Authentik · OpenAPI Overlay 1.0.0
API Evangelist conversational phrasing for authentik Outposts API
35 actions
35 updates
phrasing
extends
openapi/authentik-outposts-api-openapi.yml
Generated by API Evangelist
Written by API Evangelist tooling for Authentik's API. It is a proposal applied on top of the contract, not a document Authentik publishes.
What the actions change
x-apievangelist-phrasing
Targets 35 · first 16 shown; the file carries all of them
$.info
$.paths['/outposts/instances/'].get
$.paths['/outposts/instances/'].post
$.paths['/outposts/instances/{uuid}/'].get
$.paths['/outposts/instances/{uuid}/'].put
$.paths['/outposts/instances/{uuid}/'].delete
$.paths['/outposts/instances/{uuid}/'].patch
$.paths['/outposts/instances/{uuid}/health/'].get
$.paths['/outposts/instances/{uuid}/used_by/'].get
$.paths['/outposts/instances/default_settings/'].get
$.paths['/outposts/ldap/'].get
$.paths['/outposts/ldap/{id}/check_access/'].get
$.paths['/outposts/proxy/'].get
$.paths['/outposts/radius/'].get
$.paths['/outposts/radius/{id}/check_access/'].get
$.paths['/outposts/service_connections/all/'].get
OpenAPI Overlay
# Generated by API Evangelist (build-phrasing.py). Our phrasing, not observed demand.
overlay: 1.0.0
info:
title: API Evangelist conversational phrasing for authentik Outposts API
version: 1.0.0
extends: openapi/authentik-outposts-api-openapi.yml
actions:
- target: $.info
update:
x-apievangelist-phrasing:
method: generated
generated: '2026-09-26'
generator: build-phrasing.py
label: Generated by API Evangelist
operations: 34
- target: $.paths['/outposts/instances/'].get
update:
x-apievangelist-phrasing:
intent: List outposts
effect: read
questions:
- Which outposts are deployed in my authentik instance?
- Can I find outposts that have no providers attached?
- Is there a way to filter outposts by the service connection they run on?
instructions:
- text: List all outposts.
- text: Search outposts by name for {search}.
slots:
search: query.search
- text: Show outposts running on service connection {service_connection__name__iexact}.
slots:
service_connection__name__iexact: query.service_connection__name__iexact
method: generated
generated: '2026-09-26'
- target: $.paths['/outposts/instances/'].post
update:
x-apievangelist-phrasing:
intent: Create an outpost
effect: write
questions:
- How do I deploy a new proxy or LDAP outpost in authentik?
- Can I attach several providers to a single new outpost?
instructions:
- text: Create a {type} outpost named {name} serving providers {providers} with config {config}.
slots:
type: requestBody.type
name: requestBody.name
providers: requestBody.providers
config: requestBody.config
- text: Set up outpost {name} of type {type} for providers {providers} on service connection {service_connection} using config {config}.
slots:
name: requestBody.name
type: requestBody.type
providers: requestBody.providers
service_connection: requestBody.service_connection
config: requestBody.config
method: generated
generated: '2026-09-26'
- target: $.paths['/outposts/instances/{uuid}/'].get
update:
x-apievangelist-phrasing:
intent: Get an outpost's details
effect: read
questions:
- What providers and config does one specific outpost have?
- Where can I look up a single outpost by its UUID?
instructions:
- text: Show outpost {uuid}.
slots:
uuid: path.uuid
- text: Get the configuration of outpost {uuid}.
slots:
uuid: path.uuid
method: generated
generated: '2026-09-26'
- target: $.paths['/outposts/instances/{uuid}/'].put
update:
x-apievangelist-phrasing:
intent: Replace an outpost's settings
effect: write
questions:
- Can I overwrite an outpost's whole definition, including name, type, providers and config, in one call?
