# Super.ai auth API

**Canonical:** https://apis.io/apis/superai/superai-auth-api/  
**Provider:** Super.ai — https://apis.io/providers/superai/  
**Base URL:** https://flows.super.ai/api  
**Documentation:** https://docs.flows.super.ai

Super.ai auth API is one of 19 APIs that [Super.ai](https://apis.io/providers/superai/) publishes on the [APIs.io](https://apis.io/) network, described by a machine-readable OpenAPI specification. Tagged areas include Authentication. The published artifact set on APIs.io includes an OpenAPI specification, an API reference, and authentication docs.

Authentication operations for user authentication, authorization, and session management. Authentication endpoints handle user identity verification, token generation, and access control throughout the platform. The system uses JWT (JSON Web Token) based authentication managed through core.flows.super.ai. **Authentication flow:** 1. Obtain credentials from your account at core.flows.super.ai 2. Authenticate to receive JWT access token and refresh token 3. Include access token in API requests via Authorization header 4. API validates tokens and extracts user identity and organization context 5. Tokens expire after 1 hour and must be refreshed **Key concepts:** - **Bearer Tokens**: Short-lived JWT tokens (1 hour) used for API requests - **Anon-Key**: Long-lived API key used to authenticate to the authentication API. - **Refresh Tokens**: Long-lived tokens used to obtain new access tokens - **Protected Routes**: Most endpoints require valid authentication - **Public Endpoints**: Limited whitelisted paths accessible without auth **Getting started with authentication:** 1. **Obtain your Anonymous Key** (public endpoint - no authentication required): ```bash curl https://flows.super.ai/api/auth/anon-key ``` 2. **Authenticate** to receive your tokens: ```bash curl -X POST 'https://core.flows.super.ai/auth/v1/token?grant_type=password' \ -H 'Content-Type: application/json' \ -H 'apikey: ANON_KEY' \ -d '{"email": "you@example.com", "password": "your-password"}' ``` This will return a JWT access token and refresh token. 3. **Use the access token** in your requests: ```bash curl -H "Authorization: Bearer YOUR_ACCESS_TOKEN" \ https://flows.super.ai/api/flows ``` **Token management:** - Access tokens expire after 1 hour - Use refresh tokens to obtain new access tokens without re-authenticating - Store tokens securely and never commit them to version control All API endpoints (except whitelisted public paths) require authentication. Include your bearer token in the Authorization header: `Bearer <token>`

## Machine-readable artifacts (4)

- **OpenAPI** — https://raw.githubusercontent.com/api-evangelist/superai/refs/heads/main/openapi/superai-auth-api-openapi.yml
- **APIReference** — https://docs.flows.super.ai/api-reference
- **Authentication** — https://raw.githubusercontent.com/api-evangelist/superai/refs/heads/main/authentication/superai-authentication.yml
- **APIsJSON** — https://raw.githubusercontent.com/api-evangelist/superai/refs/heads/main/apis.yml

## Other Super.ai APIs (12)

- [Super.ai files API](https://apis.io/apis/superai/superai-files-api/)
- [Super.ai flow-executions API](https://apis.io/apis/superai/superai-flow-executions-api/)
- [Super.ai flows API](https://apis.io/apis/superai/superai-flows-api/)
- [Super.ai human-review-tasks API](https://apis.io/apis/superai/superai-human-review-tasks-api/)
- [Super.ai integrations API](https://apis.io/apis/superai/superai-integrations-api/)
- [Super.ai models API](https://apis.io/apis/superai/superai-models-api/)
- [Super.ai organizations API](https://apis.io/apis/superai/superai-organizations-api/)
- [Super.ai plugins API](https://apis.io/apis/superai/superai-plugins-api/)
- [Super.ai profile API](https://apis.io/apis/superai/superai-profile-api/)
- [Super.ai service-accounts API](https://apis.io/apis/superai/superai-service-accounts-api/)
- [Super.ai sso API](https://apis.io/apis/superai/superai-sso-api/)
- [Super.ai task-data API](https://apis.io/apis/superai/superai-task-data-api/)

## Tags

Authentication

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/apis/superai/superai-auth-api/). The API's provider profile, Kin Score and agent-readiness rating are at https://apis.io/providers/superai/.