How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

Need help?

Contact us
Aembit

Aembit Cloud API

The Aembit Cloud API is the management and control plane contract for the Aembit platform. It exposes 165 operations across 74 paths for Access Policies, Access Conditions, Client and Server Workloads, Credential Providers, Trust Providers, Trust Provider Secrets, Content Security, Resource Sets, Roles, Users, SSO Identity Providers, Sign-On Policies, Integrations, Discovery Integrations, Log Streams, Certificate Authorities, Routing, Agent Controllers, and the Audit Log, Authorization Event and Workload Event reporting surfaces. Authentication is a bearer API token issued from the Aembit Admin UI; the host is tenant-scoped.

Documentation Provider Profile APIs.io OpenAPI GitHub

This API exposes 165 operations across 74 paths, organized into 34 resource areas, and defines 181 schemas. It is described by OpenAPI 3.1.1, at version v1.

Requests are made against a single base URL, https://{tenant}.aembit.io.

165 operations 74 paths 181 schemas 22 DELETE69 GET22 PATCH27 POST25 PUT

Metadata

The identity and technical contract details declared by the specification.

Specification
OpenAPI 3.1.1
API Version
v1
Base URL
https://{tenant}.aembit.io
Authentication
HTTP Bearer
Resource Areas
34

Authentication & Security 1

Aembit Cloud API declares 1 security scheme for authenticating requests. It accepts HTTP bearer tokens (Reference) (bearerAuth). By default, every request must be authenticated, though some operations may also be called without credentials.

  • bearerAuth — Authorization header using the Bearer scheme.

Paths & Operations 165

Across 74 paths, the API surfaces 165 operations — 22 DELETE, 69 GET, 22 PATCH, 27 POST, 25 PUT. They span 34 resource areas, including Access Condition, Access Condition v2, Access Policy (Deprecated), Access Policy v2, Agent Controller, Audit Log, Access Authorization Event, Compliance, and 26 more. Each is listed below with its method, path, parameters, and response codes.

