How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

Need help?

Contact us
Descope

Descope Mgmt API

The Mgmt API from Descope — 276 operation(s) for mgmt.

Documentation Provider Profile APIs.io OpenAPI GitHub

Descope Mgmt API is one of 16 APIs that Descope publishes on the APIs.io network, described by a machine-readable OpenAPI specification.

Tagged areas include Mgmt. The published artifact set on APIs.io includes an OpenAPI specification, API documentation, and an API reference.

This API exposes 288 operations across 276 paths, and defines 523 schemas. It is described by OpenAPI 3.0.3, at version 0.0.1.

Requests are made against 2 base URLs: https://api.descope.com, {customUrl}.

288 operations 276 paths 523 schemas 7 DELETE39 GET4 PATCH236 POST2 PUT

Metadata

The identity and technical contract details declared by the specification.

Specification
OpenAPI 3.0.3
API Version
0.0.1
Base URL
https://api.descope.com
Authentication
HTTP Bearer, HTTP Bearer, HTTP Bearer, HTTP Bearer, HTTP Bearer
Contact
Descope
Resource Areas
1

Authentication & Security 5

Descope Mgmt API declares 5 security schemes for authenticating requests. It accepts HTTP bearer tokens (Project ID) (Descope Project ID). It accepts HTTP bearer tokens (Project ID:Refresh JWT) (Descope Project ID:Refresh JWT). It accepts HTTP bearer tokens (ProjectId:AccessKey) (Descope Project ID:Access Key). It accepts HTTP bearer tokens (Project ID:Session JWT) (Descope Project ID:Session JWT). It accepts HTTP bearer tokens (ProjectId:ManagementKey) (Descope Project ID and Management Key). By default, every request must be authenticated.

  • Descope Project ID — Project ID as bearer token.
  • Descope Project ID:Refresh JWT — Project ID:Refresh JWT as bearer token.
  • Descope Project ID:Access Key — Project ID:Access Key as bearer token.
  • Descope Project ID:Session JWT — Project ID:Session JWT as bearer token.
  • Descope Project ID and Management Key — Project ID:Management Key as bearer token.

Paths & Operations 288

Across 276 paths, the API surfaces 288 operations — 7 DELETE, 39 GET, 4 PATCH, 236 POST, 2 PUT. Each is listed below with its method, path, parameters, and response codes.