- What is required to fully replace an existing outpost's configuration?
instructions:
- text: Replace outpost {uuid} with name {name}, type {type}, providers {providers} and config {config}.
slots:
uuid: path.uuid
name: requestBody.name
type: requestBody.type
providers: requestBody.providers
config: requestBody.config
- text: Fully redefine outpost {uuid} as {name} of type {type} serving {providers} with config {config}.
slots:
uuid: path.uuid
name: requestBody.name
type: requestBody.type
providers: requestBody.providers
config: requestBody.config
method: generated
generated: '2026-09-26'
- target: $.paths['/outposts/instances/{uuid}/'].delete
update:
x-apievangelist-phrasing:
intent: Delete an outpost
effect: destructive
questions:
- How do I remove an outpost I no longer run?
- Can I decommission an outpost from authentik entirely?
instructions:
- text: Delete outpost {uuid}.
slots:
uuid: path.uuid
- text: Remove outpost {uuid} permanently.
slots:
uuid: path.uuid
method: generated
generated: '2026-09-26'
- target: $.paths['/outposts/instances/{uuid}/'].patch
update:
x-apievangelist-phrasing:
intent: Change some outpost settings
effect: write
questions:
- Can I just rename an outpost without resending its config?
- Is it possible to add providers to an existing outpost by changing only that field?
instructions:
- text: Rename outpost {uuid} to {name}.
slots:
uuid: path.uuid
name: requestBody.name
- text: Change the providers on outpost {uuid} to {providers}.
slots:
uuid: path.uuid
providers: requestBody.providers
- text: Move outpost {uuid} onto service connection {service_connection}.
slots:
uuid: path.uuid
service_connection: requestBody.service_connection
method: generated
generated: '2026-09-26'
- target: $.paths['/outposts/instances/{uuid}/health/'].get
update:
x-apievangelist-phrasing:
intent: Check an outpost's current health
effect: read
questions:
- Is my outpost connected and healthy right now?
- What version are my outpost instances running and when did they last check in?
instructions:
- text: Show the health of outpost {uuid}.
slots:
uuid: path.uuid
- text: Check whether outpost {uuid} is up and reporting in.
slots:
uuid: path.uuid
method: generated
generated: '2026-09-26'
- target: $.paths['/outposts/instances/{uuid}/used_by/'].get
update:
x-apievangelist-phrasing:
intent: See what uses an outpost
effect: read
questions:
- Which objects depend on a given outpost?
- Will anything break if I delete this outpost?
instructions:
- text: List objects that use outpost {uuid}.
slots:
uuid: path.uuid
- text: Show what references outpost {uuid} before I remove it.
slots:
uuid: path.uuid
method: generated
generated: '2026-09-26'
- target: $.paths['/outposts/instances/default_settings/'].get
update:
x-apievangelist-phrasing:
intent: Get the global default outpost config
effect: read
questions:
- What default configuration does authentik apply to new outposts?
- Where can I see the baseline outpost config settings?
instructions:
- text: Show the global default outpost configuration.
- text: Get the default settings new outposts start with.
method: generated
generated: '2026-09-26'
- target: $.paths['/outposts/ldap/'].get
update:
x-apievangelist-phrasing:
intent: List LDAP providers served by outposts
effect: read
questions:
- Which LDAP providers is my LDAP outpost serving?
- Can I search the LDAP providers visible to outposts by name?
instructions:
- text: List LDAP providers for outposts.
- text: Find the outpost LDAP provider named {name}.
slots:
name: query.name
method: generated
generated: '2026-09-26'
- target: $.paths['/outposts/ldap/{id}/check_access/'].get
update:
x-apievangelist-phrasing:
intent: Check LDAP access to an application
effect: read
questions:
- Is the current user allowed to bind to an application through the LDAP outpost?
- Can I verify LDAP access to an app by its slug?
instructions:
- text: Check LDAP provider {id} access to application {app_slug}.
slots:
id: path.id
app_slug: query.app_slug
- text: Verify whether LDAP provider {id} grants access.
slots:
id: path.id
method: generated
generated: '2026-09-26'
- target: $.paths['/outposts/proxy/'].get
update:
x-apievangelist-phrasing:
intent: List proxy providers served by outposts
effect: read
questions:
- Which proxy providers does my proxy outpost pick up?