Access Condition 6
GET
/api/v1/access-conditions
Get a page of Access Conditions
get-access-conditions 6 params → 200400401500
POST
/api/v1/access-conditions
Create an Access Condition
post-access-condition 1 param body → 201400401500
PUT
/api/v1/access-conditions
Update a single Access Condition
put-access-condition 1 param body → 200400401500
GET
/api/v1/access-conditions/{id}
Get the identified Access Condition
get-access-condition 2 params → 200204400401500
DELETE
/api/v1/access-conditions/{id}
Delete a single Access Condition
delete-access-condition 2 params → 204400401404500
PATCH
/api/v1/access-conditions/{id}
Patch a single Access Condition
patch-access-condition 2 params body → 200400401500
Access Condition v2 6
GET
/api/v2/access-conditions
Get a page of Access Conditions
get-access-conditions2 6 params → 200400401500
POST
/api/v2/access-conditions
Create an Access Condition
post-access-condition2 1 param body → 201400401500
PUT
/api/v2/access-conditions
Update a single Access Condition
put-access-condition2 1 param body → 200400401500
GET
/api/v2/access-conditions/{id}
Get the identified Access Condition
get-access-condition2 2 params → 200204400401500
DELETE
/api/v2/access-conditions/{id}
Delete a single Access Condition
delete-access-condition2 2 params → 204400401404500
PATCH
/api/v2/access-conditions/{id}
Patch a single Access Condition
patch-access-condition2 2 params body → 200400401500
Access Policy (Deprecated) 8
GET
/api/v1/access-policies/{id}
Get the identified Access Policy
get-access-policy 2 params → 200204400401500
DELETE
/api/v1/access-policies/{id}
Delete an Access Policy
delete-access-policy 2 params → 204400401500
PATCH
/api/v1/access-policies/{id}
Patch an Access Policy
patch-access-policy 2 params body → 200400401500
GET
/api/v1/access-policies/getByWorkloadIds/{clientWorkloadId}/{serverWorkloadId}
Get the identified Access Policy
get-access-policy-by-workloads 3 params → 200400401500
GET
/api/v1/access-policies
Get a page of Access Policies
get-access-policies 6 params → 200400401500
POST
/api/v1/access-policies
Create an Access Policy
post-access-policy 1 param body → 200400401500
PUT
/api/v1/access-policies
Update an Access Policy
put-access-policy 1 param body → 200400401500
POST
/api/v1/access-policies/{id}/notes
Add a note to an Access Policy
post-access-policy-note 2 params body → 201400401500
Access Policy v2 10
GET
/api/v2/access-policies/{id}
Get the identified Access Policy
get-access-policy-v2 1 param → 200204400401500
DELETE
/api/v2/access-policies/{id}
Delete an Access Policy
delete-access-policy-v2 1 param → 204400401404500
PATCH
/api/v2/access-policies/{id}
Patch an Access Policy
patch-access-policy-v2 1 param body → 200400401500
GET
/api/v2/access-policies/getByWorkloadIds/{clientWorkloadId}/{serverWorkloadId}
Get the identified Access Policy
get-access-policy-by-workloads-v2 2 params → 200400401500
GET
/api/v2/access-policies
Get a page of Access Policies
get-access-policies-v2 6 params → 200400401500
POST
/api/v2/access-policies
Create an Access Policy
post-access-policy-v2 body → 200400401500
PUT
/api/v2/access-policies
Update an Access Policy
put-access-policy-v2 body → 200400401500
POST
/api/v2/access-policies/{id}/notes
Add a note to an Access Policy
post-access-policy-note-v2 1 param body → 201400401500
GET
/api/v2/access-policies/{id}/notes
Gets notes for an Access Policy
get-access-policy-notes-v2 1 param → 200400401500
GET
/api/v2/access-policies/{id}/credential-mappings
Gets a credential mappings of Access Policy
get-access-policy-credential-mappings-v2 1 param → 200400401500
Agent Controller 7
GET
/api/v1/agent-controllers
Get a page of Agent Controllers
get-agent-controllers 6 params → 200400401500
POST
/api/v1/agent-controllers
Create an Agent Controller
post-agent-controller body → 201400401500
PUT
/api/v1/agent-controllers
Update an Agent Controller
put-agent-controller body → 200400401500
GET
/api/v1/agent-controllers/{id}
Get an Agent Controller
get-agent-controller 1 param → 200204400401500
PATCH
/api/v1/agent-controllers/{id}
Patch an Agent Controller
patch-agent-controller 1 param body → 200400401500
DELETE
/api/v1/agent-controllers/{id}
Delete an Agent Controller
delete-agent-controller 1 param → 201400401500
POST
/api/v1/agent-controllers/{agentControllerExternalId}/device-code
Generate a Device Code for an Agent Controller
post-agent-controller-device-code 1 param → 201400401500
Audit Log 2
GET
/api/v1/audit-logs
Get a page of Audit Log events
get-audit-logs 11 params → 200400401500
GET
/api/v1/audit-logs/{id}
Get an Audit Log event
get-audit-log 2 params → 200400401500
