Avalara · OpenAPI Overlay 1.0.0

API Evangelist conversational phrasing for Avalara Authentication API

5 actions 5 updates phrasing extends openapi/avalara-authentication-api-openapi.yml
Generated by API Evangelist Written by API Evangelist tooling for Avalara's API. It is a proposal applied on top of the contract, not a document Avalara publishes.
View Overlay File View on GitHub Overlay Specification

What the actions change

x-apievangelist-phrasing

Targets 5

$.info
$.paths['/auth/token'].post
$.paths['/connect/token'].post
$.paths['/connect/authorize'].get
$.paths['/connect/revocation'].post

OpenAPI Overlay

Raw ↑
# Generated by API Evangelist (build-phrasing.py). Our phrasing, not observed demand.
overlay: 1.0.0
info:
  title: API Evangelist conversational phrasing for Avalara Authentication API
  version: 1.0.0
extends: openapi/avalara-authentication-api-openapi.yml
actions:
- target: $.info
  update:
    x-apievangelist-phrasing:
      method: generated
      generated: '2026-09-26'
      generator: build-phrasing.py
      label: Generated by API Evangelist
      operations: 4
- target: $.paths['/auth/token'].post
  update:
    x-apievangelist-phrasing:
      intent: Get an API token with username and password
      effect: write
      questions:
      - Can I get an API token using just my username and password?
      - What does the simple token endpoint need to log me in?
      instructions:
      - text: Get an authentication token for user {username} with password {password}.
        slots:
          username: requestBody.username
          password: requestBody.password
      - text: Log in as {username} using {password} and return a token.
        slots:
          username: requestBody.username
          password: requestBody.password
      method: generated
      generated: '2026-09-26'
- target: $.paths['/connect/token'].post
  update:
    x-apievangelist-phrasing:
      intent: Obtain an OAuth 2.0 access token
      effect: write
      questions:
      - How do I get an OAuth access token with client credentials?
      - Can I exchange an authorization code or SAML assertion for an access token?
      - Which grant types does the Avalara token endpoint accept?
      instructions:
      - text: Get an access token with grant type {grant_type} for client {client_id} using secret {client_secret}.
        slots:
          grant_type: requestBody.grant_type
          client_id: requestBody.client_id
          client_secret: requestBody.client_secret
      - text: Exchange authorization code {code} for a token as client {client_id} with secret {client_secret}, grant {grant_type}.
        slots:
          code: requestBody.code
          client_id: requestBody.client_id
          client_secret: requestBody.client_secret
          grant_type: requestBody.grant_type
      method: generated
      generated: '2026-09-26'
- target: $.paths['/connect/authorize'].get
  update:
    x-apievangelist-phrasing:
      intent: Start the OAuth authorization code login
      effect: read
      questions:
      - What URL do I send users to so they can log in and authorize my app?
      - Can I pass a state value through the OAuth login redirect?
      instructions:
      - text: Start the authorization flow for client {client_id} redirecting to {redirect_uri} with response type {response_type}.
        slots:
          client_id: query.client_id
          redirect_uri: query.redirect_uri
          response_type: query.response_type
      - text: Send the user to the login page for client {client_id}, response type {response_type}, scope {scope}, back to {redirect_uri}.
        slots:
          client_id: query.client_id
          response_type: query.response_type
          scope: query.scope
          redirect_uri: query.redirect_uri
      method: generated
      generated: '2026-09-26'
- target: $.paths['/connect/revocation'].post
  update:
    x-apievangelist-phrasing:
      intent: Revoke an access or refresh token
      effect: destructive
      questions:
      - Can I invalidate a refresh token that may have leaked?
      - How can I log out an integration by revoking its access token?
      instructions:
      - text: Revoke token {token}.
        slots:
          token: requestBody.token
      - text: Revoke the {token_type_hint} {token} for client {client_id}.
        slots:
          token_type_hint: requestBody.token_type_hint
          token: requestBody.token
          client_id: requestBody.client_id
      method: generated
      generated: '2026-09-26'

Work with this as data

Every overlay here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for openapi overlays

4 MCP tools reach this
  • find_overlaysBrowse and filter every overlay in the catalog.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This overlay
curl "https://apis.io/api/v1/overlays/avalara-authentication-api-phrasing-overlay"
All openapi overlays
curl "https://apis.io/api/v1/overlays?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

A second provider on the same verified email joins the account you already have.