How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

Cubist User API

The User API from Cubist — 11 operation(s) for user.

Cubist User API is one of 30 APIs that Cubist publishes on the APIs.io network, described by a machine-readable OpenAPI specification.

Tagged areas include User. The published artifact set on APIs.io includes an OpenAPI specification and API documentation.

This API exposes 17 operations across 11 paths, and defines 71 schemas. It is described by OpenAPI 3.2.0, at version v0.1.0.

Requests are made against 2 base URLs: https://gamma.signer.cubist.dev, https://prod.signer.cubist.dev.

17 operations 11 paths 71 schemas 2 DELETE3 GET5 PATCH7 POST

Metadata

The identity and technical contract details declared by the specification.

Specification
OpenAPI 3.2.0
API Version
v0.1.0
Base URL
https://prod.signer.cubist.dev
Authentication
API Key, API Key
Resource Areas
1

Authentication & Security 2

Cubist User API declares 2 security schemes for authenticating requests. An API key is passed in the header as Authorization (Oidc). An API key is passed in the header as Authorization (SignerAuth). By default, every request must be authenticated.

  • Oidc — OIDC tokens allow users to authenticate using a third-party service. These are exchanged for signer session tokens.
  • SignerAuth — Signing API end-points use session tokens for auth. Specifically, with each request you need to use the \token\ from your signer session (which you create with…

Paths & Operations 17

Across 11 paths, the API surfaces 17 operations — 2 DELETE, 3 GET, 5 PATCH, 7 POST. Each is listed below with its method, path, parameters, and response codes.

User 17
GET
/v0/about_me
User Info
aboutMeLegacy → 200default
GET
/v0/org/{org_id}/user/me
User Info
aboutMe 1 param → 200default
POST
/v0/org/{org_id}/user/me/email
Initiate Reset Verified Email Flow
userResetEmailInit 1 param body → 200default
PATCH
/v0/org/{org_id}/user/me/email
Finalize a Reset Verified Email Flow
userResetEmailComplete 1 param body → 200default
POST
/v0/org/{org_id}/user/me/fido
Initiate registration of a FIDO key.
userRegisterFidoInit 1 param body → 200202default
PATCH
/v0/org/{org_id}/user/me/fido
Finalize registration of a FIDO key
userRegisterFidoComplete 1 param body → 200default
DELETE
/v0/org/{org_id}/user/me/fido/{fido_id}
Delete FIDO key
userDeleteFido 2 params body → 200202default
POST
/v0/org/{org_id}/user/me/totp
Initialize TOTP Reset
userResetTotpInit 1 param body → 200202default
DELETE
/v0/org/{org_id}/user/me/totp
Delete TOTP
userDeleteTotp 1 param body → 200202default
PATCH
/v0/org/{org_id}/user/me/totp
Finalize resetting TOTP
userResetTotpComplete 1 param body → 200default
POST
/v0/org/{org_id}/user/me/totp/verify
Verify TOTP
userVerifyTotp 1 param body → 200default
POST
/v0/user/me/fidodeprecated
Initiate registration of a FIDO key
registerFidoInitLegacy body → 200202default
PATCH
/v0/user/me/fidodeprecated
Finalize registration of a FIDO key
registerFidoCompleteLegacy body → 200default
POST
/v0/user/me/totpdeprecated
Initialize TOTP Reset
resetTotpInitLegacy body → 200202default
PATCH
/v0/user/me/totpdeprecated
Finalize resetting TOTP
resetTotpCompleteLegacy body → 200default
POST
/v0/user/me/totp/verifydeprecated
Verify TOTP
verifyTotpLegacy body → 200default
GET
/v0/user/orgs
Retrieves all the orgs the user is a part of
userOrgs → 200default

Schemas 71

The contract defines 71 schemas that model the data the API accepts and returns. The most detailed are MfaRequestInfo (11 properties), PublicKeyCredentialCreationOptions (9 properties), MfaPolicy (8 properties), ClientSessionInfo (7 properties). Each schema is shown below with its type and property counts.

