Minimus · Authentication Profile

Minimus Authentication

Authentication

Authentication profile for the Minimus programmatic surfaces. There is no documented public OAuth2/OIDC REST API; access is via a static bearer token used by minicli, plus an open (unauthenticated) MinimOS package repository.

Minimus declares 2 security scheme(s) across its OpenAPI definitions.

CompanyContainer ImagesContainer SecuritySupply Chain SecurityDevSecOpsComplianceCLIHardened Images
Methods: Schemes: 2 OAuth flows: API key in:

Security Schemes

bearer-token
· in: environment-or-login (MINICLI_TOKEN)
none
· in: none ()

Source

Authentication Profile

minimus-authentication.yml Raw ↑
generated: '2026-07-20'
method: searched
source: https://docs.minimus.io/manage/minicli
description: >-
  Authentication profile for the Minimus programmatic surfaces. There is no
  documented public OAuth2/OIDC REST API; access is via a static bearer token
  used by minicli, plus an open (unauthenticated) MinimOS package repository.
docs: https://docs.minimus.io/manage/minicli
schemes:
- id: minicli-token
  type: bearer-token
  in: environment-or-login
  parameter: MINICLI_TOKEN
  token_management: https://images.minimus.io/manage/token
  usage:
  - 'export MINICLI_TOKEN={token}   # CI/CD'
  - 'echo "{token}" | minicli login  # local'
  scope: 'Grants access to manage private image recipes and builds for the account.'
  evidence: 'minicli docs: "All commands require MINICLI_TOKEN to be set."'
- id: minimos-apk-repo
  type: none
  in: none
  scope: 'Open MinimOS package repository packages.mini.dev/os; no credentials required.'
  evidence: 'Package-manager docs: "the MinimOS package repository is open to all, there is no need to pass credentials."'
enterprise:
  sso: 'Enterprise SSO and RBAC for unlimited users (Enterprise plan).'
  evidence: 'Pricing: "Enterprise SSO and RBAC for unlimited users."'
notes: >-
  Container image pulls from the OCI registry use standard registry auth
  (token/credential) where images are private; public starter images are open.