WorkOS

opencollection: 1.0.0
info:
  name: WorkOS
  version: '1.0'
request:
  auth:
    type: bearer
    token: '{{bearerToken}}'
items:
- info:
    name: api_keys
    type: folder
  items:
  - info:
      name: Validate API Key
      type: http
    http:
      method: POST
      url: https://api.workos.com/api_keys/validations
      body:
        type: json
        data: '{}'
    docs: Validate an API key value and return the API key object if valid.
  - info:
      name: Delete an API Key
      type: http
    http:
      method: DELETE
      url: https://api.workos.com/api_keys/:id
      params:
      - name: id
        value: ''
        type: path
        description: The unique ID of the API key.
    docs: Permanently deletes an API key. This action cannot be undone. Once deleted, any requests using this API key will
      fail authentication.
  - info:
      name: List API Keys for a User
      type: http
    http:
      method: GET
      url: https://api.workos.com/user_management/users/:userId/api_keys
      params:
      - name: userId
        value: ''
        type: path
        description: Unique identifier of the user.
      - name: before
        value: ''
        type: query
        description: An object ID that defines your place in the list. When the ID is not present, you are at the end of the
          list.
      - name: after
        value: ''
        type: query
        description: An object ID that defines your place in the list. When the ID is not present, you are at the end of the
          list.
      - name: limit
        value: ''
        type: query
        description: Upper limit on the number of objects to return, between `1` and `100`.
      - name: order
        value: ''
        type: query
        description: Order the results by the creation time.
      - name: organization_id
        value: ''
        type: query
        description: The ID of the organization to filter user API keys by. When provided, only API keys created against that
          organization membership are returned.
    docs: Get a list of API keys owned by a specific user.
  - info:
      name: Create an API Key for a User
      type: http
    http:
      method: POST
      url: https://api.workos.com/user_management/users/:userId/api_keys
      params:
      - name: userId
        value: ''
        type: path
        description: Unique identifier of the user.
      body:
        type: json
        data: '{}'
    docs: Create a new API key owned by a user. The user must have an active membership in the specified organization.
- info:
    name: audit-logs
    type: folder
  items:
  - info:
      name: List Actions
      type: http
    http:
      method: GET
      url: https://api.workos.com/audit_logs/actions
      params:
      - name: before
        value: ''
        type: query
        description: An object ID that defines your place in the list. When the ID is not present, you are at the end of the
          list.
      - name: after
        value: ''
        type: query
        description: An object ID that defines your place in the list. When the ID is not present, you are at the end of the
          list.
      - name: limit
        value: ''
        type: query
        description: Upper limit on the number of objects to return, between `1` and `100`.
      - name: order
        value: ''
        type: query
        description: Order the results by the creation time.
    docs: Get a list of all Audit Log actions in the current environment.
  - info:
      name: List Schemas
      type: http
    http:
      method: GET
      url: https://api.workos.com/audit_logs/actions/:actionName/schemas
      params:
      - name: actionName
        value: ''
        type: path
        description: The name of the Audit Log action.
      - name: before
        value: ''
        type: query
        description: An object ID that defines your place in the list. When the ID is not present, you are at the end of the
          list.
      - name: after
        value: ''
        type: query
        description: An object ID that defines your place in the list. When the ID is not present, you are at the end of the
          list.
      - name: limit
        value: ''
        type: query
        description: Upper limit on the number of objects to return, between `1` and `100`.
      - name: order
        value: ''
        type: query
        description: Order the results by the creation time.
    docs: Get a list of all schemas for the Audit Logs action identified by `:name`.
  - info:
      name: Create Schema
      type: http
    http:
      method: POST
      url: https://api.workos.com/audit_logs/actions/:actionName/schemas
      params:
      - name: actionName
        value: ''
        type: path
        description: The name of the Audit Log action.
      body:
        type: json
        data: '{}'
    docs: Creates a new Audit Log schema used to validate the payload of incoming Audit Log Events. If the `action` does not
      exist, it will also be created.