Mgmt 288
POST
/v1/mgmt/inboundapp/app/{projectId}/register
Register Third Party Application according to RFC 7591
RegisterThirdPartyApplication 1 param body → 200
POST
/v1/mgmt/mcp/client/{projectId}/{mcpServerId}/register
Register MCP Server client according to RFC 7591
RegisterMcpServerClient 2 params body → 200
GET
/v1/mgmt/accesskey
Load An Access Key
LoadAccessKey 1 param → 200
POST
/v1/mgmt/accesskey/import
Import Access Key
ImportAccessKeys body → 200
POST
/v1/mgmt/accesskey/search
Search Access Keys
SearchAccessKeys body → 200
POST
/v1/mgmt/accesskey/create
Create Access Key
CreateAccessKey body → 200
POST
/v1/mgmt/accesskey/update
Update Access Key
UpdateAccessKey body → 200
POST
/v1/mgmt/accesskey/activate
Activate Access Key
ActivateAccessKey body → 200
POST
/v1/mgmt/accesskey/deactivate
Deactivate Access Key
DeactivateAccessKey body → 200
POST
/v1/mgmt/accesskey/activate/batch
Batch Activate Access Keys
ActivateAccessKeys body → 200
POST
/v1/mgmt/accesskey/deactivate/batch
Batch Deactivate Access Keys
DeactivateAccessKeys body → 200
POST
/v1/mgmt/accesskey/delete/batch
Batch Delete Access Keys
DeleteAccessKeys body → 200
POST
/v1/mgmt/accesskey/delete
Delete Access Key
DeleteAccessKey body → 200
POST
/v1/mgmt/audit/search
Search Audit
SearchAudit body → 200
POST
/v1/mgmt/audit/event
Create Audit Event
CreateAuditEvent body → 200
POST
/v1/mgmt/analytics/search
Search Analytics
SearchAnalytics body → 200
GET
/v1/mgmt/user
Load User
LoadUser 2 params → 200
POST
/v1/mgmt/user/create/test
Create Test User
CreateTestUser body → 200
GET
/v1/mgmt/user/provider/token
Get User Provider Token
GetUserProviderToken 4 params → 200
POST
/v1/mgmt/users/load
Load Users
LoadUsers body → 200
POST
/v1/mgmt/user/searchdeprecated
Search Users
SearchUsers body → 200
POST
/v2/mgmt/user/search/test
Search test Users
SearchTestUsers body → 200
POST
/v2/mgmt/user/search
Search Users
SearchUsers body → 200
POST
/v1/mgmt/user/history
Get User's Login History
UsersAuthHistory body → 200
PATCH
/v1/mgmt/user/patch/batch
Patch Users Batch
PatchUserBatch body → 200
POST
/v1/mgmt/user/create
Create User
CreateUser body → 200
POST
/v1/mgmt/user/create/batch
Batch Create Users
CreateUsers body → 200
POST
/v1/mgmt/user/update
Update User
UpdateUser body → 200
POST
/v1/mgmt/user/update/recovery/email
Update User Recovery Email
UpdateUserRecoveryEmail body → 200
POST
/v1/mgmt/user/update/recovery/phone
Update User Recovery Phone
UpdateUserRecoveryPhone body → 200
PATCH
/v1/mgmt/user/patch
Patch User
PatchUser body → 200
POST
/v1/mgmt/user/update/status
Update User Status
UpdateUserStatus body → 200
POST
/v1/mgmt/user/update/impersonationConsent
Update User Impersonation Consent
UpdateUserImpersonationConsent body → 200
POST
/v1/mgmt/user/update/email
Update User Email
UpdateUserEmail body → 200
POST
/v1/mgmt/user/update/loginid
Update User Login ID
UpdateUserLoginID body → 200
POST
/v1/mgmt/user/update/phone
Update User Phone
UpdateUserPhone body → 200
POST
/v1/mgmt/user/update/name
Update User Display Name
UpdateUserDisplayName body → 200
POST
/v1/mgmt/user/update/role/add
Update User Add Roles
UpdateUserAddRoles body → 200
POST
/v1/mgmt/user/update/picture
Update User Picture
UpdateUserPicture body → 200
POST
/v1/mgmt/user/update/customAttribute
Update User Custom Attribute
UpdateUserCustomAttribute body → 200
POST
/v1/mgmt/jwt/update
Update JWT
UpdateJWT body → 200
POST
/v2/mgmt/user/history
Users Authentication History V2
UsersAuthHistoryV2 body → 200
POST
/v1/mgmt/user/password/expire
Expire User Passwsord
ExpireUserPassword body → 200
POST
/v1/mgmt/user/trusteddevices/list
List Trusted Devices
ListTrustedDevicesForUsers body → 200
POST
/v1/mgmt/user/passkey/delete
Remove User Passkey
RemoveUserPasskey body → 200
POST
/v1/mgmt/user/passkeys/import
Import User Passkeys
ImportUserPasskeys body → 200
POST
/v1/mgmt/user/passkeys/list
List User Passkeys
ListUserPasskeys body → 200
POST
/v1/mgmt/user/password/set/active
