How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

Authentik Outposts API

Outpost instances and service connections (Docker, Kubernetes) — the deployable components that run the proxy, LDAP and RADIUS providers.

Authentik Outposts API is one of 27 APIs that Authentik publishes on the APIs.io network, described by a machine-readable OpenAPI specification.

Tagged areas include outposts. The published artifact set on APIs.io includes an OpenAPI specification, API documentation, an API reference, and a GitHub repository.

This API exposes 34 operations across 21 paths, and defines 40 schemas. It is described by OpenAPI 3.2.0, at version 2026.11.0-rc1.

Requests are made against a single base URL, /api/v3.

34 operations 21 paths 40 schemas 4 DELETE21 GET3 PATCH3 POST3 PUT

Metadata

The identity and technical contract details declared by the specification.

Specification
OpenAPI 3.2.0
API Version
2026.11.0-rc1
Base URL
https://{authentik_host}/api/v3
Authentication
HTTP Bearer, HTTP Bearer+Agent, HTTP Bearer, HTTP Bearer
License
Resource Areas
1

Authentication & Security 4

Authentik Outposts API declares 4 security schemes for authenticating requests. It accepts HTTP bearer tokens (authentik). It uses HTTP bearer+agent authentication (authentik_device_auth). It accepts HTTP bearer tokens (authentik_device_enroll). It accepts HTTP bearer tokens (authentik_device_federation).

Paths & Operations 34

Across 21 paths, the API surfaces 34 operations — 4 DELETE, 21 GET, 3 PATCH, 3 POST, 3 PUT. Each is listed below with its method, path, parameters, and response codes.

outposts 34
GET
/outposts/instances/
Outpost Viewset
outposts_instances_list 12 params → 200400403
POST
/outposts/instances/
Outpost Viewset
outposts_instances_create body → 201400403
GET
/outposts/instances/{uuid}/
Outpost Viewset
outposts_instances_retrieve 1 param → 200400403
PUT
/outposts/instances/{uuid}/
Outpost Viewset
outposts_instances_update 1 param body → 200400403
PATCH
/outposts/instances/{uuid}/
Outpost Viewset
outposts_instances_partial_update 1 param body → 200400403
DELETE
/outposts/instances/{uuid}/
Outpost Viewset
outposts_instances_destroy 1 param → 204400403
GET
/outposts/instances/{uuid}/health/
Get outposts current health
outposts_instances_health_list 11 params → 200400403
GET
/outposts/instances/{uuid}/used_by/
Get a list of all objects that use this object
outposts_instances_used_by_list 1 param → 200400403
GET
/outposts/instances/default_settings/
Global default outpost config
outposts_instances_default_settings_retrieve → 200400403
GET
/outposts/ldap/
LDAPProvider Viewset
outposts_ldap_list 5 params → 200400403
GET
/outposts/ldap/{id}/check_access/
Check access to a single application by slug
outposts_ldap_access_check 2 params → 200400403
GET
/outposts/proxy/
ProxyProvider Viewset
outposts_proxy_list 5 params → 200400403
GET
/outposts/radius/
RadiusProvider Viewset
outposts_radius_list 5 params → 200400403
GET
/outposts/radius/{id}/check_access/
Check access to a single application by slug
outposts_radius_access_check 2 params → 200400403
GET
/outposts/service_connections/all/
ServiceConnection Viewset
outposts_service_connections_all_list 5 params → 200400403
GET
/outposts/service_connections/all/{uuid}/
ServiceConnection Viewset
outposts_service_connections_all_retrieve 1 param → 200400403
DELETE
/outposts/service_connections/all/{uuid}/
ServiceConnection Viewset
outposts_service_connections_all_destroy 1 param → 204400403
GET
/outposts/service_connections/all/{uuid}/state/
Get the service connection's state
outposts_service_connections_all_state_retrieve 1 param → 200400403
GET
/outposts/service_connections/all/{uuid}/used_by/
Get a list of all objects that use this object
outposts_service_connections_all_used_by_list 1 param → 200400403
GET
/outposts/service_connections/all/types/
Get all creatable types
outposts_service_connections_all_types_list → 200400403
GET
/outposts/service_connections/docker/
DockerServiceConnection Viewset
outposts_service_connections_docker_list 9 params → 200400403
POST
/outposts/service_connections/docker/
DockerServiceConnection Viewset
outposts_service_connections_docker_create body → 201400403
GET
/outposts/service_connections/docker/{uuid}/
DockerServiceConnection Viewset
outposts_service_connections_docker_retrieve 1 param → 200400403
PUT
/outposts/service_connections/docker/{uuid}/
DockerServiceConnection Viewset
outposts_service_connections_docker_update 1 param body → 200400403
PATCH
/outposts/service_connections/docker/{uuid}/
DockerServiceConnection Viewset
outposts_service_connections_docker_partial_update 1 param body → 200400403
DELETE
/outposts/service_connections/docker/{uuid}/
DockerServiceConnection Viewset
outposts_service_connections_docker_destroy 1 param → 204400403
GET
/outposts/service_connections/docker/{uuid}/used_by/
Get a list of all objects that use this object
outposts_service_connections_docker_used_by_list 1 param → 200400403
GET
/outposts/service_connections/kubernetes/
KubernetesServiceConnection Viewset
outposts_service_connections_kubernetes_list 6 params → 200400403
POST
/outposts/service_connections/kubernetes/
KubernetesServiceConnection Viewset
outposts_service_connections_kubernetes_create body → 201400403
GET
/outposts/service_connections/kubernetes/{uuid}/
KubernetesServiceConnection Viewset
outposts_service_connections_kubernetes_retrieve 1 param → 200400403
PUT
/outposts/service_connections/kubernetes/{uuid}/
KubernetesServiceConnection Viewset
outposts_service_connections_kubernetes_update 1 param body → 200400403
PATCH
/outposts/service_connections/kubernetes/{uuid}/
KubernetesServiceConnection Viewset
outposts_service_connections_kubernetes_partial_update 1 param body → 200400403
DELETE
/outposts/service_connections/kubernetes/{uuid}/
KubernetesServiceConnection Viewset
outposts_service_connections_kubernetes_destroy 1 param → 204400403
GET
/outposts/service_connections/kubernetes/{uuid}/used_by/
Get a list of all objects that use this object
outposts_service_connections_kubernetes_used_by_list 1 param → 200400403