  - info:
      name: Create Event
      type: http
    http:
      method: POST
      url: https://api.workos.com/audit_logs/events
      headers:
      - name: idempotency-key
        value: ''
      body:
        type: json
        data: '{}'
    docs: 'Create an Audit Log Event.


      This API supports idempotency which guarantees that performing the same operation multiple times will have the same
      result as if the operation were performed only once. This is handy in situations where you may need to retry a request
      due to a failure or prevent accidental duplicate requests from creating more than one resource.


      To achieve idempotency, you can add `Idempotency-Key` request header to a Create Event request with a unique string
      as the value. Each subse'
  - info:
      name: Create Export
      type: http
    http:
      method: POST
      url: https://api.workos.com/audit_logs/exports
      body:
        type: json
        data: '{}'
    docs: Create an Audit Log Export. Exports are scoped to a single organization within a specified date range.
  - info:
      name: Get Export
      type: http
    http:
      method: GET
      url: https://api.workos.com/audit_logs/exports/:auditLogExportId
      params:
      - name: auditLogExportId
        value: ''
        type: path
        description: The unique ID of the Audit Log Export.
    docs: Get an Audit Log Export. The URL will expire after 10 minutes. If the export is needed again at a later time, refetching
      the export will regenerate the URL.
  - info:
      name: Get Retention
      type: http
    http:
      method: GET
      url: https://api.workos.com/organizations/:id/audit_logs_retention
      params:
      - name: id
        value: ''
        type: path
        description: Unique identifier of the Organization.
    docs: Get the configured event retention period for the given Organization.
  - info:
      name: Set Retention
      type: http
    http:
      method: PUT
      url: https://api.workos.com/organizations/:id/audit_logs_retention
      params:
      - name: id
        value: ''
        type: path
        description: Unique identifier of the Organization.
      body:
        type: json
        data: '{}'
    docs: Set the event retention period for the given Organization.
- info:
    name: multi-factor-auth.challenges
    type: folder
  items:
  - info:
      name: Verify Challenge
      type: http
    http:
      method: POST
      url: https://api.workos.com/auth/challenges/:id/verify
      params:
      - name: id
        value: ''
        type: path
        description: The unique ID of the Authentication Challenge.
      body:
        type: json
        data: '{}'
    docs: Verifies an Authentication Challenge.
- info:
    name: multi-factor-auth
    type: folder
  items:
  - info:
      name: Enroll Factor
      type: http
    http:
      method: POST
      url: https://api.workos.com/auth/factors/enroll
      body:
        type: json
        data: '{}'
    docs: Enrolls an Authentication Factor to be used as an additional factor of authentication. The returned ID should be
      used to create an authentication Challenge.
  - info:
      name: Get Factor
      type: http
    http:
      method: GET
      url: https://api.workos.com/auth/factors/:id
      params:
      - name: id
        value: ''
        type: path
        description: The unique ID of the Factor.
    docs: Gets an Authentication Factor.
  - info:
      name: Delete Factor
      type: http
    http:
      method: DELETE
      url: https://api.workos.com/auth/factors/:id
      params:
      - name: id
        value: ''
        type: path
        description: The unique ID of the Factor.
    docs: Permanently deletes an Authentication Factor. It cannot be undone.
  - info:
      name: Challenge Factor
      type: http
    http:
      method: POST
      url: https://api.workos.com/auth/factors/:id/challenge
      params:
      - name: id
        value: ''
        type: path
        description: The unique ID of the Authentication Factor to be challenged.
      body:
        type: json
        data: '{}'
    docs: Creates a Challenge for an Authentication Factor.
- info:
    name: workos-connect
    type: folder
  items:
  - info:
      name: Complete External Authentication
      type: http
    http:
      method: POST
      url: https://api.workos.com/authkit/oauth2/complete
      body:
        type: json
        data: '{}'
    docs: 'Completes an external authentication flow and returns control to AuthKit. This endpoint is used with [Standalone
      Connect](/authkit/connect/standalone) to bridge your existing authentication system with the Connect OAuth API infrastructure.