Access Authorization Event 2
GET
/api/v1/authorization-events
Get a page of Access Authorization Events
get-access-authorization-events 11 params → 200400401500
GET
/api/v1/authorization-events/{id}
Get an Access Authorization Event
get-access-authorization-event 2 params → 200400401500
Compliance 2
GET
/api/v1/compliance-settings
Gets global compliance settings
get-compliance-settings → 200401500
PUT
/api/v1/compliance-settings
Updates a global compliance setting
update-compliance-setting body → 200400401500
Content Security 6
GET
/api/v1/content-security/{id}
Get a Content Security
get-content-security 1 param → 200400401500
DELETE
/api/v1/content-security/{id}
Delete a Content Security
delete-content-security 1 param → 204400401500
PATCH
/api/v1/content-security/{id}
Patch a Content Security
patch-content-security 1 param body → 200400401500
GET
/api/v1/content-security
Get a page of Content Security
get-content-security-list 5 params → 200400401500
POST
/api/v1/content-security
Create a Content Security
post-content-security body → 201400401500
PUT
/api/v1/content-security
Update a Content Security
put-content-security body → 200400401500
Credential Provider (Deprecated) 8
GET
/api/v1/credential-providers/{id}
Get a Credential Provider
get-credential-provider 2 params → 200204400401500
DELETE
/api/v1/credential-providers/{id}
Delete a Credential Provider
delete-credential-provider 2 params → 204400401500
PATCH
/api/v1/credential-providers/{id}
Patch a Credential Provider
patch-credential-provider 2 params body → 201400401500
GET
/api/v1/credential-providers/{id}/authorize
Get a Credential Provider Authorization URL
get-credential-provider-authorization 2 params → 302400401500
GET
/api/v1/credential-providers
Get a page of Credential Providers
get-credential-providers 6 params → 200400401500
POST
/api/v1/credential-providers
Create a Credential Provider
post-credential-provider 1 param body → 201400401500
PUT
/api/v1/credential-providers
Update a Credential Provider
put-credential-provider 1 param body → 201400401500
GET
/api/v1/credential-providers/{id}/verification
Verify the Credential Provider
get-credential-provider-verification 2 params → 200400401500
Credential Provider Integration 7
GET
/api/v1/credential-integrations/{id}
Get a Credential Provider Integration
get-credential-provider-integration 1 param → 200400401500
DELETE
/api/v1/credential-integrations/{id}
Delete a Credential Provider Integration
delete-credential-provider-integration 1 param → 204400401404500
PATCH
/api/v1/credential-integrations/{id}
Patch a Credential Provider Integration
patch-credential-provider-integration 1 param body → 200400401500
GET
/api/v1/credential-integrations
Get a page of Credential Provider Integrations
get-credential-provider-integrations 5 params → 200400401500
POST
/api/v1/credential-integrations
Create a Credential Provider Integration
post-credential-provider-integration body → 201400401500
PUT
/api/v1/credential-integrations
Update a Credential Provider Integration
put-credential-provider-integration body → 200400401404500
GET
/api/v1/credential-integrations/list/{type}
Get a list of Credential Provider Integrations by type
get-credential-provider-integration-list 1 param → 200400401500
Credential Provider v2 8
POST
/api/v2/credential-providers
Create a Credential Provider
post-credential-provider2 1 param body → 201400401500
PUT
/api/v2/credential-providers
Update a Credential Provider
put-credential-provider2 1 param body → 200400401500
GET
/api/v2/credential-providers
Get a page of Credential Providers
get-credential-providers-v2 6 params → 200400401500
GET
/api/v2/credential-providers/{id}
Get a Credential Provider
get-credential-provider2 2 params → 200204400401500
DELETE
/api/v2/credential-providers/{id}
Delete a Credential Provider
delete-credential-provider2 2 params → 204400401404500
PATCH
/api/v2/credential-providers/{id}
Patch a Credential Provider
patch-credential-provider-v2 2 params body → 200400401500
GET
/api/v2/credential-providers/{id}/verification
Verify the Credential Provider
get-credential-provider-verification-v2 2 params → 200400401500
GET
/api/v2/credential-providers/{id}/authorize
Get a Credential Provider Authorization URL
get-credential-provider-authorization-v2 2 params → 302400401500
DiscoveryIntegration 6
GET
/api/v1/discovery-integrations
Get a page of Integrations
get-discovery-integrations 4 params → 200400401500
POST
/api/v1/discovery-integrations
Create an Integration
post-discovery-integration body → 201400401500
PUT
/api/v1/discovery-integrations
Update an Integration