Set Active Password for User
SetUserActivePassword body → 200
POST
/v1/mgmt/user/trusteddevices/remove
Delete Trusted Devices
UpdateUserRemoveTrustedDevices body → 200
POST
/v1/mgmt/user/password/set/temporary
Set Temporary Password for User
SetUserTemporaryPassword body → 200
POST
/v1/mgmt/user/totp/delete
Delete User's TOTP Seed
RemoveUserTOTP body → 200
POST
/v1/mgmt/user/update/tenant/add
Update User Add Tenant
UpdateUserAddTenant body → 200
POST
/v1/mgmt/user/update/tenant/remove
Update User Remove Tenant
UpdateUserRemoveTenant body → 200
POST
/v2/mgmt/user/update/role/add
Update User Add Roles
UpdateUserAddRoles body → 200
POST
/v1/mgmt/user/update/role/set
Set User's Roles
UpdateUserSetRoles body → 200
POST
/v1/mgmt/user/update/role/remove
Update User Remove Roles
UpdateUserRemoveRoles body → 200
POST
/v1/mgmt/user/update/ssoapp/add
Add Application to User
UpdateUserAddSSOApps body → 200
POST
/v1/mgmt/user/update/ssoapp/set
Set Applications to User
UpdateUserSetSSOApps body → 200
POST
/v1/mgmt/user/update/ssoapp/remove
Remove Application to User
UpdateUserRemoveSSOApps body → 200
POST
/v1/mgmt/user/logout
Log user out of all sessions
LogoutAllUserDevices body → 200
POST
/v1/mgmt/user/passkeys/delete
Delete User's Passkeys
RemoveUserPasskeys body → 200
POST
/v1/mgmt/user/delete
Delete User
DeleteUser body → 200
POST
/v1/mgmt/user/delete/batch
Batch Delete Users
DeleteUsers body → 200
POST
/v1/mgmt/impersonate
Impersonate User
Impersonate body → 200
POST
/v1/mgmt/auth/anonymous
Anonymous User
Anonymous body → 200
POST
/v1/mgmt/impersonate/stepup
Impersonate Stepup
ImpersonateStepup body → 200
POST
/v1/mgmt/stop/impersonation
Stop Impersonation
StopImpersonation body → 200
POST
/v1/mgmt/auth/signin
Generate JWT for Sign-In
GenerateJWTSignIn body → 200
POST
/v1/mgmt/auth/signup
Generate JWT for Sign-Up
GenerateJWTSignUp body → 200
POST
/v1/mgmt/auth/signup-in
Generate JWT for Sign-Up or Sign-In
GenerateJWTSignUpOrIn body → 200
POST
/v1/mgmt/authz/schema/save
Save an authz schema
SaveSchema body → 200
POST
/v1/mgmt/authz/schema/delete
Delete an authz schema
DeleteSchema body → 200
POST
/v1/mgmt/authz/schema/load
Load an authz schema
LoadSchema body → 200
POST
/v1/mgmt/authz/ns/save
Save an authz namespace
SaveNamespace body → 200
POST
/v1/mgmt/fga/schema/dryrun
Validate an authz schema and preview the changes
DryRunSchema body → 200
POST
/v1/mgmt/authz/ns/delete
Delete an authz namespace
DeleteNamespace body → 200
POST
/v1/mgmt/authz/rd/save
Save an authz relation definition
SaveRelationDefinition body → 200
POST
/v1/mgmt/authz/rd/delete
Delete an authz relation definition
DeleteRelationDefinition body → 200
POST
/v1/mgmt/authz/re/create
Create a list of authz relations
CreateRelations body → 200
POST
/v1/mgmt/authz/re/delete
Delete a list of authz relations
DeleteRelations body → 200
POST
/v1/mgmt/authz/re/deleteresources
Delete all relations for a list of resources
DeleteRelationsForResources body → 200
POST
/v1/mgmt/authz/re/deleteresourcesrelations
Delete all relations with matching resourceIds for a list of resources
DeleteResourceRelationsForResources body → 200
POST
/v1/mgmt/authz/re/has
Check a list of relation queries
HasRelations body → 200
POST
/v1/mgmt/authz/re/who
Query who can access resource with relation
WhoCanAccess body → 200
POST
/v1/mgmt/authz/re/resource
Load a list of defined relations for the given resource
ResourceRelations body → 200
POST
/v1/mgmt/authz/re/targets
Load a list of defined relations for the given list of targets
TargetsRelations body → 200
POST
/v1/mgmt/authz/re/targetall
Load a list of relations for the given target including all derived relations
WhatCanTargetAccess body → 200
POST
/v1/mgmt/authz/re/targetwithrelation
Load the resources that the target has the given relation to including all derived relationss
WhatCanTargetAccessWithRelation body → 200
POST
/v1/mgmt/authz/getmodified
Return the list of targets and resources changed since the given date