      After successfully authenticating a user in your application, calling this endpoint will:


      - Create or update the user in AuthKit, using the given `id` as its `external_id`.

      - Return a `redirect_uri` your application should redirect to in order for AuthKit to'
- info:
    name: authorization
    type: folder
  items:
  - info:
      name: Check Authorization
      type: http
    http:
      method: POST
      url: https://api.workos.com/authorization/organization_memberships/:organization_membership_id/check
      params:
      - name: organization_membership_id
        value: ''
        type: path
        description: The ID of the organization membership to check.
      body:
        type: json
        data: '{}'
    docs: Check if an organization membership has a specific permission on a resource. Supports identification by resource_id
      OR by resource_external_id + resource_type_slug.
  - info:
      name: List Resources for Organization Membership
      type: http
    http:
      method: GET
      url: https://api.workos.com/authorization/organization_memberships/:organization_membership_id/resources
      params:
      - name: organization_membership_id
        value: ''
        type: path
        description: The ID of the organization membership.
      - name: before
        value: ''
        type: query
        description: An object ID that defines your place in the list. When the ID is not present, you are at the end of the
          list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent
          call can include `before="obj_123"` to fetch a new batch of objects before `"obj_123"`.
      - name: after
        value: ''
        type: query
        description: An object ID that defines your place in the list. When the ID is not present, you are at the end of the
          list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent
          call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`.
      - name: limit
        value: ''
        type: query
        description: Upper limit on the number of objects to return, between `1` and `100`.
      - name: order
        value: ''
        type: query
        description: Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending),
          and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches
          newer records). Defaults to descending.
      - name: permission_slug
        value: ''
        type: query
        description: The permission slug to filter by. Only child resources where the organization membership has this permission
          are returned.
      - name: parent_resource_id
        value: ''
        type: query
        description: The WorkOS ID of the parent resource. Provide this or both `parent_resource_external_id` and `parent_resource_type_slug`,
          but not both. Mutually exclusive with `parent_resource_type_slug` and `parent_resource_external_id`.
      - name: parent_resource_type_slug
        value: ''
        type: query
        description: The slug of the parent resource type. Must be provided together with `parent_resource_external_id`. Required
          with `parent_resource_external_id`. Mutually exclusive with `parent_resource_id`.
      - name: parent_resource_external_id
        value: ''
        type: query
        description: The application-specific external identifier of the parent resource. Must be provided together with `parent_resource_type_slug`.
          Required with `parent_resource_type_slug`. Mutually exclusive with `parent_resource_id`.
    docs: 'Returns all child resources of a parent resource where the organization membership has a specific permission. This
      is useful for resource discovery—answering "What projects can this user access in this workspace?"


      You must provide either `parent_resource_id` or both `parent_resource_external_id` and `parent_resource_type_slug` to
      identify the parent resource.'
  - info:
      name: List Effective Permissions for an Organization Membership on a Resource
      type: http
    http:
      method: GET
      url: https://api.workos.com/authorization/organization_memberships/:organization_membership_id/resources/:resource_id/permissions
      params:
      - name: organization_membership_id
        value: ''
        type: path
        description: The ID of the organization membership.
      - name: resource_id
        value: ''
        type: path
        description: The ID of the authorization resource.
      - name: before
        value: ''
        type: query
        description: An object ID that defines your place in the list. When the ID is not present, you are at the end of the
          list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent
          call can include `before="obj_123"` to fetch a new batch of objects before `"obj_123"`.
      - name: after
        value: ''
        type: query
        description: An object ID that defines your place in the list. When the ID is not present, you are at the end of the
          list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent
          call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`.
      - name: limit
        value: ''
        type: query
        description: Upper limit on the number of objects to return, between `1` and `100`.
