Home Providers Authentik
Authentik
Authentik is an open source identity provider from Authentik Security Inc., a public benefit company, exposing a 1,193-operation REST API at /api/v3 on every self-hosted instance. The published OpenAPI covers users, groups, applications, tokens, RBAC, flows, stages, policies, property mappings, outposts, events, blueprints, endpoint devices, privileged access management and agent accounts. authentik speaks OAuth2/OIDC (OpenID Certified), SAML 2.0, SCIM 2.0, LDAP, RADIUS, Kerberos, Proxy and the OpenID Shared Signals Framework, and ships first-party API clients for TypeScript, Python, Go and Rust plus a Terraform provider and the `ak` CLI.
Authentik publishes 27 APIs on the APIs.io network, including Core API, Crypto API, Events API, and 24 more. Tagged areas include API Management, Agent Accounts, Authentication, Authorization, and Identity Provider.
The Authentik catalog on APIs.io includes 1 event-driven AsyncAPI specification.
Authentik’s developer surface includes authentication, documentation, changelog, support, pricing, engineering blog, CLI, and 39 more developer resources.
1 APIs7 Features4 Use Cases
On this page
Kin Score
APIs 27
Open Collections 1
Pricing Plans 1
Rate Limits 1
FinOps 1
Features 7
Event Specs 1
Security Posture 3
Agentic Access 1
Use Cases 4
Solutions 2
Resources 46
apis.yml
61 Operational Transparency
28 Create-or-Update Ergonomics
Composite quality — 69.1/100 · exemplar
Agent readiness — 30/100 · agent ready
Individual APIs this provider publishes, each with its own machine-readable definition.
Users, groups, applications, tokens, brands, application entitlements and authenticated sessions — the identity records and the objects users see.
Certificate-key pairs used to sign SAML assertions and OIDC ID tokens, and to validate webhook receivers.
Audit events, notification rules and notification transports — including the webhook and Slack transports that push authentik events to external receivers.
Flow instances, flow bindings and the flow executor that drives authentication, enrollment, recovery and unenrollment.
Policies and policy bindings — expression, event matcher, GeoIP, password, password expiry, reputation and unique-password types.
Protocol providers: OAuth2/OIDC, SAML, SCIM, LDAP, RADIUS, Proxy, RAC, WS-Fed, Google Workspace, Microsoft Entra and the Shared Signals Framework backchannel.
Role-based access control — roles, global and object-level permissions, and initial permission sets.
The self-describing OpenAPI schema endpoint every authentik instance serves.
External identity sources — LDAP, OAuth, SAML, SCIM, Kerberos, Plex and Telegram — plus their user and group connections.
Flow stages: identification, password, consent, prompt, email, captcha, mTLS, redirect, user write/login/logout/delete, account lockdown and every authenticator setup and valida...
Instance administration — installed apps, models, version, system information, workers and the file storage backend.
Agent accounts — service accounts that act on behalf of a parent user when calling the authentik API, with expiring tokens and audited delegation.
Authenticator device management for TOTP, static, WebAuthn, SMS, email, Duo and endpoint devices, from both the admin and end-user perspectives.
Endpoint device management — the authentik Agent connectors, device enrollment tokens, device bindings, device access groups, Fleet and Google Chrome device-trust connectors, an...
Enterprise licensing — license installation, summary and forecast for a licensed authentik deployment.
Identity lifecycle operations, including scheduled user offboarding with session and token revocation and a cancellable pending state.
Blueprints — the YAML templates that declare authentik configuration as code, and the blueprint instances that apply them.
Issued OAuth2 artefacts: access tokens, refresh tokens and authorization codes granted by authentik as an identity provider.
Outpost instances and service connections (Docker, Kubernetes) — the deployable components that run the proxy, LDAP and RADIUS providers.
Property mappings — the expressions that shape claims, attributes and payloads for every provider and source type, plus notification webhook bodies.
Remote Access Control — browser-based RDP, SSH and VNC endpoints and their single-use connection tokens.
Reporting surface for exportable user and event data.
Privileged access management — access request rules, rule bindings, grant requests, reviewer workflows and grant revocation.
Root configuration endpoint describing the running instance to its own frontend.
OpenID Shared Signals Framework streams — the SSF stream surface a receiving application manages on authentik as transmitter of Security Event Tokens.
Background task schedules and runs executed by the authentik worker.
Multi-tenant administration for deployments running more than one authentik tenant.
Scroll for all 27
Open, tool-agnostic API collections (OpenAPI-derived and Bruno).
Published pricing tiers and plan structures.
Documented rate limits and quota policies.
Cost, billing, and metering signals for API financial operations.
Notable capabilities this provider offers.
