: The globally unique UUID of the Member's email.
required:
- id
- provider_subject
api_session_v1_GoogleOAuthExchangeFactor:
type: object
properties:
email_id:
type: string
description: The globally unique UUID of the Member's email.
required:
- email_id
api_session_v1_TwitchOAuthFactor:
type: object
properties:
id:
type: string
provider_subject:
type: string
email_id:
type: string
required:
- id
- provider_subject
api_session_v1_Session:
type: object
properties:
session_id:
type: string
description: A unique identifier for a specific Session.
user_id:
type: string
description: The unique ID of the affected User.
authentication_factors:
type: array
items:
$ref: '#/components/schemas/api_session_v1_AuthenticationFactor'
description: An array of different authentication factors that comprise a Session.
roles:
type: array
items:
type: string
started_at:
type: string
description: The timestamp when the Session was created. Values conform to the RFC 3339 standard and are expressed in UTC, e.g. `2021-12-29T12:33:09Z`.
last_accessed_at:
type: string
description: The timestamp when the Session was last accessed. Values conform to the RFC 3339 standard and are expressed in UTC, e.g. `2021-12-29T12:33:09Z`.
expires_at:
type: string
description: The timestamp when the Session expires. Values conform to the RFC 3339 standard and are expressed in UTC, e.g. `2021-12-29T12:33:09Z`.
attributes:
$ref: '#/components/schemas/api_attribute_v1_Attributes'
description: Provided attributes help with fraud detection.
custom_claims:
type: object
additionalProperties: true
description: The custom claims map for a Session. Claims can be added to a session during a Sessions authenticate call.
required:
- session_id
- user_id
- authentication_factors
- roles
api_user_v1_User:
type: object
properties:
user_id:
type: string
description: The unique ID of the affected User.
emails:
type: array
items:
$ref: '#/components/schemas/api_user_v1_Email'
description: An array of email objects for the User.
status:
type: string
description: The status of the User. The possible values are `pending` and `active`.
phone_numbers:
type: array
items:
$ref: '#/components/schemas/api_user_v1_PhoneNumber'
description: An array of phone number objects linked to the User.
webauthn_registrations:
type: array
items:
$ref: '#/components/schemas/api_user_v1_WebAuthnRegistration'
description: An array that contains a list of all Passkey or WebAuthn registrations for a given User in the Stytch API.
providers:
type: array
items:
$ref: '#/components/schemas/api_user_v1_OAuthProvider'
description: An array of OAuth `provider` objects linked to the User.
totps:
type: array
items:
$ref: '#/components/schemas/api_user_v1_TOTP'
description: An array containing a list of all TOTP instances for a given User in the Stytch API.
crypto_wallets:
type: array
items:
$ref: '#/components/schemas/api_user_v1_CryptoWallet'
description: An array contains a list of all crypto wallets for a given User in the Stytch API.
biometric_registrations:
type: array
items:
$ref: '#/components/schemas/api_user_v1_BiometricRegistration'
description: An array that contains a list of all biometric registrations for a given User in the Stytch API.
is_locked:
type: boolean
description: Whether the User is temporarily locked due to too many failed authentication attempts. See the [User Locking Guide](https://stytch.com/docs/resources/platform/user-locks) for more information.
roles:
type: array
items:
type: string
description: "Roles assigned to this User.\n See the [RBAC guide](https://stytch.com/docs/guides/rbac/role-assignment) for more information about role assignment."
name:
$ref: '#/components/schemas/api_user_v1_Name'
description: The name of the User. Each field in the `name` object is optional.
created_at:
type: string
description: The timestamp of the User's creation. Values conform to the RFC 3339 standard and are expressed in UTC, e.g. `2021-12-29T12:33:09Z`.
password:
$ref: '#/components/schemas/api_user_v1_Password'
description: The password object is returned for users with a password.
trusted_metadata:
type: object
additionalProperties: true
description: The `trusted_metadata` field contains an arbitrary JSON object of application-specific data. See the [Metadata](https://stytch.com/docs/api/metadata) reference for complete field behavior details.