      - name: order
        value: ''
        type: query
        description: Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending),
          and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches
          newer records). Defaults to descending.
    docs: Returns all permissions the organization membership effectively has on a resource, including permissions inherited
      through roles assigned to ancestor resources.
  - info:
      name: List Effective Permissions for an Organization Membership on a Resource by External ID
      type: http
    http:
      method: GET
      url: https://api.workos.com/authorization/organization_memberships/:organization_membership_id/resources/:resource_type_slug/:external_id/permissions
      params:
      - name: organization_membership_id
        value: ''
        type: path
        description: The ID of the organization membership.
      - name: resource_type_slug
        value: ''
        type: path
        description: The slug of the resource type.
      - name: external_id
        value: ''
        type: path
        description: An identifier you provide to reference the resource in your system.
      - name: before
        value: ''
        type: query
        description: An object ID that defines your place in the list. When the ID is not present, you are at the end of the
          list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent
          call can include `before="obj_123"` to fetch a new batch of objects before `"obj_123"`.
      - name: after
        value: ''
        type: query
        description: An object ID that defines your place in the list. When the ID is not present, you are at the end of the
          list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent
          call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`.
      - name: limit
        value: ''
        type: query
        description: Upper limit on the number of objects to return, between `1` and `100`.
      - name: order
        value: ''
        type: query
        description: Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending),
          and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches
          newer records). Defaults to descending.
    docs: Returns all permissions the organization membership effectively has on a resource identified by its external ID,
      including permissions inherited through roles assigned to ancestor resources.
  - info:
      name: List Role Assignments
      type: http
    http:
      method: GET
      url: https://api.workos.com/authorization/organization_memberships/:organization_membership_id/role_assignments
      params:
      - name: organization_membership_id
        value: ''
        type: path
        description: The ID of the organization membership.
      - name: before
        value: ''
        type: query
        description: An object ID that defines your place in the list. When the ID is not present, you are at the end of the
          list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent
          call can include `before="obj_123"` to fetch a new batch of objects before `"obj_123"`.
      - name: after
        value: ''
        type: query
        description: An object ID that defines your place in the list. When the ID is not present, you are at the end of the
          list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent
          call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`.
      - name: limit
        value: ''
        type: query
        description: Upper limit on the number of objects to return, between `1` and `100`.
      - name: order
        value: ''
        type: query
        description: Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending),
          and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches
          newer records). Defaults to descending.
      - name: resource_id
        value: ''
        type: query
        description: Filter assignments by the ID of the resource.
      - name: resource_external_id
        value: ''
        type: query
        description: Filter assignments by the external ID of the resource.
      - name: resource_type_slug
        value: ''
        type: query
        description: Filter assignments by the slug of the resource type.
    docs: List all role assignments for an organization membership. This returns all roles that have been assigned to the
      user on resources, including organization-level and sub-resource roles.
  - info:
      name: Assign a Role
      type: http
    http:
      method: POST
      url: https://api.workos.com/authorization/organization_memberships/:organization_membership_id/role_assignments
      params:
      - name: organization_membership_id
        value: ''
        type: path
        description: The ID of the organization membership.
      body:
        type: json
        data: '{}'
    docs: Assign a role to an organization membership on a specific resource.
  - info:
      name: Remove a Role Assignment
      type: http
    http:
      method: DELETE
      url: https://api.workos.com/authorization/organization_memberships/:organization_membership_id/role_assignments
      params:
      - name: organization_membership_id
        value: ''
        type: path
        description: The ID of the organization membership.
      body:
        type: json
        data: '{}'
    docs: Remove a role assignment by role slug and resource.
  - info:
      name: Remove a Role Assignment by ID
      type: http
    http:
      method: DELETE
      url: https://api.workos.com/authorization/organization_memberships/:organization_membership_id/role_assignments/:role_assignment_id
      params:
      - name: organization_membership_id
        value: ''
        type: path
        description: The ID of the organization membership.