Scroll for all 7
AsyncAPI definitions for this provider's event-driven and streaming APIs.
Authentication, domain security, vulnerability disclosure, and trust-center signals.
Recommended x-agentic-access execution contracts for AI agents.
What developers build with this provider.
Packaged solutions this provider offers.
Get Started 3
Portal, sign-up, and the first successful call
Documentation 3
Reference material describing how the API behaves
Agent Surfaces 4
MCP servers, agent skills, and machine-readable catalogs
Design & Contract 7
Pagination, idempotency, versioning, errors, and events
Scroll for all 7
Build 6
SDKs, sample code, and the tooling you integrate with
Access & Security 7
Authentication, authorization, and security posture
Scroll for all 7
Operate 8
Status, limits, changes, and where to get help
Scroll for all 8
Commercial 5
Pricing, plans, and the legal terms of use
Company 3
The organization behind the API
Source (apis.yml)
aid: authentik
name: Authentik
description: 'Authentik is an open source identity provider from Authentik Security Inc., a public benefit company, exposing
a 1,193-operation REST API at /api/v3 on every self-hosted instance. The published OpenAPI covers users, groups, applications,
tokens, RBAC, flows, stages, policies, property mappings, outposts, events, blueprints, endpoint devices, privileged access
management and agent accounts. authentik speaks OAuth2/OIDC (OpenID Certified), SAML 2.0, SCIM 2.0, LDAP, RADIUS, Kerberos,
Proxy and the OpenID Shared Signals Framework, and ships first-party API clients for TypeScript, Python, Go and Rust plus
a Terraform provider and the `ak` CLI.
'
type: Index
deliveryModel:
model: unknown
open_source: unknown
commercial: true
callable_host: false
label: Delivery model not determined — needs a product licence on record
confidence: low
source:
- openapi
- pricing
- repository-unlicensed
generated: '2026-08-28'
method: derived
accessModel:
pricing: freemium
onboarding: self-serve
trial: false
try_now: false
public: false
label: Freemium · Self-serve signup
confidence: medium
try_now_blocked_by: self-hosted
source:
- plans
- authentication
- security
generated: '2026-09-03'
method: derived
image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/icons/authentik.png
tags:
- API Management
- Agent Accounts
- Authentication
- Authorization
- Identity Provider
- Kubernetes
- LDAP
- Open-Source
- OpenID Connect
- RADIUS
- RBAC
- SAML
- SCIM
- Self-Hosted
- Service Accounts
- Shared Signals Framework
- Single Sign-On
- Terraform
- Zero Trust
tags_raw:
- Authentication
- Authorization
- Identity Provider
- LDAP
- OAuth
- Open Source
- OpenID Connect
- SAML
- SCIM
- Self-Hosted
url: https://raw.githubusercontent.com/api-evangelist/authentik/refs/heads/main/apis.yml
created: '2026-03-25'
modified: '2026-09-04'
specificationVersion: '0.23'
apis:
- aid: authentik:authentik-core-api
name: Authentik Core API
description: Users, groups, applications, tokens, brands, application entitlements and authenticated sessions — the identity
records and the objects users see.
humanURL: https://api.goauthentik.io/
baseURL: https://{authentik_host}/api/v3
tags:
- Core
properties:
- type: OpenAPI
url: openapi/authentik-core-api-openapi.yml
- type: Documentation
url: https://docs.goauthentik.io/developer-docs/api/
- type: APIReference
url: https://api.goauthentik.io/
- type: SDKs
url: https://pypi.org/project/authentik-client/
- type: SDKs
url: https://www.npmjs.com/package/@goauthentik/api
- type: GitHubRepository
url: https://github.com/goauthentik/authentik
- type: Overlay
url: overlays/authentik-core-api-overlay.yaml
- type: Documentation
url: https://docs.goauthentik.io
- aid: authentik:authentik-crypto-api
name: Authentik Crypto API
description: Certificate-key pairs used to sign SAML assertions and OIDC ID tokens, and to validate webhook receivers.
humanURL: https://api.goauthentik.io/
baseURL: https://{authentik_host}/api/v3
tags:
- Crypto
properties:
- type: OpenAPI
url: openapi/authentik-crypto-api-openapi.yml
- type: Documentation
url: https://docs.goauthentik.io/developer-docs/api/
- type: APIReference
url: https://api.goauthentik.io/
- type: SDKs
url: https://pypi.org/project/authentik-client/
- type: SDKs
url: https://www.npmjs.com/package/@goauthentik/api
- type: GitHubRepository
url: https://github.com/goauthentik/authentik
- type: Overlay
url: overlays/authentik-crypto-api-overlay.yaml
- type: Documentation
url: https://docs.goauthentik.io
- aid: authentik:authentik-events-api
name: Authentik Events API
description: Audit events, notification rules and notification transports — including the webhook and Slack transports that
push authentik events to external receivers.