- Can I search the proxy providers available to outposts by name?
instructions:
- text: List proxy providers for outposts.
- text: Find the outpost proxy provider named {name}.
slots:
name: query.name
method: generated
generated: '2026-09-26'
- target: $.paths['/outposts/radius/'].get
update:
x-apievangelist-phrasing:
intent: List RADIUS providers served by outposts
effect: read
questions:
- Which RADIUS providers does the RADIUS outpost serve?
- Can I look up RADIUS providers for outposts by name?
instructions:
- text: List RADIUS providers for outposts.
- text: Find the outpost RADIUS provider named {name}.
slots:
name: query.name
method: generated
generated: '2026-09-26'
- target: $.paths['/outposts/radius/{id}/check_access/'].get
update:
x-apievangelist-phrasing:
intent: Check RADIUS access to an application
effect: read
questions:
- Does the user have access to an application over RADIUS?
- Can I test RADIUS access to an app by its slug?
instructions:
- text: Check RADIUS provider {id} access to application {app_slug}.
slots:
id: path.id
app_slug: query.app_slug
- text: Verify whether RADIUS provider {id} grants access.
slots:
id: path.id
method: generated
generated: '2026-09-26'
- target: $.paths['/outposts/service_connections/all/'].get
update:
x-apievangelist-phrasing:
intent: List all outpost service connections
effect: read
questions:
- Which Docker and Kubernetes service connections exist across authentik?
- Can I search every outpost integration regardless of type by name?
instructions:
- text: List all service connections of every type.
- text: Search all service connections for {search}.
slots:
search: query.search
method: generated
generated: '2026-09-26'
- target: $.paths['/outposts/service_connections/all/{uuid}/'].get
update:
x-apievangelist-phrasing:
intent: Get any service connection by ID
effect: read
questions:
- What are the details of a service connection when I don't know if it's Docker or Kubernetes?
- Where can I look up a generic outpost integration by UUID?
instructions:
- text: Show service connection {uuid}.
slots:
uuid: path.uuid
- text: Get the generic details of outpost integration {uuid}.
slots:
uuid: path.uuid
method: generated
generated: '2026-09-26'
- target: $.paths['/outposts/service_connections/all/{uuid}/'].delete
update:
x-apievangelist-phrasing:
intent: Delete any service connection
effect: destructive
questions:
- Can I remove a service connection without knowing whether it's Docker or Kubernetes?
- What endpoint deletes an outpost integration of any type?
instructions:
- text: Delete service connection {uuid}.
slots:
uuid: path.uuid
- text: Remove outpost integration {uuid} whatever its type.
slots:
uuid: path.uuid
method: generated
generated: '2026-09-26'
- target: $.paths['/outposts/service_connections/all/{uuid}/state/'].get
update:
x-apievangelist-phrasing:
intent: Check a service connection's state
effect: read
questions:
- Is my service connection healthy and reachable?
- What version of Docker or Kubernetes is a service connection talking to?
instructions:
- text: Show the state of service connection {uuid}.
slots:
uuid: path.uuid
- text: Check whether service connection {uuid} is reachable.
slots:
uuid: path.uuid
method: generated
generated: '2026-09-26'
- target: $.paths['/outposts/service_connections/all/{uuid}/used_by/'].get
update:
x-apievangelist-phrasing:
intent: See what uses a service connection
effect: read
questions:
- Which outposts rely on a given service connection?
- Is any object still referencing this outpost integration?
instructions:
- text: List objects that use service connection {uuid}.
slots:
uuid: path.uuid
- text: Show what depends on outpost integration {uuid}.
slots:
uuid: path.uuid
method: generated
generated: '2026-09-26'
- target: $.paths['/outposts/service_connections/all/types/'].get
update:
x-apievangelist-phrasing:
intent: List creatable service connection types
effect: read
questions:
- What kinds of outpost integrations can I create?
- Which service connection types does authentik support?
instructions:
- text: List the service connection types I can create.