Schemas 40

The contract defines 40 schemas that model the data the API accepts and returns. The most detailed are ProxyOutpostConfig (21 properties), Provider (14 properties), LDAPOutpostConfig (13 properties), OutpostHealth (12 properties). Each schema is shown below with its type and property counts.

OutpostDefaultConfig
object
Global default outpost config
1 property 1 required
PatchedOutpostRequest
object
Outpost Serializer
6 properties
Outpost
object
Outpost Serializer
11 properties 9 required
PatchedDockerServiceConnectionRequest
object
DockerServiceConnection Serializer
5 properties
OutpostTypeEnum
string
ProxyMode
string
ServiceConnectionState
object
Serializer for Service connection state
2 properties 2 required
OutpostHealth
object
Outpost health status
12 properties 12 required
PatchedKubernetesServiceConnectionRequest
object
KubernetesServiceConnection Serializer
4 properties
Provider
object
Provider Serializer
14 properties 10 required
Pagination
object
7 properties 7 required
RadiusOutpostConfig
object
RadiusProvider Serializer
8 properties 4 required
LogLevelEnum
string
PaginatedOutpostList
object
3 properties 3 required
KubernetesServiceConnectionRequest
object
KubernetesServiceConnection Serializer
4 properties 1 required
PaginatedProxyOutpostConfigList
object
3 properties 3 required
ValidationError
object
Validation Error
2 properties
PaginatedRadiusOutpostConfigList
object
3 properties 3 required
PaginatedLDAPOutpostConfigList
object
3 properties 3 required
UsedByActionEnum
string
LDAPOutpostConfig
object
LDAPProvider Serializer
13 properties 5 required
Autocomplete
object
RadiusCheckAccess
object
Base serializer class which doesn't implement create/update methods
2 properties 1 required
OutpostRequest
object
Outpost Serializer
6 properties 4 required
ServiceConnection
object
ServiceConnection Serializer
7 properties 6 required
PaginatedKubernetesServiceConnectionList
object
3 properties 3 required
TypeCreate
object
Types of an object that can be created
7 properties 4 required
OpenIDConnectConfiguration
object
restframework Serializer for OIDC Configuration
11 properties 11 required
DockerServiceConnection
object
DockerServiceConnection Serializer
10 properties 7 required
LogEvent
object
Single log message with all context logged.
5 properties 5 required
GenericError
object
Generic API Error
2 properties 1 required
DockerServiceConnectionRequest
object
DockerServiceConnection Serializer
5 properties 2 required
LDAPAPIAccessMode
string
PolicyTestResult
object
result of a policy test
3 properties 3 required
PaginatedServiceConnectionList
object
3 properties 3 required
KubernetesServiceConnection
object
KubernetesServiceConnection Serializer
9 properties 6 required
UsedBy
object
A list of all objects referencing the queried object
5 properties 5 required
ProxyOutpostConfig
object
Proxy provider serializer for outposts
21 properties 8 required
LDAPCheckAccess
object
Base serializer class which doesn't implement create/update methods
2 properties 1 required
PaginatedDockerServiceConnectionList
object
3 properties 3 required

Specification

The full machine-readable OpenAPI contract behind this narrative.

Source

authentik-outposts-api-openapi.yml Raw ↑

Other APIs Authentik publishes across the network.

Authentik Core API
Authentik Crypto API
Authentik Events API
Authentik Flows API
Authentik Policies API
Authentik Providers API
Authentik RBAC API
Authentik Schema API
Authentik Sources API
Authentik Stages API
Authentik Admin API
Authentik Agents API
Where this information came from

This is an independent, third-party profile of Authentik Outposts API, published by API Evangelist. We do not operate, host, resell, or support these APIs, and we are not affiliated with or endorsed by the company unless stated above. Everything here is built from publicly available information — the company's own site, developer portal, documentation, public repositories, and the specifications it publishes for public use. Nothing is obtained by breaching a system, defeating an access control, or using credentials.

The Kin Score and Agent Readiness rating are independently calculated assessments of a company's public API artifacts, scored against a published rubric. They are not certifications, endorsements, security assessments, or audits.

Corrections, re-scores, and removal are free — no partnership or purchase required, and you do not need to justify the request. A removed company is recorded as unrated, never scored zero for having asked. Acknowledgement within one business day; removal within two.

info@apievangelist.com · Read the full data-sourcing policy →
On a security or compliance team? Put security in the subject line and you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.