GetModified body → 200
GET
/v1/mgmt/descoper
Get Descoper
GetDescoper 1 param → 200
PUT
/v1/mgmt/descoper
Create Descoper
CreateDescopers body → 200
DELETE
/v1/mgmt/descoper
Delete Descoper
DeleteDescoper 1 param → 200
PATCH
/v1/mgmt/descoper
Update Descoper
UpdateDescoper body → 200
POST
/v1/mgmt/descoper/list
List Descopers
ListDescopers body → 200
POST
/v1/mgmt/fga/check
Check FGA Permission
Check body → 200
POST
/v1/mgmt/fga/relations
Get FGA Relations
CreateFGARelations body → 200
DELETE
/v1/mgmt/fga/relations
Delete All FGA Relations
DeleteAllFGARelations → 200
POST
/v1/mgmt/fga/mappable/resources
Search for FGA mappable resources
SearchFGAMappableResources body → 200
GET
/v1/mgmt/fga/mappable/resources
Get Mappable Resources
POST
/v1/mgmt/fga/relations/delete
Delete FGA Relations
DeleteFGARelations body → 200
GET
/v1/mgmt/fga/schema
Get FGA Schema
GetFGASchema → 200
POST
/v1/mgmt/fga/schema
Save FGA Schema
CreateFGASchema body → 200
GET
/v1/mgmt/fga/mappable/schema
Get Mappable Schema
GetFGAMappableSchema 2 params → 200
POST
/v1/mgmt/fga/resources/load
Load FGA Resources
LoadResourcesDetails body → 200
POST
/v1/mgmt/fga/resources/save
Save FGA Resources
SaveResourcesDetails body → 200
POST
/v1/mgmt/fga/backup
Create FGA Backup
CreateFGABackup body → 200
GET
/v1/mgmt/fga/backup/{backupId}
Get FGA Backup
GetFGABackup 1 param → 200
DELETE
/v1/mgmt/fga/backup/{backupId}
Delete FGA Backup
DeleteFGABackup 1 param → 200
POST
/v1/mgmt/fga/backup/{backupId}/restore
Restore FGA Backup
RestoreFGABackup 1 param body → 200
GET
/v1/mgmt/fga/backups
List FGA Backups
ListFGABackups → 200
POST
/v1/mgmt/flow/async/result
Get Management Flow async result
GetManagementFlowAsyncResult body → 200
POST
/v1/mgmt/flow/async/run
Run Management Flow asynchronously
RunManagementFlowAsync body → 200
POST
/v1/mgmt/flow/list
List/Search Flows
ListFlows body → 200
POST
/v1/mgmt/flow/run
Run Management Flow
RunManagementFlow body → 200
POST
/v1/mgmt/flow/externalauth/complete
Complete External Authentication
CompleteExternalAuthFlow body → 200
POST
/v2/mgmt/flow/export
Export Flow
ExportFlow body → 200
POST
/v2/mgmt/flow/import
Import Flow
ImportFlow body → 200
POST
/v1/mgmt/flow/delete
Delete Flow
DeleteFlows body → 200
POST
/v2/mgmt/theme/export
Export Theme
ExportTheme → 200
POST
/v2/mgmt/theme/import
Import Theme
ImportTheme body → 200
POST
/v1/mgmt/flow/template/list
List Flow Templates
ListFlowTemplates body → 200
POST
/v1/mgmt/localization/flow/export
Export Flow Localization
ExportFlowLocalization body → 200
POST
/v1/mgmt/localization/flow/import
Import Flow Localization
ImportFlowLocalization body → 200
GET
/v1/mgmt/widget/list
List all widgets
ListWidgets → 200
POST
/v1/mgmt/group/all
Load All External Groups for a Tenant
LoadGroups body → 200
POST
/v1/mgmt/group/member/all
Load All External Groups for Specific Members
LoadMemberGroups body → 200
POST
/v1/mgmt/group/members
Load All Members of a specific External Group
LoadGroupMembers body → 200
POST
/v1/mgmt/jwt/templates/create
Create JWT Template
CreateJwtTemplate body → 200
POST
/v1/mgmt/jwt/templates/delete
Delete JWT Template
DeleteJwtTemplate body → 200
POST
/v1/mgmt/jwt/templates/library/apply
Apply JWT Template From Library
ApplyJwtTemplateFromLibrary body → 200
POST
/v1/mgmt/jwt/templates/library/list
List JWT Template Library
ListJwtTemplateLibrary body → 200
POST
/v1/mgmt/jwt/templates/library/load
Load JWT Template Library Entry
LoadJwtTemplateLibraryEntry body → 200
POST
/v1/mgmt/jwt/templates/list
List JWT Templates
ListJwtTemplates body → 200
POST
/v1/mgmt/jwt/templates/load
Load JWT Template
LoadJwtTemplate body → 200
POST
/v1/mgmt/jwt/templates/update
Update JWT Template
UpdateJwtTemplate body → 200
POST
/v1/mgmt/jwt/templates/validate
Validate JWT Template
ValidateJwtTemplate body → 200
POST
/v1/mgmt/list
Create List
CreateList body → 200
POST
/v1/mgmt/list/update
Update List
UpdateList body → 200
POST
/v1/mgmt/list/delete