- text: Show available outpost integration types.
method: generated
generated: '2026-09-26'
- target: $.paths['/outposts/service_connections/docker/'].get
update:
x-apievangelist-phrasing:
intent: List Docker service connections
effect: read
questions:
- Which Docker integrations are configured for outposts?
- Can I find Docker connections that have TLS verification turned on?
- Is there a way to list only the local Docker socket connections?
instructions:
- text: List Docker service connections.
- text: Find Docker service connections pointing at {url}.
slots:
url: query.url
- text: Show Docker connections where local is {local}.
slots:
local: query.local
method: generated
generated: '2026-09-26'
- target: $.paths['/outposts/service_connections/docker/'].post
update:
x-apievangelist-phrasing:
intent: Add a Docker service connection
effect: write
questions:
- How do I connect authentik to a Docker host so it can deploy outposts?
- Can I use the local Docker socket instead of a remote URL?
instructions:
- text: Create Docker service connection {name} at {url}.
slots:
name: requestBody.name
url: requestBody.url
- text: Add Docker connection {name} for {url} using TLS verification certificate {tls_verification}.
slots:
name: requestBody.name
url: requestBody.url
tls_verification: requestBody.tls_verification
method: generated
generated: '2026-09-26'
- target: $.paths['/outposts/service_connections/docker/{uuid}/'].get
update:
x-apievangelist-phrasing:
intent: Get a Docker service connection
effect: read
questions:
- What URL and TLS settings does a specific Docker integration use?
- Where can I view one Docker service connection?
instructions:
- text: Show Docker service connection {uuid}.
slots:
uuid: path.uuid
- text: Get the Docker integration settings for {uuid}.
slots:
uuid: path.uuid
method: generated
generated: '2026-09-26'
- target: $.paths['/outposts/service_connections/docker/{uuid}/'].put
update:
x-apievangelist-phrasing:
intent: Replace a Docker service connection
effect: write
questions:
- Can I overwrite a Docker connection's name and URL together?
- What must I send to fully replace a Docker integration?
instructions:
- text: Replace Docker connection {uuid} with name {name} and URL {url}.
slots:
uuid: path.uuid
name: requestBody.name
url: requestBody.url
- text: Fully redefine Docker integration {uuid} as {name} at {url} with TLS auth cert {tls_authentication}.
slots:
uuid: path.uuid
name: requestBody.name
url: requestBody.url
tls_authentication: requestBody.tls_authentication
method: generated
generated: '2026-09-26'
- target: $.paths['/outposts/service_connections/docker/{uuid}/'].delete
update:
x-apievangelist-phrasing:
intent: Delete a Docker service connection
effect: destructive
questions:
- How can I remove a Docker integration I stopped using?
- Can I delete one Docker service connection by its ID?
instructions:
- text: Delete Docker service connection {uuid}.
slots:
uuid: path.uuid
- text: Remove Docker integration {uuid}.
slots:
uuid: path.uuid
method: generated
generated: '2026-09-26'
- target: $.paths['/outposts/service_connections/docker/{uuid}/'].patch
update:
x-apievangelist-phrasing:
intent: Change some Docker connection settings
effect: write
questions:
- Can I switch just the URL on an existing Docker connection?
- Is it possible to change only the TLS certificates on a Docker integration?
instructions:
- text: Point Docker connection {uuid} at {url}.
slots:
uuid: path.uuid
url: requestBody.url
- text: Set TLS verification certificate {tls_verification} on Docker connection {uuid}.
slots:
uuid: path.uuid
tls_verification: requestBody.tls_verification
method: generated
generated: '2026-09-26'
- target: $.paths['/outposts/service_connections/docker/{uuid}/used_by/'].get
update:
x-apievangelist-phrasing:
intent: See what uses a Docker connection
effect: read
questions:
- Which outposts are deployed through a given Docker integration?
- Does anything still depend on this Docker service connection?
instructions:
- text: List objects that use Docker connection {uuid}.
slots:
uuid: path.uuid
- text: Show what references Docker integration {uuid}.
slots:
uuid: path.uuid
method: generated
generated: '2026-09-26'
- target: $.paths['/outposts/service_connections/kubernetes/'].get
update:
x-apievangelist-phrasing:
intent: List Kubernetes service connections
effect: read
questions:
- Which Kubernetes clusters is authentik connected to for outposts?