AttestationConveyancePreference
string
WebAuthn Relying Parties may use AttestationConveyancePreference to specify their preference regarding attestation conveyance during credential generation. htt…
BadRequestErrorCode
string
PreconditionErrorCode
AcceptedValueCode
string
OperationKind
string
All different kinds of sensitive operations
AuthenticatorAssertionResponse
object
Represents the assertion response used by clients when attempting to log in with a known credential https://www.w3.org/TR/webauthn-2/authenticatorassertionresp…
4 properties 3 required
ErrorResponse
object
The structure of ErrorResponse must match the response template that AWS uses
5 properties 2 required
AuthenticatorSelectionCriteria
object
WebAuthn Relying Parties may use the AuthenticatorSelectionCriteria dictionary to specify their requirements regarding authenticator attributes. https://www.w3…
4 properties
AuthenticatorAttestationResponse
object
The AuthenticatorAttestationResponse interface represents the authenticator's response to a client’s request for the creation of a new public key credential. I…
2 properties 2 required
ResidentKeyRequirement
string
This enumeration’s values describe the Relying Party's requirements for client-side discoverable credentials (formerly known as resident credentials or residen…
HttpRequest
object
Information about the request. Captures all the relevant info (including the request body) about requests that require MFA. We use this to verify that when a r…
3 properties 2 required
PublicKeyCredentialType
string
This enumeration defines the valid credential types. It is an extension point; values can be added to it in the future, as more credential types are defined. T…
BinanceDryRunArgs
object
2 properties 2 required
Receipt
object
Receipt that an MFA request was approved.
3 properties 3 required
ChallengePieces
object
Describes how to derive a WebAuthn challenge value.
2 properties 2 required
PreconditionErrorOwnCodes
string
MfaRequiredArgs
object
5 properties 3 required
PublicKeyCredentialParameters
object
This dictionary is used to supply additional parameters when creating a new credential. https://www.w3.org/TR/webauthn-2/dictionary-credential-params
2 properties 2 required
PublicKeyCredential
object
This type represents a wire-encodable form of the PublicKeyCredential interface Clients may need to manually encode into this format to communicate with the se…
3 properties 2 required
SignDryRunArgs
object
2 properties 1 required
EpochDateTime
integer
DateTime measured in seconds since unix epoch. A wrapper type for serialization that encodes a [SystemTime] as a [u64] representing the number of seconds since…
CoinbaseDryRunArgs
object
2 properties 2 required
NotFoundErrorCode
string
EmailOtpAnswer
object
An answer to the challenge returned by the mfaemailinit endpoint.
1 property 1 required
SignerErrorCode
PublicKeyCredentialCreationOptions
object
Defines the parameters for the creation of a new public key credential https://www.w3.org/TR/webauthn-2/dictdef-publickeycredentialcreationoptions
9 properties 4 required
FidoCreateChallengeAnswer
object
Sent from the client to the server to answer a fido challenge
2 properties 2 required
BadGatewayErrorCode
string
ApprovalInfo
object
1 property 1 required
InternalErrorCode
string
PolicyErrorOwnCodes
string
AcceptedValue
Different responses we return for success status codes.
MemberRole
string
Describes whether a user in an org is an Owner or just a regular member
ForbiddenErrorCode
string
UnauthorizedErrorCode
string
SignerErrorOwnCodes
string
OrgData
object
2 properties 1 required
B32
string
Wrapper around a zeroizing 32-byte fixed-size array
UserVerificationRequirement
string
A WebAuthn Relying Party may require user verification for some of its operations but not for others, and may use this type to express its needs. https://www.w…
UserInOrgMembership
object
Information about a user's membership in an organization (without including any info about the user)
3 properties 3 required
BybitDryRunArgs
object
3 properties 3 required
PolicyErrorCode
SolanaTxCmp
object
1 property
TimeoutErrorCode
string
VerifiedEmail
object
2 properties 2 required
HttpRequestCmp
How to compare HTTP requests when verifying MFA receipt (see [MfaRequest::verifyrequest])
FidoCreateRequest
object
Declares intent to register a new FIDO key
3 properties 1 required
NewSessionResponse
object
Information about a new session, returned from multiple endpoints (e.g., login, refresh, etc.).
5 properties 4 required
ClientSessionInfo
object
Session information sent to the client. This struct works in tandem with its server-side counterpart [SessionData].
7 properties 7 required
TotpApproveRequest
object
1 property 1 required
PublicKeyCredentialUserEntity
object
The PublicKeyCredentialUserEntity dictionary is used to supply additional user account attributes when creating a new credential.
3 properties 3 required
TotpResetRequest
object
Request to reset TOTP.
1 property
ConfiguredMfa
MfaRequestInfo
object
Returned as a response from multiple routes (e.g., 'get mfa', 'approve mfa', 'approve totp').
11 properties 6 required
Status
object
6 properties 4 required
Empty
TotpChallengeAnswer
object
Sent from the client to the server to answer a TOTP challenge
2 properties 2 required
Id
string
EmailResetRequest
object
Request to reset verified email.
2 properties 1 required
Seconds
integer
Duration measured in seconds A wrapper type for serialization that encodes a Duration as a u64 representing the number of seconds.
PublicKeyCredentialRpEntity
object
The PublicKeyCredentialRpEntity dictionary is used to supply additional Relying Party attributes when creating a new credential. https://www.w3.org/TR/webauthn…
2 properties 1 required
AcceptedResponse
ConflictErrorCode
string
MfaType
string
Different types that can be used to approve an MFA request
AuthenticatorTransport
string
Authenticators may implement various transports for communicating with clients. This enumeration defines hints as to how clients might communicate with a parti…
AuthenticatorAttachment
string
This enumeration’s values describe authenticators' attachment modalities. Relying Parties use this to express a preferred authenticator attachment modality whe…
MembershipStatus
string
EvmTxCmp
object
3 properties
MfaPolicy
object
8 properties
PublicKeyCredentialDescriptor
object
This dictionary contains the attributes that are specified by a caller when referring to a public key credential as an input parameter to the create() or get()…
3 properties 2 required
EvmTxDepositErrorCode
string

Specification

The full machine-readable OpenAPI contract behind this narrative.

Source

cubist-user-api-openapi.yml Raw ↑

Other APIs Cubist publishes across the network.

Cubist Account API
Cubist Accounts API
Cubist Audit API
Cubist AuthMigration API
Cubist Babylon API
Cubist Contact API
Cubist Cube3Signer API
Cubist Identity API
Cubist Internal API
Cubist Keys API
Cubist Keys In Role API
Cubist Login API
Where this information came from

This is an independent, third-party profile of Cubist User API, published by API Evangelist. We do not operate, host, resell, or support these APIs, and we are not affiliated with or endorsed by the company unless stated above. Everything here is built from publicly available information — the company's own site, developer portal, documentation, public repositories, and the specifications it publishes for public use. Nothing is obtained by breaching a system, defeating an access control, or using credentials.

The Kin Score and Agent Readiness rating are independently calculated assessments of a company's public API artifacts, scored against a published rubric. They are not certifications, endorsements, security assessments, or audits.

Corrections, re-scores, and removal are free — no partnership or purchase required, and you do not need to justify the request. A removed company is recorded as unrated, never scored zero for having asked. Acknowledgement within one business day; removal within two.

info@apievangelist.com · Read the full data-sourcing policy →
On a security or compliance team? Put security in the subject line and you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.