      - name: role_assignment_id
        value: ''
        type: path
        description: The ID of the role assignment to remove.
    docs: Remove a role assignment using its ID.
  - info:
      name: List Custom Roles
      type: http
    http:
      method: GET
      url: https://api.workos.com/authorization/organizations/:organizationId/roles
      params:
      - name: organizationId
        value: ''
        type: path
        description: The ID of the organization.
    docs: Get a list of all roles that apply to an organization. This includes both environment roles and custom roles, returned
      in priority order.
  - info:
      name: Create a Custom Role
      type: http
    http:
      method: POST
      url: https://api.workos.com/authorization/organizations/:organizationId/roles
      params:
      - name: organizationId
        value: ''
        type: path
        description: The ID of the organization.
      body:
        type: json
        data: '{}'
    docs: Create a new custom role for this organization.
  - info:
      name: Get a Custom Role
      type: http
    http:
      method: GET
      url: https://api.workos.com/authorization/organizations/:organizationId/roles/:slug
      params:
      - name: organizationId
        value: ''
        type: path
        description: The ID of the organization.
      - name: slug
        value: ''
        type: path
        description: The slug of the role.
    docs: Retrieve a role that applies to an organization by its slug. This can return either an environment role or a custom
      role.
  - info:
      name: Update a Custom Role
      type: http
    http:
      method: PATCH
      url: https://api.workos.com/authorization/organizations/:organizationId/roles/:slug
      params:
      - name: organizationId
        value: ''
        type: path
        description: The ID of the organization.
      - name: slug
        value: ''
        type: path
        description: The slug of the role.
      body:
        type: json
        data: '{}'
    docs: Update an existing custom role. Only the fields provided in the request body will be updated.
  - info:
      name: Delete a Custom Role
      type: http
    http:
      method: DELETE
      url: https://api.workos.com/authorization/organizations/:organizationId/roles/:slug
      params:
      - name: organizationId
        value: ''
        type: path
        description: The ID of the organization.
      - name: slug
        value: ''
        type: path
        description: The slug of the role.
    docs: Delete an existing custom role.
  - info:
      name: Add a Permission to a Custom Role
      type: http
    http:
      method: POST
      url: https://api.workos.com/authorization/organizations/:organizationId/roles/:slug/permissions
      params:
      - name: organizationId
        value: ''
        type: path
        description: The ID of the organization.
      - name: slug
        value: ''
        type: path
        description: The slug of the role.
      body:
        type: json
        data: '{}'
    docs: Add a single permission to a custom role. If the permission is already assigned to the role, this operation has
      no effect.
  - info:
      name: Set Permissions for a Custom Role
      type: http
    http:
      method: PUT
      url: https://api.workos.com/authorization/organizations/:organizationId/roles/:slug/permissions
      params:
      - name: organizationId
        value: ''
        type: path
        description: The ID of the organization.
      - name: slug
        value: ''
        type: path
        description: The slug of the role.
      body:
        type: json
        data: '{}'
    docs: Replace all permissions on a custom role with the provided list.
  - info:
      name: Remove a Permission from a Custom Role
      type: http
    http:
      method: DELETE
      url: https://api.workos.com/authorization/organizations/:organizationId/roles/:slug/permissions/:permissionSlug
      params:
      - name: organizationId
        value: ''
        type: path
        description: The ID of the organization.
      - name: slug
        value: ''
        type: path
        description: The slug of the role.
      - name: permissionSlug
        value: ''
        type: path
        description: The slug of the permission to remove.
    docs: Remove a single permission from a custom role by its slug.
  - info:
      name: Get a Resource by External ID
      type: http
    http:
      method: GET
      url: https://api.workos.com/authorization/organizations/:organization_id/resources/:resource_type_slug/:external_id
      params:
      - name: organization_id
        value: ''
        type: path
        description: The ID of the organization that owns the resource.
      - name: resource_type_slug
        value: ''
        type: path
        description: The slug of the resource type.