humanURL: https://api.goauthentik.io/
baseURL: https://{authentik_host}/api/v3
tags:
- Event
tags_raw:
- Events
properties:
- type: OpenAPI
url: openapi/authentik-events-api-openapi.yml
- type: Documentation
url: https://docs.goauthentik.io/developer-docs/api/
- type: APIReference
url: https://api.goauthentik.io/
- type: SDKs
url: https://pypi.org/project/authentik-client/
- type: SDKs
url: https://www.npmjs.com/package/@goauthentik/api
- type: GitHubRepository
url: https://github.com/goauthentik/authentik
- type: Overlay
url: overlays/authentik-events-api-overlay.yaml
- type: Documentation
url: https://docs.goauthentik.io
- aid: authentik:authentik-flows-api
name: Authentik Flows API
description: Flow instances, flow bindings and the flow executor that drives authentication, enrollment, recovery and unenrollment.
humanURL: https://api.goauthentik.io/
baseURL: https://{authentik_host}/api/v3
tags:
- Flows
properties:
- type: OpenAPI
url: openapi/authentik-flows-api-openapi.yml
- type: Documentation
url: https://docs.goauthentik.io/developer-docs/api/
- type: APIReference
url: https://api.goauthentik.io/
- type: SDKs
url: https://pypi.org/project/authentik-client/
- type: SDKs
url: https://www.npmjs.com/package/@goauthentik/api
- type: GitHubRepository
url: https://github.com/goauthentik/authentik
- type: Overlay
url: overlays/authentik-flows-api-overlay.yaml
- type: Documentation
url: https://docs.goauthentik.io
- aid: authentik:authentik-policies-api
name: Authentik Policies API
description: Policies and policy bindings — expression, event matcher, GeoIP, password, password expiry, reputation and
unique-password types.
humanURL: https://api.goauthentik.io/
baseURL: https://{authentik_host}/api/v3
tags:
- Policies
properties:
- type: OpenAPI
url: openapi/authentik-policies-api-openapi.yml
- type: Documentation
url: https://docs.goauthentik.io/developer-docs/api/
- type: APIReference
url: https://api.goauthentik.io/
- type: SDKs
url: https://pypi.org/project/authentik-client/
- type: SDKs
url: https://www.npmjs.com/package/@goauthentik/api
- type: GitHubRepository
url: https://github.com/goauthentik/authentik
- type: Overlay
url: overlays/authentik-policies-api-overlay.yaml
- type: Documentation
url: https://docs.goauthentik.io
- aid: authentik:authentik-providers-api
name: Authentik Providers API
description: 'Protocol providers: OAuth2/OIDC, SAML, SCIM, LDAP, RADIUS, Proxy, RAC, WS-Fed, Google Workspace, Microsoft
Entra and the Shared Signals Framework backchannel.'
humanURL: https://api.goauthentik.io/
baseURL: https://{authentik_host}/api/v3
tags:
- Providers
properties:
- type: OpenAPI
url: openapi/authentik-providers-api-openapi.yml
- type: Documentation
url: https://docs.goauthentik.io/developer-docs/api/
- type: APIReference
url: https://api.goauthentik.io/
- type: SDKs
url: https://pypi.org/project/authentik-client/
- type: SDKs
url: https://www.npmjs.com/package/@goauthentik/api
- type: GitHubRepository
url: https://github.com/goauthentik/authentik
- type: Overlay
url: overlays/authentik-providers-api-overlay.yaml
- type: Documentation
url: https://docs.goauthentik.io
- aid: authentik:authentik-rbac-api
name: Authentik RBAC API
description: Role-based access control — roles, global and object-level permissions, and initial permission sets.
humanURL: https://api.goauthentik.io/
baseURL: https://{authentik_host}/api/v3
tags:
- RBAC
properties:
- type: OpenAPI
url: openapi/authentik-rbac-api-openapi.yml
- type: Documentation
url: https://docs.goauthentik.io/developer-docs/api/
- type: APIReference
url: https://api.goauthentik.io/
- type: SDKs
url: https://pypi.org/project/authentik-client/
- type: SDKs
url: https://www.npmjs.com/package/@goauthentik/api
- type: GitHubRepository
url: https://github.com/goauthentik/authentik
- type: Overlay
url: overlays/authentik-rbac-api-overlay.yaml
- type: Documentation
url: https://docs.goauthentik.io
- aid: authentik:authentik-schema-api
name: Authentik Schema API
description: The self-describing OpenAPI schema endpoint every authentik instance serves.