- Can I list only the in-cluster local Kubernetes connections?
instructions:
- text: List Kubernetes service connections.
- text: Find the Kubernetes connection named {name}.
slots:
name: query.name
method: generated
generated: '2026-09-26'
- target: $.paths['/outposts/service_connections/kubernetes/'].post
update:
x-apievangelist-phrasing:
intent: Add a Kubernetes service connection
effect: write
questions:
- How do I let authentik deploy outposts into a Kubernetes cluster?
- Can I connect a cluster by pasting a kubeconfig?
instructions:
- text: Create Kubernetes service connection {name}.
slots:
name: requestBody.name
- text: Add Kubernetes connection {name} using kubeconfig {kubeconfig}.
slots:
name: requestBody.name
kubeconfig: requestBody.kubeconfig
method: generated
generated: '2026-09-26'
- target: $.paths['/outposts/service_connections/kubernetes/{uuid}/'].get
update:
x-apievangelist-phrasing:
intent: Get a Kubernetes service connection
effect: read
questions:
- What settings does a specific Kubernetes integration have?
- Where can I view one Kubernetes service connection?
instructions:
- text: Show Kubernetes service connection {uuid}.
slots:
uuid: path.uuid
- text: Get the Kubernetes integration details for {uuid}.
slots:
uuid: path.uuid
method: generated
generated: '2026-09-26'
- target: $.paths['/outposts/service_connections/kubernetes/{uuid}/'].put
update:
x-apievangelist-phrasing:
intent: Replace a Kubernetes service connection
effect: write
questions:
- Can I overwrite a Kubernetes connection's name and kubeconfig at once?
- What does fully replacing a Kubernetes integration require?
instructions:
- text: Replace Kubernetes connection {uuid} with name {name}.
slots:
uuid: path.uuid
name: requestBody.name
- text: Fully redefine Kubernetes integration {uuid} as {name} with kubeconfig {kubeconfig}.
slots:
uuid: path.uuid
name: requestBody.name
kubeconfig: requestBody.kubeconfig
method: generated
generated: '2026-09-26'
- target: $.paths['/outposts/service_connections/kubernetes/{uuid}/'].delete
update:
x-apievangelist-phrasing:
intent: Delete a Kubernetes service connection
effect: destructive
questions:
- How can I disconnect authentik from a Kubernetes cluster?
- Can I delete one Kubernetes service connection by its ID?
instructions:
- text: Delete Kubernetes service connection {uuid}.
slots:
uuid: path.uuid
- text: Remove Kubernetes integration {uuid}.
slots:
uuid: path.uuid
method: generated
generated: '2026-09-26'
- target: $.paths['/outposts/service_connections/kubernetes/{uuid}/'].patch
update:
x-apievangelist-phrasing:
intent: Change some Kubernetes connection settings
effect: write
questions:
- Can I rotate just the kubeconfig on an existing Kubernetes connection?
- Is it possible to turn off SSL verification for a Kubernetes integration only?
instructions:
- text: Swap the kubeconfig on Kubernetes connection {uuid} for {kubeconfig}.
slots:
uuid: path.uuid
kubeconfig: requestBody.kubeconfig
- text: Set SSL verification on Kubernetes connection {uuid} to {verify_ssl}.
slots:
uuid: path.uuid
verify_ssl: requestBody.verify_ssl
method: generated
generated: '2026-09-26'
- target: $.paths['/outposts/service_connections/kubernetes/{uuid}/used_by/'].get
update:
x-apievangelist-phrasing:
intent: See what uses a Kubernetes connection
effect: read
questions:
- Which outposts are deployed through a given Kubernetes integration?
- Does anything still depend on this Kubernetes service connection?
instructions:
- text: List objects that use Kubernetes connection {uuid}.
slots:
uuid: path.uuid
- text: Show what references Kubernetes integration {uuid}.
slots:
uuid: path.uuid
method: generated
generated: '2026-09-26'