put-discovery-integration body → 200400401500
GET
/api/v1/discovery-integrations/{id}
Get an Integration
get-discovery-integration 1 param → 200204400401500
DELETE
/api/v1/discovery-integrations/{id}
Delete an Integration
delete-discovery-integration 1 param → 200400401500
PATCH
/api/v1/discovery-integrations/{id}
Patch an Integration
patch-discovery-integration 1 param body → 200400401500
DiscoveryServerWorkloadDraft 1
GET
/api/alpha/server-workload-drafts/{id}
1 param → 200
Workload Event 2
GET
/api/v1/workload-events
Get a page of Workload Events
get-workload-events 14 params → 200400401500
GET
/api/v1/workload-events/{id}
Get a Workload Event
get-workload-event 2 params → 200400401500
Health 1
GET
/api/v1/health
Aembit Cloud API Health
get-health → 200
Integration 6
GET
/api/v1/integrations
Get a page of Integrations
get-integrations 5 params → 200400401500
POST
/api/v1/integrations
Create an Integration
post-integration 1 param body → 201400401500
PUT
/api/v1/integrations
Update an Integration
put-integration 1 param body → 200400401500
GET
/api/v1/integrations/{id}
Get an Integration
get-integration 2 params → 200204400401500
DELETE
/api/v1/integrations/{id}
Delete an Integration
delete-integration 2 params → 200400401500
PATCH
/api/v1/integrations/{id}
Patch an Integration
patch-integration 2 params body → 200400401500
Integration v2 6
GET
/api/v2/integrations
Get a page of Integrations
get-integrations2 5 params → 200400401500
POST
/api/v2/integrations
Create an Integration
post-integration2 1 param body → 201400401500
PUT
/api/v2/integrations
Update an Integration
put-integration2 1 param body → 200400401500
GET
/api/v2/integrations/{id}
Get an Integration
get-integration2 2 params → 200204400401500
DELETE
/api/v2/integrations/{id}
Delete an Integration
delete-integration2 2 params → 200400401500
PATCH
/api/v2/integrations/{id}
Patch an Integration
patch-integration2 2 params body → 200400401500
Log Stream 6
GET
/api/v1/log-streams
Get a page of Log Streams
get-log-streams 4 params → 200400401500
POST
/api/v1/log-streams
Create a Log Stream
post-log-stream body → 201400401500
PUT
/api/v1/log-streams
Update a Log Stream
put-log-stream body → 200400401500
GET
/api/v1/log-streams/{id}
Get a Log Stream
get-log-stream 1 param → 200204400401500
DELETE
/api/v1/log-streams/{id}
Delete a Log Stream
delete-log-stream 1 param → 204400401500
PATCH
/api/v1/log-streams/{id}
Patch a Log Stream
patch-log-stream 1 param body → 200400401500
Resource Set 6
GET
/api/v1/resource-sets/{id}
Get a Resource Set
get-resource-set 1 param → 200400401500
PATCH
/api/v1/resource-sets/{id}
Patch a Resource Set
patch-resource-set 1 param body → 200400401500
DELETE
/api/v1/resource-sets/{id}
Delete a Resource Set
delete-resource-set-integration 1 param → 204400401404500
GET
/api/v1/resource-sets
Get a page of Resource Sets
get-resource-sets 5 params → 200400401500
POST
/api/v1/resource-sets
Create a Resource Set
post-resource-set body → 201400401500
PUT
/api/v1/resource-sets
Update a Resource Set
put-resource-set body → 200400401500
Role 6
GET
/api/v1/roles
Get a page of Roles
get-roles 5 params → 200400401500
POST
/api/v1/roles
Create a new Role
post-role body → 201400401500
PUT
/api/v1/roles
Update a Role
put-role body → 200400401500
GET
/api/v1/roles/{id}
Get a Role
get-role 1 param → 200204400401500
DELETE
/api/v1/roles/{id}
Delete a Role
delete-role 1 param → 204400401500
PATCH
/api/v1/roles/{id}
Patch a Role
patch-role 1 param body → 200400401500
Routing 5
GET
/api/v1/routings/{id}
Get a Routing
get-routing 1 param → 200400401403404500
PATCH
/api/v1/routings/{id}
Patch a Routing
patch-routing 1 param body → 200400401500
GET
/api/v1/routings
Get a page of Routings
get-routings 5 params → 200400401500
POST
/api/v1/routings
Create a Routing
post-routing body → 201400401403500
PUT
/api/v1/routings
Update a Routing
put-routing body → 200400401500
SignOn Policy 1
GET
/api/v1/signin-policies
Get a SignOn Policy
get-signon-policy → 200204400401500
MFA SignOn Policy 1
PUT
/api/v1/signin-policies/mfa
Update a MFA SignOn Policy
put-mfa-signon Policy body → 200400401403500
SSO SignOn Policy 1
PUT
/api/v1/signin-policies/sso
Update a SSO SignOn Policy
put-SSO-signon Policy body → 200400401500
SSO Identity Provider 7
GET
/api/v1/sso-idps/{id}/verification
Verify the SSO Identity Provider
get-identity-provider-verification 1 param → 200400401500
GET
/api/v1/sso-idps/{id}
Get a SSO Identity Provider
get-identity-provider 1 param → 200400401500
DELETE
/api/v1/sso-idps/{id}
Delete a SSO Identity Provider
delete-identity-provider 1 param → 204400401500
PATCH
/api/v1/sso-idps/{id}
Patch a SSO Identity Provider