humanURL: https://api.goauthentik.io/
baseURL: https://{authentik_host}/api/v3
tags:
- Schema
properties:
- type: OpenAPI
url: openapi/authentik-schema-api-openapi.yml
- type: Documentation
url: https://docs.goauthentik.io/developer-docs/api/
- type: APIReference
url: https://api.goauthentik.io/
- type: SDKs
url: https://pypi.org/project/authentik-client/
- type: SDKs
url: https://www.npmjs.com/package/@goauthentik/api
- type: GitHubRepository
url: https://github.com/goauthentik/authentik
- type: Overlay
url: overlays/authentik-schema-api-overlay.yaml
- type: Documentation
url: https://docs.goauthentik.io
- aid: authentik:authentik-sources-api
name: Authentik Sources API
description: External identity sources — LDAP, OAuth, SAML, SCIM, Kerberos, Plex and Telegram — plus their user and group
connections.
humanURL: https://api.goauthentik.io/
baseURL: https://{authentik_host}/api/v3
tags:
- Sources
properties:
- type: OpenAPI
url: openapi/authentik-sources-api-openapi.yml
- type: Documentation
url: https://docs.goauthentik.io/developer-docs/api/
- type: APIReference
url: https://api.goauthentik.io/
- type: SDKs
url: https://pypi.org/project/authentik-client/
- type: SDKs
url: https://www.npmjs.com/package/@goauthentik/api
- type: GitHubRepository
url: https://github.com/goauthentik/authentik
- type: Overlay
url: overlays/authentik-sources-api-overlay.yaml
- type: Documentation
url: https://docs.goauthentik.io
- aid: authentik:authentik-stages-api
name: Authentik Stages API
description: 'Flow stages: identification, password, consent, prompt, email, captcha, mTLS, redirect, user write/login/logout/delete,
account lockdown and every authenticator setup and validation stage.'
humanURL: https://api.goauthentik.io/
baseURL: https://{authentik_host}/api/v3
tags:
- Stages
properties:
- type: OpenAPI
url: openapi/authentik-stages-api-openapi.yml
- type: Documentation
url: https://docs.goauthentik.io/developer-docs/api/
- type: APIReference
url: https://api.goauthentik.io/
- type: SDKs
url: https://pypi.org/project/authentik-client/
- type: SDKs
url: https://www.npmjs.com/package/@goauthentik/api
- type: GitHubRepository
url: https://github.com/goauthentik/authentik
- type: Overlay
url: overlays/authentik-stages-api-overlay.yaml
- type: Documentation
url: https://docs.goauthentik.io
- aid: authentik:authentik-admin-api
name: Authentik Admin API
description: Instance administration — installed apps, models, version, system information, workers and the file storage
backend.
humanURL: https://api.goauthentik.io/
baseURL: https://{authentik_host}/api/v3
tags:
- admin
properties:
- type: OpenAPI
url: openapi/authentik-admin-api-openapi.yml
- type: Overlay
url: overlays/authentik-admin-api-overlay.yaml
- type: Documentation
url: https://docs.goauthentik.io
- type: APIReference
url: https://api.goauthentik.io/
- type: SDKs
url: https://www.npmjs.com/package/@goauthentik/api
- type: SDKs
url: https://pypi.org/project/authentik-client/
- type: GitHubRepository
url: https://github.com/goauthentik/authentik
- aid: authentik:authentik-agents-api
name: Authentik Agents API
description: Agent accounts — service accounts that act on behalf of a parent user when calling the authentik API, with
expiring tokens and audited delegation.
humanURL: https://api.goauthentik.io/
baseURL: https://{authentik_host}/api/v3
tags:
- agents
properties:
- type: OpenAPI
url: openapi/authentik-agents-api-openapi.yml
- type: Overlay
url: overlays/authentik-agents-api-overlay.yaml
- type: Documentation
url: https://docs.goauthentik.io
- type: APIReference
url: https://api.goauthentik.io/
- type: SDKs
url: https://www.npmjs.com/package/@goauthentik/api
- type: SDKs
url: https://pypi.org/project/authentik-client/
- type: GitHubRepository
url: https://github.com/goauthentik/authentik
- aid: authentik:authentik-authenticators-api
name: Authentik Authenticators API
description: Authenticator device management for TOTP, static, WebAuthn, SMS, email, Duo and endpoint devices, from both
the admin and end-user perspectives.
