Venafi

Venafi Access Management APIs API

The endpoints in this section allow you to manage your OAuth environment. Using endpoints described in this section, you can configure your global OAuth properties, assign roles to identities, create and manage applications, and create grant rules. After these are in place, users can request grants using the authentication server. This section also includes descriptions of endpoints that allow you to view and revoke issued grants.

GitHub OpenAPI

Operations 32

POST /vedsdk/oauth/grantrole Assign a role #
POST /vedsdk/oauth/revokerole Remove a role #
POST /vedsdk/oauth/listroles Get assigned roles #
POST /vedsdk/oauth/getrole Get own role #
POST /vedsdk/oauth/getconfiguration Get configuration #
POST /vedsdk/oauth/setconfiguration Set configuration #
POST /vedsdk/oauth/createapplication Create an application #
POST /vedsdk/oauth/enumerateapplications Enumerate all applications #
POST /vedsdk/oauth/getapplications Search applications #
POST /vedsdk/oauth/getapplication Get an application #
POST /vedsdk/oauth/updateapplication Update an application #
POST /vedsdk/oauth/deleteapplication Delete an application #
POST /vedsdk/oauth/getscopes Get all scopes #
POST /vedsdk/oauth/getgrants Get grants issued to an identity #
POST /vedsdk/oauth/enumerategrants Enumerate all application grants #
POST /vedsdk/oauth/revokegrants Revoke grants #
POST /vedsdk/oauth/createrule Create a rule #
POST /vedsdk/oauth/getrules Search rules #
POST /vedsdk/oauth/enumeraterules Enumerate all rules #
POST /vedsdk/oauth/updaterule Update a rule #
POST /vedsdk/oauth/deleterule Delete a rule #
POST /vedsdk/oauth/deleterules Deletes rules #
POST /vedsdk/oauth/grantcount Get grant count #
POST /vedsdk/oauth/usercount Get user count #
POST /vedsdk/oauth/createjwtmapping Create JWT mapping #
POST /vedsdk/oauth/enumeratejwtmappings Enumerate JWT mappings #
POST /vedsdk/oauth/getjwtmappings Search JWT mappings #
POST /vedsdk/oauth/getjwtmapping Get JWT mapping #
POST /vedsdk/oauth/updatejwtmapping Update JWT mapping #
POST /vedsdk/oauth/deletejwtmapping Delete JWT mapping #
POST /vedsdk/rights/grantsystemrole Grant a system role to a user or group #
POST /vedsdk/rights/revokesystemrole Revoke a system role from a user or group #

Documentation

📖
Documentation
https://developer.venafi.com/tlsprotectcloud/reference/tls-protect-overview
📖
Documentation
https://docs.venafi.com/Docs/currentSDK/TopNav/Content/SDK/WebSDK/cco-sdk-GettingStarted.php

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/venafi/refs/heads/main/openapi/venafi-access-management-apis-api-openapi.yml

Other Resources

🔗
Webhooks
https://raw.githubusercontent.com/api-evangelist/venafi/refs/heads/main/asyncapi/venafi-certificate-manager-saas-webhooks.yml
🔗
APIsJSON
https://raw.githubusercontent.com/api-evangelist/venafi/refs/heads/main/apis.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/venafi-access-management-apis-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

venafi-access-management-apis-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: Trust Protection Foundation WebSDK Access Management APIs…
  description: '# Introduction

    The Trust Protection Foundation Web SDK is a subset of REST APIs that allow you to:

    * Automate certificate management

    * Integrate with DevOps processes

    * Discover machine identities

    * Extract data to integrate with data warehouses

    * Perform bulk actions

    * Set up and administer Trust Protection Foundation

    * Onboard teams

    * Create custom, automated business logic and flows between internal systems


    All these use cases can be accomplished using the Trust Protection Foundation REST…'
  version: 26.1.1
servers:
- url: /
  description: Current Host
- url: https://REPLACEdnsnameME/
  description: System
- url: https://{dnsname}/
  description: Configurable Hostname
  variables:
    dnsname:
      default: localhost
      description: Production API Hostname
security:
- AccessToken: []
tags:


# --- truncated at 32 KB (130 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/venafi/refs/heads/main/openapi/venafi-access-management-apis-api-openapi.yml