Authentik Policies API is one of 27 APIs that Authentik publishes on the APIs.io network, described by a machine-readable OpenAPI specification.
Tagged areas include Policies. The published artifact set on APIs.io includes an OpenAPI specification, API documentation, an API reference, and a GitHub repository.
This API exposes
76 operations
across 38 paths,
and defines 59 schemas.
It is described by OpenAPI 3.2.0, at version 2026.11.0-rc1.
Requests are made against a single base URL, /api/v3.
76 operations38 paths59 schemas11 DELETE36 GET9 PATCH11 POST9 PUT
Metadata
The identity and technical contract details declared by the specification.
Authentik Policies API declares
4 security schemes
for authenticating requests.
It accepts HTTP bearer tokens (authentik).
It uses HTTP bearer+agent authentication (authentik_device_auth).
It accepts HTTP bearer tokens (authentik_device_enroll).
It accepts HTTP bearer tokens (authentik_device_federation).
Paths & Operations 76
Across 38 paths, the API surfaces 76 operations — 11 DELETE, 36 GET, 9 PATCH, 11 POST, 9 PUT. Each is listed below with its method, path, parameters, and response codes.
The contract defines 59 schemas that model the data the API accepts and returns. The most detailed are PasswordPolicy (21 properties), GeoIPPolicy (17 properties), PasswordPolicyRequest (15 properties), PolicyBinding (15 properties). Each schema is shown below with its type and property counts.
PatchedUniquePasswordPolicyRequest
object
Password Uniqueness Policy Serializer
4 properties
UniquePasswordPolicyRequest
object
Password Uniqueness Policy Serializer
4 properties1 required
GeoIPPolicyRequest
object
GeoIP Policy Serializer
10 properties2 required
EventActions
string
PolicyBinding
object
PolicyBinding Serializer
15 properties8 required
DummyPolicy
object
Dummy Policy Serializer
11 properties7 required
PaginatedExpressionPolicyList
object
3 properties3 required
EventMatcherPolicy
object
Event Matcher Policy Serializer
13 properties7 required
PaginatedReputationList
object
3 properties3 required
ModelEnum
string
DetailedCountry
object
2 properties2 required
PaginatedPolicyList
object
3 properties3 required
PatchedPasswordPolicyRequest
object
Password Policy Serializer
15 properties
PasswordPolicyRequest
object
Password Policy Serializer
15 properties1 required
PatchedGeoIPPolicyRequest
object
GeoIP Policy Serializer
10 properties
PaginatedGeoIPPolicyList
object
3 properties3 required
PaginatedDummyPolicyList
object
3 properties3 required
Pagination
object
7 properties7 required
PaginatedUniquePasswordPolicyList
object
3 properties3 required
PolicyBindingRequest
object
PolicyBinding Serializer
9 properties2 required
PasswordPolicy
object
Password Policy Serializer
21 properties7 required
PatchedDummyPolicyRequest
object
Dummy Policy Serializer
5 properties
LogLevelEnum
string
PaginatedPasswordExpiryPolicyList
object
3 properties3 required
PaginatedPasswordPolicyList
object
3 properties3 required
Reputation
object
Reputation Serializer
7 properties3 required
AppEnum
string
ValidationError
object
Validation Error
2 properties
PaginatedPolicyBindingList
object
3 properties3 required
ExpressionPolicyRequest
object
Group Membership Policy Serializer
3 properties2 required
Cache
object
Generic cache stats for an object
1 property1 required
UsedByActionEnum
string
ExpressionPolicy
object
Group Membership Policy Serializer
9 properties8 required
PasswordExpiryPolicyRequest
object
Password Expiry Policy Serializer
4 properties2 required
Autocomplete
object
PaginatedReputationPolicyList
object
3 properties3 required
TypeCreate
object
Types of an object that can be created
7 properties4 required
CountryCodeEnum
string
ReputationPolicyRequest
object
Reputation Policy Serializer
5 properties1 required
UniquePasswordPolicy
object
Password Uniqueness Policy Serializer
10 properties7 required
LogEvent
object
Single log message with all context logged.
5 properties5 required
PatchedReputationPolicyRequest
object
Reputation Policy Serializer
5 properties
DummyPolicyRequest
object
Dummy Policy Serializer
5 properties1 required
PartialUser
object
Partial User Serializer, does not include child relations.
8 properties4 required
ReputationPolicy
object
Reputation Policy Serializer
11 properties7 required
PasswordExpiryPolicy
object
Password Expiry Policy Serializer
10 properties8 required
PaginatedEventMatcherPolicyList
object
3 properties3 required
PolicyTestResult
object
result of a policy test
3 properties3 required
GeoIPPolicy
object
GeoIP Policy Serializer
17 properties9 required
PatchedExpressionPolicyRequest
object
Group Membership Policy Serializer
3 properties
PatchedPasswordExpiryPolicyRequest
object
Password Expiry Policy Serializer
4 properties
EventMatcherPolicyRequest
object
Event Matcher Policy Serializer
7 properties1 required
Policy
object
Policy Serializer
8 properties7 required
UsedBy
object
A list of all objects referencing the queried object
5 properties5 required
PartialGroup
object
Partial Group Serializer, does not include child relations.
5 properties3 required
PatchedPolicyBindingRequest
object
PolicyBinding Serializer
9 properties
GenericError
object
Generic API Error
2 properties1 required
PatchedEventMatcherPolicyRequest
object
Event Matcher Policy Serializer
7 properties
PolicyTestRequest
object
Test policy execution for a user with context
2 properties1 required
Specification
The full machine-readable OpenAPI contract behind this narrative.
Every API here is available over the API and to AI agents over MCP. APIs is not yet its own endpoint on the v1 API. Reach this content through network search and the tag graph, or the MCP server below.
Installs https://mcp.apievangelist.com/mcp in Claude, Cursor, VS Code and the rest — one button, every client.
MCP tools for apis
4 tools reach this content
search_api_evangelistSearch every content type across the network at once.
find_relatedThe shared-tag relevance graph — what else covers this.
get_tagEverything one tag labels, across all content types.
guide_topicPRO — a curated bundle for a topic: area, guidance, rules, papers, stories, services.
A second provider on the same verified email joins the account you already have.
Your account
ⓘWhere this information came from
This is an independent, third-party profile of Authentik Policies API, published by
API Evangelist. We do not operate, host, resell, or
support these APIs, and we are not affiliated with or endorsed by the company unless stated above.
Everything here is built from publicly available information — the company's own site,
developer portal, documentation, public repositories, and the specifications it publishes for public use.
Nothing is obtained by breaching a system, defeating an access control, or using credentials.
The Kin Score and Agent Readiness rating are independently calculated assessments of a company's
public API artifacts, scored against a published rubric. They are not certifications,
endorsements, security assessments, or audits.
Corrections, re-scores, and removal are free — no partnership or purchase required, and
you do not need to justify the request. A removed company is recorded as unrated, never scored
zero for having asked. Acknowledgement within one business day; removal within two.
info@apievangelist.com
·
Read the full data-sourcing policy → On a security or compliance team? Put security in the subject line and
you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.