untrusted_metadata:
type: object
additionalProperties: true
description: The `untrusted_metadata` field contains an arbitrary JSON object of application-specific data. Untrusted metadata can be edited by end users directly via the SDK, and **cannot be used to store critical information.** See the [Metadata](https://stytch.com/docs/api/metadata) reference for complete field behavior details.
external_id:
type: string
description: An identifier that can be used in most API calls where a `member_id` is expected. This is a string consisting of alphanumeric, `.`, `_`, `-`, or `|` characters with a maximum length of 128 characters. External IDs must be unique within the project.
lock_created_at:
type: string
description: When the user lock was created, if there is one. Values conform to the RFC 3339 standard and are expressed in UTC, e.g. `2021-12-29T12:33:09Z`.
lock_expires_at:
type: string
description: When the user lock expires, if there is one. Values conform to the RFC 3339 standard and are expressed in UTC, e.g. `2021-12-29T12:33:09Z`.
required:
- user_id
- emails
- status
- phone_numbers
- webauthn_registrations
- providers
- totps
- crypto_wallets
- biometric_registrations
- is_locked
- roles
api_session_v1_HubspotOAuthFactor:
type: object
properties:
id:
type: string
description: The unique ID of an OAuth registration.
provider_subject:
type: string
description: The unique identifier for the User within a given OAuth provider. Also commonly called the `sub` or "Subject field" in OAuth protocols.
email_id:
type: string
description: The globally unique UUID of the Member's email.
required:
- id
- provider_subject
api_session_v1_ShopifyOAuthFactor:
type: object
properties:
id:
type: string
provider_subject:
type: string
email_id:
type: string
required:
- id
- provider_subject
api_session_v1_SnapchatOAuthFactor:
type: object
properties:
id:
type: string
provider_subject:
type: string
email_id:
type: string
required:
- id
- provider_subject
api_session_v1_SlackOAuthExchangeFactor:
type: object
properties:
email_id:
type: string
description: The globally unique UUID of the Member's email.
required:
- email_id
api_session_v1_SlackOAuthFactor:
type: object
properties:
id:
type: string
description: The unique ID of an OAuth registration.
provider_subject:
type: string
description: The unique identifier for the User within a given OAuth provider. Also commonly called the `sub` or "Subject field" in OAuth protocols.
email_id:
type: string
description: The globally unique UUID of the Member's email.
required:
- id
- provider_subject
api_user_v1_Password:
type: object
properties:
password_id:
type: string
description: The unique ID of a specific password
requires_reset:
type: boolean
description: Indicates whether this password requires a password reset
required:
- password_id
- requires_reset
api_session_v1_CoinbaseOAuthFactor:
type: object
properties:
id:
type: string
provider_subject:
type: string
email_id:
type: string
required:
- id
- provider_subject
api_session_v1_RecoveryCodeFactor:
type: object
properties:
totp_recovery_code_id:
type: string
required:
- totp_recovery_code_id
api_session_v1_YahooOAuthFactor:
type: object
properties:
id:
type: string
provider_subject:
type: string
email_id:
type: string
required:
- id
- provider_subject
api_session_v1_TrustedAuthTokenFactor:
type: object
properties:
token_id:
type: string
description: The ID of the trusted auth token.
required:
- token_id
api_session_v1_SalesforceOAuthFactor:
type: object
properties:
id:
type: string
provider_subject:
type: string
email_id:
type: string
required:
- id
- provider_subject
api_session_v1_AuthenticationFactorType:
type: string
enum:
- magic_link
- otp
- oauth
- webauthn
- totp
- crypto
- password
- signature_challenge
- sso
- imported
- recovery_codes
- email_otp
- impersonated
- trusted_auth_token
api_session_v1_OIDCSSOFactor:
type: object
properties:
id:
type: string
description: The unique ID of an SSO Registration.
provider_id:
type: string
description: Globally unique UUID that identifies a specific OIDC Connection.
external_id:
type: string
description: The ID of the member given by the identity provider.
required:
- id
- provider_id
- external_id
api_session_v1_WebAuthnFactor:
type: object
properties:
webauthn_registration_id:
type: string
domain:
type: string
user_agent:
type: string
required:
- webauthn_registration_id
- domain
api_session_v1_HubspotOAuthExchangeFactor:
type: object
properties:
email_id:
type: string
description: The globally unique UUID of the Member's email.