humanURL: https://api.goauthentik.io/
baseURL: https://{authentik_host}/api/v3
tags:
- authenticators
properties:
- type: OpenAPI
url: openapi/authentik-authenticators-api-openapi.yml
- type: Overlay
url: overlays/authentik-authenticators-api-overlay.yaml
- type: Documentation
url: https://docs.goauthentik.io
- type: APIReference
url: https://api.goauthentik.io/
- type: SDKs
url: https://www.npmjs.com/package/@goauthentik/api
- type: SDKs
url: https://pypi.org/project/authentik-client/
- type: GitHubRepository
url: https://github.com/goauthentik/authentik
- aid: authentik:authentik-endpoints-api
name: Authentik Endpoints API
description: Endpoint device management — the authentik Agent connectors, device enrollment tokens, device bindings, device
access groups, Fleet and Google Chrome device-trust connectors, and platform SSO registration.
humanURL: https://api.goauthentik.io/
baseURL: https://{authentik_host}/api/v3
tags:
- endpoints
properties:
- type: OpenAPI
url: openapi/authentik-endpoints-api-openapi.yml
- type: Overlay
url: overlays/authentik-endpoints-api-overlay.yaml
- type: Documentation
url: https://docs.goauthentik.io
- type: APIReference
url: https://api.goauthentik.io/
- type: SDKs
url: https://www.npmjs.com/package/@goauthentik/api
- type: SDKs
url: https://pypi.org/project/authentik-client/
- type: GitHubRepository
url: https://github.com/goauthentik/authentik
- aid: authentik:authentik-enterprise-api
name: Authentik Enterprise API
description: Enterprise licensing — license installation, summary and forecast for a licensed authentik deployment.
humanURL: https://api.goauthentik.io/
baseURL: https://{authentik_host}/api/v3
tags:
- enterprise
properties:
- type: OpenAPI
url: openapi/authentik-enterprise-api-openapi.yml
- type: Overlay
url: overlays/authentik-enterprise-api-overlay.yaml
- type: Documentation
url: https://docs.goauthentik.io
- type: APIReference
url: https://api.goauthentik.io/
- type: SDKs
url: https://www.npmjs.com/package/@goauthentik/api
- type: SDKs
url: https://pypi.org/project/authentik-client/
- type: GitHubRepository
url: https://github.com/goauthentik/authentik
- aid: authentik:authentik-lifecycle-api
name: Authentik Lifecycle API
description: Identity lifecycle operations, including scheduled user offboarding with session and token revocation and a
cancellable pending state.
humanURL: https://api.goauthentik.io/
baseURL: https://{authentik_host}/api/v3
tags:
- lifecycle
properties:
- type: OpenAPI
url: openapi/authentik-lifecycle-api-openapi.yml
- type: Overlay
url: overlays/authentik-lifecycle-api-overlay.yaml
- type: Documentation
url: https://docs.goauthentik.io
- type: APIReference
url: https://api.goauthentik.io/
- type: SDKs
url: https://www.npmjs.com/package/@goauthentik/api
- type: SDKs
url: https://pypi.org/project/authentik-client/
- type: GitHubRepository
url: https://github.com/goauthentik/authentik
- aid: authentik:authentik-managed-api
name: Authentik Managed API
description: Blueprints — the YAML templates that declare authentik configuration as code, and the blueprint instances that
apply them.
humanURL: https://api.goauthentik.io/
baseURL: https://{authentik_host}/api/v3
tags:
- managed
properties:
- type: OpenAPI
url: openapi/authentik-managed-api-openapi.yml
- type: Overlay
url: overlays/authentik-managed-api-overlay.yaml
- type: Documentation
url: https://docs.goauthentik.io
- type: APIReference
url: https://api.goauthentik.io/
- type: SDKs
url: https://www.npmjs.com/package/@goauthentik/api
- type: SDKs
url: https://pypi.org/project/authentik-client/
- type: GitHubRepository
url: https://github.com/goauthentik/authentik
- aid: authentik:authentik-oauth2-api
name: Authentik OAuth2 API
description: 'Issued OAuth2 artefacts: access tokens, refresh tokens and authorization codes granted by authentik as an
identity provider.'
humanURL: https://api.goauthentik.io/
baseURL: https://{authentik_host}/api/v3
tags:
- oauth2
properties:
- type: OpenAPI
url: openapi/authentik-oauth2-api-openapi.yml
- type: Overlay
url: overlays/authentik-oauth2-api-overlay.yaml
- type: Documentation
url: https://docs.goauthentik.io
- type: APIReference
url: https://api.goauthentik.io/
- type: SDKs
url: https://www.npmjs.com/package/@goauthentik/api
- type: SDKs
url: https://pypi.org/project/authentik-client/
- type: GitHubRepository
url: https://github.com/goauthentik/authentik
- aid: authentik:authentik-outposts-api
name: Authentik Outposts API
description: Outpost instances and service connections (Docker, Kubernetes) — the deployable components that run the proxy,
LDAP and RADIUS providers.