patch-identity-provider 1 param body → 200400401500
GET
/api/v1/sso-idps
Get a page of SSO Identity Providers
get-identity-providers 5 params → 200400401500
POST
/api/v1/sso-idps
Create a SSO Identity Provider
post-identity-provider body → 201400401500
PUT
/api/v1/sso-idps
Update a SSO Identity Provider
put-identity-provider body → 200400401500
Standalone Certificate Authority 6
DELETE
/api/v1/certificate-authorities/{id}
Delete a Standalone Certificate Authority
delete-standalone-certificate-authority 1 param → 204400401500
GET
/api/v1/certificate-authorities/{id}
Get a Standalone Certificate Authority
get-standalone-certificate-authority 1 param → 200400401500
PATCH
/api/v1/certificate-authorities/{id}
Patch a Standalone Certificate Authority
patch-standalone-certificate-authority 1 param body → 200400401500
GET
/api/v1/certificate-authorities
Get a page of Standalone Certificate Authorities
get-standalone-certificate-authorities 5 params → 200400401500
POST
/api/v1/certificate-authorities
Create a Standalone Certificate Authority
post-standalone-certificate-authority body → 201400401500
PUT
/api/v1/certificate-authorities
Update a Standalone Certificate Authority
put-standalone-certificate-authority body → 200400401500
Standalone TLS Decrypt 1
GET
/api/v1/certificate-authorities/{id}/root-ca
Download Standalone Root CA Certificate
standalone-root-ca 1 param → 200
TLS Decrypt 1
GET
/api/v1/root-ca
Download Tenant Root CA Certificate
root-ca → 200
Trust Provider 6
GET
/api/v1/trust-providers
Get a page of Trust Providers
get-trust-providers 7 params → 200400401500
POST
/api/v1/trust-providers
Create a Trust Provider
post-trust-provider 1 param body → 200400401500
PUT
/api/v1/trust-providers
Update a Trust Provider
put-trust-provider 1 param body → 200400401500
GET
/api/v1/trust-providers/{id}
Get a Trust Provider
get-trust-provider 2 params → 200204400401500
DELETE
/api/v1/trust-providers/{id}
Delete a Trust Provider
delete-trust-provider 2 params → 204400401404500
PATCH
/api/v1/trust-providers/{id}
Patch a Trust Provider
patch-trust-provider 2 params body → 200400401500
Trust Provider Secret 4
GET
/api/v1/trust-providers/{tpId}/secrets
Get a page of Trust Provider Secrets
get-trust-providers-secrets 6 params → 200400401500
POST
/api/v1/trust-providers/{tpId}/secrets
Create a Trust Provider Secret
post-trust-provider-secret 2 params body → 200400401500
GET
/api/v1/trust-providers/{tpId}/secrets/{secretId}
Get a Trust Provider Secret
get-trust-provider-secret 3 params → 200204400401500
DELETE
/api/v1/trust-providers/{tpId}/secrets/{secretId}
Delete a Trust Provider Secret
delete-trust-provider-secret 3 params → 204400401404500
User 7
GET
/api/v1/users
Get a page of Users
get-users 5 params → 200400401500
POST
/api/v1/users
Create a User
post-user body → 201400401500
PATCH
/api/v1/users/{id}
Patch a User
patch-user 1 param body → 200400401500
GET
/api/v1/users/{id}
Get a User
get-user 1 param → 201204400401500
PUT
/api/v1/users/{id}
Update a User
put-user 1 param body → 200400401500
DELETE
/api/v1/users/{id}
Delete a User
delete-user 1 param → 204400401500
POST
/api/v1/users/{id}/unlock
Unlock a User
post-user-unlock 1 param → 200400401500
Server Workload 6
POST
/api/v1/server-workloads
Create a Server Workload
post-server-workload 1 param body → 204400401500
PUT
/api/v1/server-workloads
Update a Server Workload
put-server-workload 1 param body → 200400401500
GET
/api/v1/server-workloads
Get a page of Server Workloads
get-server-workloads 6 params → 200400401500
PATCH
/api/v1/server-workloads/{id}
Patch a Server Workload
patch-server-workload 2 params body → 200400401500
GET
/api/v1/server-workloads/{id}
Get a Server Workload
get-server-workload 2 params → 200204400401500
DELETE
/api/v1/server-workloads/{id}
Delete a Server Workload
delete-server-workload 2 params → 204400401500
Client Workload 7
POST
/api/v1/client-workloads
Create a Client Workload
post-client-workload 1 param body → 204400401500
PUT
/api/v1/client-workloads
Update a Client Workload
put-client-workload 1 param body → 200400401500
GET
/api/v1/client-workloads
Get a page of Client Workloads
get-client-workloads 6 params → 200400401500
PATCH
/api/v1/client-workloads/{id}
Patch a Client Workload
patch-client-workload 2 params body → 200400401500
GET
/api/v1/client-workloads/{id}
Get a Client Workload
get-client-workload 2 params → 200204400401500
DELETE
/api/v1/client-workloads/{id}
Delete a Client Workload
delete-client-workload 2 params → 204400401404500
GET
/api/v1/client-workloads/identifiers
Get Client Identifier List
get-client-identifiers → 200204400401