required:
- email_id
api_session_v1_AuthenticatorAppFactor:
type: object
properties:
totp_id:
type: string
description: Globally unique UUID that identifies a TOTP instance.
required:
- totp_id
api_session_v1_GithubOAuthFactor:
type: object
properties:
id:
type: string
description: The unique ID of an OAuth registration.
provider_subject:
type: string
description: The unique identifier for the User within a given OAuth provider. Also commonly called the `sub` or "Subject field" in OAuth protocols.
email_id:
type: string
description: The globally unique UUID of the Member's email.
required:
- id
- provider_subject
api_session_v1_SpotifyOAuthFactor:
type: object
properties:
id:
type: string
provider_subject:
type: string
email_id:
type: string
required:
- id
- provider_subject
api_session_v1_EmailFactor:
type: object
properties:
email_id:
type: string
description: The globally unique UUID of the Member's email.
email_address:
type: string
description: The email address of the Member.
required:
- email_id
- email_address
api_user_v1_WebAuthnRegistration:
type: object
properties:
webauthn_registration_id:
type: string
description: The unique ID for the Passkey or WebAuthn registration.
domain:
type: string
description: The `domain` on which Passkey or WebAuthn registration was started. This will be the domain of your app.
user_agent:
type: string
description: The user agent of the User.
verified:
type: boolean
description: The verified boolean denotes whether or not this send method, e.g. phone number, email address, etc., has been successfully authenticated by the User.
authenticator_type:
type: string
description: The `authenticator_type` string displays the requested authenticator type of the Passkey or WebAuthn device. The two valid types are "platform" and "cross-platform". If no value is present, the Passkey or WebAuthn device was created without an authenticator type preference.
name:
type: string
description: The `name` of the Passkey or WebAuthn registration.
required:
- webauthn_registration_id
- domain
- user_agent
- verified
- authenticator_type
- name
api_user_v1_CryptoWallet:
type: object
properties:
crypto_wallet_id:
type: string
description: The unique ID for a crypto wallet
crypto_wallet_address:
type: string
description: The actual blockchain address of the User's crypto wallet.
crypto_wallet_type:
type: string
description: The blockchain that the User's crypto wallet operates on, e.g. Ethereum, Solana, etc.
verified:
type: boolean
description: The verified boolean denotes whether or not this send method, e.g. phone number, email address, etc., has been successfully authenticated by the User.
required:
- crypto_wallet_id
- crypto_wallet_address
- crypto_wallet_type
- verified
api_session_v1_DiscordOAuthFactor:
type: object
properties:
id:
type: string
provider_subject:
type: string
email_id:
type: string
required:
- id
- provider_subject
api_session_v1_AmazonOAuthFactor:
type: object
properties:
id:
type: string
provider_subject:
type: string
email_id:
type: string
required:
- id
- provider_subject
api_session_v1_GoogleOAuthFactor:
type: object
properties:
id:
type: string
description: The unique ID of an OAuth registration.
provider_subject:
type: string
description: The unique identifier for the User within a given OAuth provider. Also commonly called the `sub` or "Subject field" in OAuth protocols.
email_id:
type: string
description: The globally unique UUID of the Member's email.
required:
- id
- provider_subject
api_attribute_v1_Attributes:
type: object
properties:
ip_address:
type: string
description: The IP address of the user.
user_agent:
type: string
description: The user agent of the User.
api_session_v1_CryptoWalletFactor:
type: object
properties:
crypto_wallet_id:
type: string
crypto_wallet_address:
type: string
crypto_wallet_type:
type: string
required:
- crypto_wallet_id
- crypto_wallet_address
- crypto_wallet_type
api_session_v1_PhoneNumberFactor:
type: object
properties:
phone_id:
type: string
description: The globally unique UUID of the Member's phone number.
phone_number:
type: string
description: The phone number of the Member.
required:
- phone_id
- phone_numb
# --- truncated at 32 KB (43 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/stytch/refs/heads/main/openapi/stytch-impersonation-api-openapi.yml