humanURL: https://api.goauthentik.io/
baseURL: https://{authentik_host}/api/v3
tags:
- outposts
properties:
- type: OpenAPI
url: openapi/authentik-outposts-api-openapi.yml
- type: Overlay
url: overlays/authentik-outposts-api-overlay.yaml
- type: Documentation
url: https://docs.goauthentik.io
- type: APIReference
url: https://api.goauthentik.io/
- type: SDKs
url: https://www.npmjs.com/package/@goauthentik/api
- type: SDKs
url: https://pypi.org/project/authentik-client/
- type: GitHubRepository
url: https://github.com/goauthentik/authentik
- aid: authentik:authentik-propertymappings-api
name: Authentik Property Mappings API
description: Property mappings — the expressions that shape claims, attributes and payloads for every provider and source
type, plus notification webhook bodies.
humanURL: https://api.goauthentik.io/
baseURL: https://{authentik_host}/api/v3
tags:
- propertymappings
properties:
- type: OpenAPI
url: openapi/authentik-propertymappings-api-openapi.yml
- type: Overlay
url: overlays/authentik-propertymappings-api-overlay.yaml
- type: Documentation
url: https://docs.goauthentik.io
- type: APIReference
url: https://api.goauthentik.io/
- type: SDKs
url: https://www.npmjs.com/package/@goauthentik/api
- type: SDKs
url: https://pypi.org/project/authentik-client/
- type: GitHubRepository
url: https://github.com/goauthentik/authentik
- aid: authentik:authentik-rac-api
name: Authentik RAC API
description: Remote Access Control — browser-based RDP, SSH and VNC endpoints and their single-use connection tokens.
humanURL: https://api.goauthentik.io/
baseURL: https://{authentik_host}/api/v3
tags:
- rac
properties:
- type: OpenAPI
url: openapi/authentik-rac-api-openapi.yml
- type: Overlay
url: overlays/authentik-rac-api-overlay.yaml
- type: Documentation
url: https://docs.goauthentik.io
- type: APIReference
url: https://api.goauthentik.io/
- type: SDKs
url: https://www.npmjs.com/package/@goauthentik/api
- type: SDKs
url: https://pypi.org/project/authentik-client/
- type: GitHubRepository
url: https://github.com/goauthentik/authentik
- aid: authentik:authentik-reports-api
name: Authentik Reports API
description: Reporting surface for exportable user and event data.
humanURL: https://api.goauthentik.io/
baseURL: https://{authentik_host}/api/v3
tags:
- reports
properties:
- type: OpenAPI
url: openapi/authentik-reports-api-openapi.yml
- type: Overlay
url: overlays/authentik-reports-api-overlay.yaml
- type: Documentation
url: https://docs.goauthentik.io
- type: APIReference
url: https://api.goauthentik.io/
- type: SDKs
url: https://www.npmjs.com/package/@goauthentik/api
- type: SDKs
url: https://pypi.org/project/authentik-client/
- type: GitHubRepository
url: https://github.com/goauthentik/authentik
- aid: authentik:authentik-requests-api
name: Authentik Requests API
description: Privileged access management — access request rules, rule bindings, grant requests, reviewer workflows and
grant revocation.
humanURL: https://api.goauthentik.io/
baseURL: https://{authentik_host}/api/v3
tags:
- requests
properties:
- type: OpenAPI
url: openapi/authentik-requests-api-openapi.yml
- type: Overlay
url: overlays/authentik-requests-api-overlay.yaml
- type: Documentation
url: https://docs.goauthentik.io
- type: APIReference
url: https://api.goauthentik.io/
- type: SDKs
url: https://www.npmjs.com/package/@goauthentik/api
- type: SDKs
url: https://pypi.org/project/authentik-client/
- type: GitHubRepository
url: https://github.com/goauthentik/authentik
- aid: authentik:authentik-root-api
name: Authentik Root API
description: Root configuration endpoint describing the running instance to its own frontend.
humanURL: https://api.goauthentik.io/
baseURL: https://{authentik_host}/api/v3
tags:
- root
properties:
- type: OpenAPI
url: openapi/authentik-root-api-openapi.yml
- type: Overlay
url: overlays/authentik-root-api-overlay.yaml
- type: Documentation
url: https://docs.goauthentik.io
- type: APIReference
url: https://api.goauthentik.io/
- type: SDKs
url: https://www.npmjs.com/package/@goauthentik/api
- type: SDKs
url: https://pypi.org/project/authentik-client/
- type: GitHubRepository
url: https://github.com/goauthentik/authentik
- aid: authentik:authentik-ssf-api
name: Authentik SSF API
description: OpenID Shared Signals Framework streams — the SSF stream surface a receiving application manages on authentik
as transmitter of Security Event Tokens.