Schemas 181

The contract defines 181 schemas that model the data the API accepts and returns. The most detailed are TrustProviderDTO (24 properties), PolicyDTO (19 properties), ResourceSetDTO (19 properties), PolicyExternalDTO (17 properties). Each schema is shown below with its type and property counts.

AccessConditionDTO
object
DTO of an individual Access Condition for enforcement during Access Policy evaluation
15 properties 4 required
AccessConditionDTOAccessConditionListDTO
object
Page of Access Conditions
6 properties
AccessConditionPatchDTO
object
Patch Request DTO for individual Access Condition
4 properties
AccessConditionV2DTO
object
15 properties 4 required
AccessConditionV2DTOAccessConditionListDTO
object
Page of Access Conditions
6 properties
AgentControllerDTO
object
DTO of an individual Agent Controller for Agent Proxy management
16 properties 1 required
AgentControllerDeviceCodeDTO
object
DTO of an individual Agent Controller Device Code
1 property
AgentControllerListDTO
object
Page of Agent Controllers for Agent Proxy management
6 properties
AgentControllerPatchDTO
object
Patch Request DTO for individual Agent Controller
3 properties
AgentControllerTagDTO
object
Agent Controller Tag key and value
2 properties 2 required
AgentControllerTlsCertificateDTO
object
Agent Controller TLS Certificate information
8 properties 7 required
AuditActorDTO
object
DTO for the Actor details of an Aembit Audit Log
6 properties
AuditClientDTO
object
DTO for the Client details of an Aembit Audit Log
2 properties
AuditLogDTO
object
DTO for an individual Aembit Audit Log
11 properties
AuditLogListDTO
object
Page of Aembit Audit Logs
6 properties
AuditOutcomeDTO
object
DTO for the Outcome of an individual Aembit Audit Log
2 properties
AuthorizationEventAtttestationResultDTO
object
Individual Access Entity Attestation Result of an Aembit Access Authorization Event
9 properties
AuthorizationEventCPResultDTO
object
Individual Credential Provider Result of an Aembit Access Authorization Event
6 properties
AuthorizationEventDTO
object
An individual Aembit Access Authorization Event
16 properties
AuthorizationEventDataMetaDTO
object
Metadata DTO for an individual Aembit Access Authorization Event
8 properties
AuthorizationEventEntityResultDTO
object
Access Entity Result of an Aembit Access Authorization Event
4 properties
AuthorizationEventEnvironmentDataDTO
object
13 properties
AuthorizationEventListDTO
object
Page of Aembit Access Authorization Events
6 properties
AuthorizationEventOutcomeDTO
object
Outcome of an individual Aembit Access Authorization Event
2 properties
AwsIamRoleCpiDTO
DTO for AWS IAM Role Credential Provider Integration
AzureEntraFederationCredentialProviderIntegrationDTO
Individual Credential Provider Integration
CPAwsStsV2DTO
CPGitLabManagedAccountDTO
CPTypeAembitAccessTokenV2DTO
CPTypeApiKeyUIV2DTO
CPTypeAzureEntraFederationV2DTO
CPTypeAzureKeyVaultValueDTO
CPTypeClaudeWifV2DTO
CPTypeGoogleWorkflowIDFederationV2DTO
CPTypeJWTTokenV2DTO
CPTypeOAuth2AuthorizationCodeUIV2DTO
CPTypeOAuth2ClientCredentialsUIV2DTO
CPTypeOAuth2CustomParameters
object
3 properties
CPTypeOpenAiWifV2DTO
CPTypeUsernamePasswordUIV2DTO
CPTypeVaultClientTokenV2DTO
ClientIdentifierExternalDTO
object
4 properties
ClientRequestDTO
object
2 properties 2 required
ClientWorkloadExternalDTO
object
16 properties 3 required
ClientWorkloadIdentityDTO
object
3 properties 1 required
ClientWorkloadListDTO
object
Page of Client Workloads
6 properties
ClientWorkloadPatchDTO
object
5 properties
ContentSecurityDTO
object
Individual Content Security
12 properties 4 required
ContentSecurityDTOListDTO
object
6 properties
ContentSecurityPatchDTO
object
Patch request for an individual Content Security
4 properties
CreatePolicyDTO
object
Create/Update Access Policy
16 properties 3 required
CredentialProviderDTO
object
Individual Credential Provider
16 properties 4 required
CredentialProviderIntegrationDTO
object
Individual Credential Provider Integration
15 properties 4 required
CredentialProviderIntegrationPatchDTO
object
Patch Request for an individual Credential Provider Integration
4 properties
CredentialProviderIntegrationType
string
CredentialProviderPatchDTO
object
Patch request for an individual Credential Provider
6 properties
CredentialProviderUIDTO
object
Individual Credential Provider
16 properties 4 required
CredentialProviderUIDTOCredentialProviderListDTO
object
Page of Credential Providers
6 properties
CredentialProviderV2DTO
object
14 properties 4 required
CredentialProviderV2DTOCredentialProviderListDTO
object
Page of Credential Providers
6 properties
CrowdStrikeAIDRContentSecurityDTO
Individual Content Security
CrowdStrikeAccessConditionDTO
CrowdStrikeIntegrationDTO
Integration details for 3rd party data used by Access Conditions
DiscoveryIntegrationDTO
object
Integration details for 3rd party data used by Discovery
16 properties 7 required
DiscoveryIntegrationListDTO
object
Page of Integrations
6 properties
DiscoveryIntegrationPatchDTO
object
Patch request for an individual Integration
4 properties
EntityMetaDTO
object
4 properties
EntityPatchDTO
object
4 properties
EventDTO
object
3 properties
EventListDTO
object
6 properties
EventMetaDTO
object
8 properties
EventNetworkDTO
object
5 properties
EventOutcomeDTO
object
1 property
EventResultDTO
object
4 properties
GenericResponseDTO
object
DTO for a Generic API Response
3 properties
GeoIPAccessConditionDTO
GeoIPAccessConditionLocationDTO
object
5 properties 1 required
GeoIPAccessConditionSubdivisionDTO
object
5 properties 1 required
GeoIPIntegrationDTO
Integration details for 3rd party data used by Access Conditions
GetPolicyDTO
object
Individual Access Policy
16 properties 3 required
GetPolicyDTOListDTO
object
6 properties
GetSignInPolicyDTO
object
2 properties
GitLabCredentialProviderIntegrationDTO
Individual Credential Provider Integration
GuidStringKeyValuePairDto
object
