Via Science

VIA Zero Trust Fabric — OpenID Connect Identity

VIA's OpenID Connect / OAuth 2.0 identity layer, operated on a VIA-run Keycloak server. It is the only machine-readable contract VIA publishes: each product realm serves an anonymous OIDC discovery document, and the `ztf_demo` realm additionally serves RFC 8414 authorization-server metadata and a UMA 2.0 configuration. Applications integrate with Authorization Code + PKCE (S256) and receive a bearer JWT; Zero Trust Fabric layers passwordless login backed by W3C-style verifiable credentials held in the VIA Wallet, with a wallet signature required to step up for sensitive operations. The realms also advertise DPoP, Pushed Authorization Requests, mTLS-bound access tokens, token exchange, CIBA, the device authorization grant and dynamic client registration.

GitHub

Documentation

📖
Documentation
https://documentation.ztf.solvewithvia.com/
📖
GettingStarted
https://documentation.ztf.solvewithvia.com/integration/
📖
Authentication
https://raw.githubusercontent.com/api-evangelist/via-science/refs/heads/main/authentication/via-science-authentication.yml

Other Resources

🔗
OpenIDConnect
https://auth.solvewithvia.com/auth/realms/qt/.well-known/openid-configuration
🔗
OAuthScopes
https://raw.githubusercontent.com/api-evangelist/via-science/refs/heads/main/scopes/via-science-scopes.yml
🔗
Conventions
https://raw.githubusercontent.com/api-evangelist/via-science/refs/heads/main/conventions/via-science-conventions.yml
🔗
APIsJSON
https://raw.githubusercontent.com/api-evangelist/via-science/refs/heads/main/apis.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/via-zero-trust-fabric-openid-connect-identity"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no email required.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

API entry from apis.yml

apis.yml Raw ↑ 
name: VIA Zero Trust Fabric — OpenID Connect Identity
description: 'VIA''s OpenID Connect / OAuth 2.0 identity layer, operated on a VIA-run Keycloak server.
  It is the only machine-readable contract VIA publishes: each product realm serves an anonymous OIDC
  discovery document, and the `ztf_demo` realm additionally serves RFC 8414 authorization-server metadata
  and a UMA 2.0 configuration. Applications integrate with Authorization Code + PKCE (S256) and receive
  a bearer JWT; Zero Trust Fabric layers passwordless login backed by W3C-style verifiable credentials
  held in the VIA Wallet, with a wallet signature required to step up for sensitive operations. The realms
  also advertise DPoP, Pushed Authorization Requests, mTLS-bound access tokens, token exchange, CIBA,
  the device authorization grant and dynamic client registration.'
humanURL: https://documentation.ztf.solvewithvia.com/
baseURL: https://auth.solvewithvia.com/auth/realms/qt
tags:
- Authentication
- Identity
- OpenID Connect
- OAuth
- Zero Trust
properties:
- type: Documentation
  url: https://documentation.ztf.solvewithvia.com/
- type: GettingStarted
  url: https://documentation.ztf.solvewithvia.com/integration/
- type: OpenIDConnect
  url: https://auth.solvewithvia.com/auth/realms/qt/.well-known/openid-configuration
- type: Authentication
  url: authentication/via-science-authentication.yml
- type: OAuthScopes
  url: scopes/via-science-scopes.yml
- type: Conventions
  url: conventions/via-science-conventions.yml