humanURL: https://api.goauthentik.io/
baseURL: https://{authentik_host}/api/v3
tags:
- ssf
properties:
- type: OpenAPI
url: openapi/authentik-ssf-api-openapi.yml
- type: Overlay
url: overlays/authentik-ssf-api-overlay.yaml
- type: Documentation
url: https://docs.goauthentik.io
- type: APIReference
url: https://api.goauthentik.io/
- type: SDKs
url: https://www.npmjs.com/package/@goauthentik/api
- type: SDKs
url: https://pypi.org/project/authentik-client/
- type: GitHubRepository
url: https://github.com/goauthentik/authentik
- aid: authentik:authentik-tasks-api
name: Authentik Tasks API
description: Background task schedules and runs executed by the authentik worker.
humanURL: https://api.goauthentik.io/
baseURL: https://{authentik_host}/api/v3
tags:
- tasks
properties:
- type: OpenAPI
url: openapi/authentik-tasks-api-openapi.yml
- type: Overlay
url: overlays/authentik-tasks-api-overlay.yaml
- type: Documentation
url: https://docs.goauthentik.io
- type: APIReference
url: https://api.goauthentik.io/
- type: SDKs
url: https://www.npmjs.com/package/@goauthentik/api
- type: SDKs
url: https://pypi.org/project/authentik-client/
- type: GitHubRepository
url: https://github.com/goauthentik/authentik
- aid: authentik:authentik-tenants-api
name: Authentik Tenants API
description: Multi-tenant administration for deployments running more than one authentik tenant.
humanURL: https://api.goauthentik.io/
baseURL: https://{authentik_host}/api/v3
tags:
- tenants
properties:
- type: OpenAPI
url: openapi/authentik-tenants-api-openapi.yml
- type: Overlay
url: overlays/authentik-tenants-api-overlay.yaml
- type: Documentation
url: https://docs.goauthentik.io
- type: APIReference
url: https://api.goauthentik.io/
- type: SDKs
url: https://www.npmjs.com/package/@goauthentik/api
- type: SDKs
url: https://pypi.org/project/authentik-client/
- type: GitHubRepository
url: https://github.com/goauthentik/authentik
common:
- type: IssueTracker
url: https://github.com/goauthentik/authentik/issues
- type: SecurityPolicy
url: https://github.com/goauthentik/authentik/blob/main/SECURITY.md
- type: CodeOfConduct
url: https://github.com/goauthentik/authentik/blob/main/CODE_OF_CONDUCT.md
- type: ContributionGuide
url: https://github.com/goauthentik/authentik/blob/main/CONTRIBUTING.md
- type: AgenticAccess
url: agentic-access/authentik-agentic-access.yml
- type: VulnerabilityDisclosure
url: security/authentik-vulnerability-disclosure.yml
- type: DomainSecurity
url: security/authentik-domain-security.yml
- type: Authentication
url: authentication/authentik-authentication.yml
- type: LinkedIn
url: https://www.linkedin.com/company/authentik-security
- type: Website
url: https://goauthentik.io
- type: Documentation
url: https://docs.goauthentik.io
- type: GitHubOrganization
url: https://github.com/goauthentik
- type: GitHubRepository
url: https://github.com/goauthentik/authentik
- type: ChangeLog
url: https://github.com/goauthentik/authentik/releases
- type: Support
url: https://github.com/goauthentik/authentik/discussions
- type: Community
url: https://discord.gg/jg33eMhnj6
- type: Pricing
url: https://goauthentik.io/pricing
- type: Blog
url: https://goauthentik.io/blog/rss.xml
- type: Features
data:
- name: Comprehensive REST API
description: Full REST API covering all authentik features with built-in Swagger UI at /api/v3/ on every instance.
- name: Multi-Protocol Support
description: Native support for OAuth2, OIDC, SAML, LDAP, SCIM, RADIUS, and SSTP protocols for broad integration coverage.
- name: Flow Engine
description: Customizable authentication and enrollment flows with visual flow designer for configuring multi-step authentication
processes.
- name: Multi-Language SDKs
description: Official API client SDKs in TypeScript, Python, Go, Rust, Kotlin, and Swift auto-generated from the OpenAPI
schema.
- name: Terraform Provider
description: Official Terraform provider for infrastructure-as-code management of authentik resources.
- name: Helm Deployment
description: Official Helm chart for Kubernetes deployment with configurable replicas, persistence, and external database
support.
- name: RBAC
description: Role-based access control for granular permission management across authentik resources and administrative
functions.
- type: UseCases
data:
- name: Self-Hosted Identity Provider
description: Deploy a complete identity provider on-premises or in private cloud with full data sovereignty.