2 properties
HealthDTO
object
Aembit Health Status
8 properties
IntegrationDTO
object
Integration details for 3rd party data used by Access Conditions
17 properties 7 required
IntegrationDTOIntegrationListDTO
object
Page of Integrations
6 properties
IntegrationPatchDTO
object
Patch request for an individual Integration
4 properties
IntegrationV2DTO
object
Integration details for 3rd party data used by Access Conditions
17 properties 7 required
IntegrationV2DTOIntegrationListDTO
object
Page of Integrations
6 properties
JWTClaimDTO
object
3 properties
JsonNode
object
3 properties
JsonNodeOptions
object
1 property
ListCredentialProviderIntegrationDTO
object
Page of Credential Provider Integrations
13 properties 2 required
ListCredentialProviderIntegrationDTOListDTO
object
6 properties
LogStreamAWSS3DestinationDTO
Individual Log Stream
LogStreamCrowdstrikeDestinationDTO
Individual Log Stream
LogStreamDTO
object
Individual Log Stream
15 properties 4 required
LogStreamDestinationType
string
LogStreamGCSBucketDestinationDTO
Individual Log Stream
LogStreamListDTO
object
Page of Log Streams
6 properties
LogStreamPatchDTO
object
Patch Request for an individual of Log Stream
4 properties
LogStreamSplunkDestinationDTO
Individual Log Stream
MFASignInPolicyDTO
object
1 property
NetworkDTO
object
6 properties 4 required
OidcClientAuthType
string
OidcIdentityProviderDTO
Individual SSO Identity Provider
PatchPolicyV2DTO
object
Patch request for an Access Policy
10 properties
PermissionDTO
object
Individual Permission details
6 properties
PolicyCredentialMappingDTO
object
Access Policy Credential Mappings
8 properties 2 required
PolicyCredentialProviderMappingTypes
string
PolicyDTO
object
Individual Access Policy
19 properties 5 required
PolicyExternalDTO
object
Individual Access Policy
17 properties 3 required
PolicyListDTO
object
Page of Access Policies
6 properties
PolicyNoteDTO
object
Individual Note created for an Access Policy
3 properties 1 required
PolicyNoteDTOListDTO
object
6 properties
PolicyPatchDTO
object
Patch request for an Access Policy
10 properties
PublicKeyValidationDTO
object
Response to a request for Public Key Validation
8 properties
RequestMetadaAembitDTO
object
1 property
RequestMetadaAwsDTO
object
5 properties
RequestMetadaAzureDTO
object
2 properties
RequestMetadaEcsDTO
object
2 properties
RequestMetadaGcpDTO
object
1 property
RequestMetadaGithubDTO
object
2 properties
RequestMetadaGitlabDTO
object
4 properties
RequestMetadaHostDTO
object
1 property
RequestMetadaKubernetesDTO
object
4 properties
RequestMetadaLambdaDTO
object
1 property
RequestMetadaNetworkDTO
object
1 property
RequestMetadaOAuthDTO
object
1 property
RequestMetadaProcessDTO
object
4 properties
RequestMetadaTerraformDTO
object
3 properties
RequestMetadataOidcDTO
object
3 properties
ResourceSetDTO
object
Individual Resource Set
19 properties 2 required
ResourceSetDTOListDTO
object
6 properties
ResourceSetPatchDTO
object
Patch Request for an Individual Resource Set
4 properties
RoleDTO
object
Individual Role
14 properties 2 required
RoleListDTO
object
Page of Roles
6 properties
RolePatchDTO
object
Patch request for an individual Role
4 properties
RoutingDTO
object
Individual Routing
11 properties 4 required
RoutingDTOListDTO
object
6 properties
RoutingPatchDTO
object
Patch request for an individual Routing
4 properties
SSOIdentityProviderDTO
object
Individual SSO Identity Provider
12 properties 3 required
SSOIdentityProviderDTOListDTO
object
6 properties
SSOIdentityProviderPatchDTO
object
Patch request for an individual SSO Identity Provider
4 properties
SSOSignInPolicyDTO
object
1 property
SamlIdentityProviderDTO
Individual SSO Identity Provider
ServerWorkloadExternalDTO
object
Individual Server Workload
13 properties 4 required
ServerWorkloadListDTO
object
Page of Server Workloads
6 properties
SettingDTO
object
2 properties 2 required
SsoStatementRoleMappingDTO
object
Represents a mapping of an SSO attribute to an Aembit role
3 properties
StandaloneCertificatePatchDTO
object
Patch Request for an Individual Standalone Certificate Authority
5 properties
StandaloneCertificateRequestDTO
object
Individual Standalone Certificate Authority
11 properties 4 required
StandaloneCertificateResponseDTO
object
Individual Standalone Certificate Authority
14 properties 4 required
StandaloneCertificateResponseDTOListDTO
object
6 properties
StringStringKeyValuePair
object
2 properties
TagDTO
object
Aembit Entity Tag Details
2 properties 2 required
TimeAccessConditionDTO
TimeAccessConditionScheduleDTO
object
3 properties
TimeAccessConditionTimezoneDTO
object
3 properties
TimeIntegrationDTO
Integration details for 3rd party data used by Access Conditions
TrustProviderDTO
object
Individual Trust Provider
24 properties 4 required
TrustProviderItemDTO
object
2 properties
TrustProviderListDTO
object
Page of Trust Providers
6 properties
TrustProviderMatchRuleDTO
object
Individual Match Rule to enforce during Trust Provider attestation
3 properties 2 required
TrustProviderPatchDTO
object
Patch request for an individual Trust Provider
14 properties
TrustProviderSecretDTO
object
5 properties
TrustProviderSecretDTOListDTO
object
6 properties
TrustProviderSecretSlimDTO
object
3 properties 1 required
TrustProviderSecretType
string
UserAgentDTO
object
DTO for the HTTP User Agent of an individual Aembit Audit Log
3 properties
UserDTO
object
13 properties 3 required
UserListDTO
object
6 properties
UserPatchDTO
object
5 properties
UserTokensDTO
object
4 properties
WeekDayDTO
object
2 properties
WizAccessConditionDTO
WizIntegrationDTO
Integration details for 3rd party data used by Access Conditions
WorkloadExternalDTO
object
16 properties 3 required
WorkloadServiceAuthenticationDTO
object
Authentication configuration for a Server Workload
3 properties 2 required
WorkloadServiceEndpointDTO
object
Service Endpoint for a Server Workload
13 properties 8 required