      - name: external_id
        value: ''
        type: path
        description: An identifier you provide to reference the resource in your system.
    docs: Retrieve the details of an authorization resource by its external ID, organization, and resource type. This is useful
      when you only have the external ID from your system and need to fetch the full resource details.
  - info:
      name: Update a Resource by External ID
      type: http
    http:
      method: PATCH
      url: https://api.workos.com/authorization/organizations/:organization_id/resources/:resource_type_slug/:external_id
      params:
      - name: organization_id
        value: ''
        type: path
        description: The ID of the organization that owns the resource.
      - name: resource_type_slug
        value: ''
        type: path
        description: The slug of the resource type.
      - name: external_id
        value: ''
        type: path
        description: An identifier you provide to reference the resource in your system.
      body:
        type: json
        data: '{}'
    docs: Update an existing authorization resource using its external ID.
  - info:
      name: Delete an Authorization Resource by External ID
      type: http
    http:
      method: DELETE
      url: https://api.workos.com/authorization/organizations/:organization_id/resources/:resource_type_slug/:external_id
      params:
      - name: organization_id
        value: ''
        type: path
        description: The ID of the organization that owns the resource.
      - name: resource_type_slug
        value: ''
        type: path
        description: The slug of the resource type.
      - name: external_id
        value: ''
        type: path
        description: An identifier you provide to reference the resource in your system.
      - name: cascade_delete
        value: ''
        type: query
        description: If true, deletes all descendant resources and role assignments. If not set and the resource has children
          or assignments, the request will fail.
    docs: Delete an authorization resource by organization, resource type, and external ID. This also deletes all descendant
      resources.
  - info:
      name: List Memberships for a Resource by External ID
      type: http
    http:
      method: GET
      url: https://api.workos.com/authorization/organizations/:organization_id/resources/:resource_type_slug/:external_id/organization_memberships
      params:
      - name: organization_id
        value: ''
        type: path
        description: The ID of the organization that owns the resource.
      - name: resource_type_slug
        value: ''
        type: path
        description: The slug of the resource type this resource belongs to.
      - name: external_id
        value: ''
        type: path
        description: An identifier you provide to reference the resource in your system.
      - name: before
        value: ''
        type: query
        description: An object ID that defines your place in the list. When the ID is not present, you are at the end of the
          list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent
          call can include `before="obj_123"` to fetch a new batch of objects before `"obj_123"`.
      - name: after
        value: ''
        type: query
        description: An object ID that defines your place in the list. When the ID is not present, you are at the end of the
          list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent
          call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`.
      - name: limit
        value: ''
        type: query
        description: Upper limit on the number of objects to return, between `1` and `100`.
      - name: order
        value: ''
        type: query
        description: Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending),
          and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches
          newer records). Defaults to descending.
      - name: permission_slug
        value: ''
        type: query
        description: The permission slug to filter by. Only users with this permission on the resource are returned.
      - name: assignment
        value: ''
        type: query
        description: Filter by assignment type. Use "direct" for direct assignments only, or "indirect" to include inherited
          assignments.
    docs: Returns all organization memberships that have a specific permission on a resource, using the resource's external
      ID. This is useful for answering "Who can access this resource?" when you only have the external ID.
  - info:
      name: List Role Assignments for a Resource by External ID
      type: http
    http:
      method: GET
      url: https://api.workos.com/authorization/organizations/:organization_id/resources/:resource_type_slug/:external_id/role_assignments
      params:
      - name: organization_id
        value: ''
        type: path
        description: The ID of the organization that owns the resource.
      - name: resource_type_slug
        value: ''
        type: path
        description: The slug of the resource type.
      - name: external_id
        value: ''
        type: path
        description: An identifier you provide to reference the resource in your system.
      - name: before
        value: ''
        type: query
        description: An object ID that defines your place in the list. When the ID is not present, you are at the end of the
          list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent
          call can include `before="obj_123"` to fetch a new batch of obj

# --- truncated at 32 KB (127 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/workos/refs/heads/main/apis.yml