- name: SSO Gateway
description: Provide single sign-on for all internal applications using OIDC, SAML, or LDAP protocol support.
- name: B2C Identity
description: Build customer-facing registration and authentication flows with customizable enrollment and recovery processes.
- name: Zero Trust Access
description: Implement zero trust application access with forward auth proxy integration and per-application policies.
- type: Integrations
data:
- name: Nginx/Traefik/Caddy
description: Forward auth integration with major reverse proxies for transparent application authentication.
- name: Kubernetes
description: Native Kubernetes deployment via Helm chart with optional operator and RBAC integration.
- name: LDAP Directory
description: LDAP outpost that exposes authentik users to LDAP-compatible applications without a directory server.
- name: Grafana
description: Native OAuth2 integration with Grafana for unified authentication in monitoring stacks.
- name: Nextcloud
description: OIDC or SAML integration with Nextcloud for unified login in self-hosted file storage.
- type: Solutions
data:
- name: Self-Hosted IAM
description: Complete identity and access management platform deployable on any infrastructure with no vendor lock-in.
- name: Application Gateway
description: Secure and authenticate any application using forward auth with optional MFA and per-user access policies.
- type: Packages
url: packages/authentik-packages.yml
- type: SDKs
url: packages/authentik-packages.yml
- type: WellKnown
url: well-known/authentik-well-known.yml
- type: SecurityTxt
url: well-known/authentik-security.txt
- type: LLMsTxt
url: llms/authentik-llms.txt
- type: Conformance
url: conformance/authentik-conformance.yml
- type: Compliance
url: conformance/authentik-conformance.yml
- type: ErrorCatalog
url: errors/authentik-problem-types.yml
- type: Lifecycle
url: lifecycle/authentik-lifecycle.yml
- type: StatusPage
url: https://status.goauthentik.io
- type: Deprecation
url: lifecycle/authentik-lifecycle.yml
- type: Security
url: security/authentik-vulnerability-disclosure.yml
- type: Conventions
url: conventions/authentik-conventions.yml
- type: ChangeLog
url: changelog/authentik-changelog.yml
- type: CLI
url: cli/authentik-cli.yml
- type: Components
url: components/authentik-components.yml
- type: DataModel
url: data-model/authentik-data-model.yml
- type: Webhooks
url: asyncapi/authentik-events-webhooks.yml
- type: AgentSkill
url: skills/_index.yml
- type: Plans
url: plans/authentik-plans-pricing.yml
- type: RateLimits
url: rate-limits/authentik-rate-limits.yml
- type: FinOps
url: finops/authentik-finops.yml
- type: DeveloperPortal
url: https://docs.goauthentik.io/developer-docs/
- type: APIReference
url: https://api.goauthentik.io/
- type: GettingStarted
url: https://docs.goauthentik.io/install-config/
- type: SignUp
url: https://customers.goauthentik.io
- type: TermsOfService
url: https://goauthentik.io/legal/terms/
- type: PrivacyPolicy
url: https://goauthentik.io/legal/privacy-policy/
- type: Integrations
url: https://integrations.goauthentik.io
x-enrichment:
date: '2026-09-04'
status: enriched
artifacts_added: 75
pass: local-v3
maintainers:
- FN: Kin Lane
email: kin@apievangelist.com
Every provider here is available over the APIs.io API and to AI agents over MCP.
MCP server
One button, every client — Claude, Cursor, VS Code and the rest.
https://apis.io/mcp
Tools for providers
9 MCP tools reach this
find_providersBrowse and filter every provider in the catalog. get_provider_artifactsEvery artifact this provider publishes, grouped by type. get_provider_operationsEvery operation across all of their OpenAPIs — one call instead of parsing every spec. get_provider_toolsEvery MCP tool they ship, with the operation each wraps. get_provider_evidenceHow each part of their score was established. Free — the basis for a claim should not sit behind it. get_provider_ratingPRO — composite, band, trend and facet scores. apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total. resolveTurn a domain, URL or GitHub org into the provider it belongs to. find_cohortsEvery scored population of providers in the catalog.
All 92 tools →
Call it yourself
curl for this page
This provider
curl "https://apis.io/api/v1/providers/authentik"
All providers
curl "https://apis.io/api/v1/providers?limit=25"
Every operation they expose
curl "https://apis.io/api/v1/providers/authentik/operations?limit=25"
How their score was established
curl "https://apis.io/api/v1/providers/authentik/evidence"
Discovery needs no key. Ratings and market analysis are Pro.
Get an API key
Free tier, no form to fill in. Signing in shares your email address with us — we
store it to create your key and to recognise you if you sign in with another
provider. See our Privacy Policy and
Terms .
A second provider on the same verified email joins the account you already have.
Kin Score
How this is scored →