Specification

The full machine-readable OpenAPI contract behind this narrative.

Source

aembit-cloud-openapi-original.yml Raw ↑
#Access Management#Workload Identity#Administration
← Back to A APIs
API Details
ID
aembit:aembit-cloud-api
Base URL
https://{tenant}.aembit.io
Docs
https://docs.aembit.io/dev-guide/api/cloud/api-reference-cloud/
Provider
Aembit
APIs.io →  GitHub →
Explore more
All APIs Providers APIs.io Network
Work with this as data

Every API here is available over the API and to AI agents over MCP. APIs is not yet its own endpoint on the v1 API. Reach this content through network search and the tag graph, or the MCP server below.

Installs https://mcp.apievangelist.com/mcp in Claude, Cursor, VS Code and the rest — one button, every client.

MCP tools for apis
4 tools reach this content
  • search_api_evangelistSearch every content type across the network at once.
  • find_relatedThe shared-tag relevance graph — what else covers this.
  • get_tagEverything one tag labels, across all content types.
  • guide_topicPRO — a curated bundle for a topic: area, guidance, rules, papers, stories, services.
All tools & prompts
Call it yourself
curl for this page
Search the network for this 
curl "https://api.apievangelist.com/v1/search?q=aembit-aembit-cloud-api&limit=10"
Everything under a tag 
curl "https://api.apievangelist.com/v1/tags/aembit-aembit-cloud-api"

Discovery needs no key. Full bodies and the synthesis endpoints are Pro.

Get an API key

Free tier, no email required. Sign in with whichever identity you already have.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have. Your account

Where this information came from

This is an independent, third-party profile of Aembit Cloud API, published by API Evangelist. We do not operate, host, resell, or support these APIs, and we are not affiliated with or endorsed by the company unless stated above. Everything here is built from publicly available information — the company's own site, developer portal, documentation, public repositories, and the specifications it publishes for public use. Nothing is obtained by breaching a system, defeating an access control, or using credentials.

The Kin Score and Agent Readiness rating are independently calculated assessments of a company's public API artifacts, scored against a published rubric. They are not certifications, endorsements, security assessments, or audits.

Corrections, re-scores, and removal are free — no partnership or purchase required, and you do not need to justify the request. A removed company is recorded as unrated, never scored zero for having asked. Acknowledgement within one business day; removal within two.

info@apievangelist.com · Read the full data-sourcing policy →
On a security or compliance team? Put security in the subject line and you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.