Delete List
DeleteList body → 200
GET
/v1/mgmt/list/{id}
Get List
GetList 1 param → 200
GET
/v1/mgmt/list/name/{name}
Get List By Name
GetListByName 1 param → 200
GET
/v1/mgmt/list/all
Get All Lists
GetAllLists → 200
POST
/v1/mgmt/list/import
Import Lists
ImportLists body → 200
POST
/v1/mgmt/list/ip/add
Add IPs to List
AddIPsToList body → 200
POST
/v1/mgmt/list/ip/remove
Remove IPs from List
RemoveIPsFromList body → 200
POST
/v1/mgmt/list/ip/check
Check IP in List
CheckIPInList body → 200
POST
/v1/mgmt/list/clear
Clear List
ClearList body → 200
POST
/v1/mgmt/list/text/add
Add Texts to List
AddTextsToList body → 200
POST
/v1/mgmt/list/text/remove
Remove Texts from List
RemoveTextsFromList body → 200
POST
/v1/mgmt/list/text/check
Check Text in List
CheckTextInList body → 200
POST
/v1/mgmt/project/update/name
Rename Project
UpdateProjectName body → 200
POST
/v1/mgmt/project/export
Export Project
ExportProject body → 200
POST
/v1/mgmt/project/import
Import Project
ImportProject body → 200
POST
/v1/mgmt/project/clone
Clone Project
CloneProject body → 200
POST
/v1/mgmt/project/delete
Delete Project
DeleteProject → 200
POST
/v1/mgmt/project/clone/async
Clone Project (Async)
CloneProjectAsync body → 200
GET
/v1/mgmt/project/clone/async/{processId}
Get Clone Project Process
GetCloneProjectProcess 1 param → 200
POST
/v1/mgmt/project/snapshot/export
Export Project Snapshot
ExportSnapshot body → 200
POST
/v1/mgmt/project/snapshot/import
Import Project Snapshot
ImportSnapshot body → 200
POST
/v1/mgmt/localization/messaging/export
Export Messaging Localization
ExportMessagingTemplateLocalization body → 200
POST
/v1/mgmt/project/snapshot/validate
Validate Project Snapshot
ValidateSnapshot body → 200
POST
/v1/mgmt/localization/messaging/import
Import Messaging Localization
ImportMessagingLocalization body → 200
POST
/v1/mgmt/project/update/tags
Update Project Tags
UpdateProjectTags body → 200
POST
/v1/mgmt/projects/list
List Projects
ListProject body → 200
GET
/v1/mgmt/managementkey
Get Management Key
GetManagementKey 1 param → 200
PUT
/v1/mgmt/managementkey
Create Management Key
CreateManagementKey body → 200
PATCH
/v1/mgmt/managementkey
Update Management Key
UpdateManagementKey body → 200
GET
/v1/mgmt/managementkey/search
Search Management Keys
SearchManagementKeys → 200
POST
/v1/mgmt/managementkey/delete
Delete Management Key
DeleteManagementKeys body → 200
POST
/v1/mgmt/mcp/server/client/create
Create MCP Server Client
CreateMcpServerClient body → 200
POST
/v1/mgmt/mcp/server/client/update
Update MCP Server Client
UpdateMcpServerClient body → 200
POST
/v1/mgmt/mcp/server/client/load
Load MCP Server Client
LoadMcpServerClient body → 200
POST
/v1/mgmt/mcp/server/client/delete
Delete MCP Server Client
DeleteMcpServerClient body → 200
POST
/v1/mgmt/mcp/server/clients/delete
Delete MCP Server Clients
DeleteMcpServerClients body → 200
POST
/v1/mgmt/mcp/server/clients/search
Search MCP Server Clients
SearchMcpServerClients body → 200
POST
/v1/mgmt/mcp/server/client/secret
Get MCP Server Client Secret
GetMcpServerClientSecret body → 200
POST
/v1/mgmt/mcp/server/client/secret/rotate
Rotate MCP Server Client Secret
RotateMcpServerClientSecret body → 200
POST
/v1/mgmt/mcp/server/create
Create MCP Server
CreateMcpServer body → 200
POST
/v1/mgmt/mcp/server/update
Update MCP Server
UpdateMcpServer body → 200
POST
/v1/mgmt/mcp/server/load
Load MCP Server
LoadMcpServer body → 200
POST
/v1/mgmt/mcp/server/delete
Delete MCP Server
DeleteMcpServer body → 200
POST
/v1/mgmt/mcp/servers/delete
Delete MCP Servers
DeleteMcpServers body → 200
POST
/v1/mgmt/mcp/servers/all
Load All MCP Servers
LoadAllMcpServers body → 200
GET
/v1/mgmt/outbound/apps
List All Outbound Apps
LoadOutboundApps → 200
GET
/v1/mgmt/outbound/apps-with-user-token
List Outbound Apps with User Token
ListUserOutboundAppsWithValidUserToken 2 params → 200
GET
/v1/mgmt/outbound/app/{id}
Get Outbound App by ID
LoadOutboundApp 1 param → 200
POST
/v1/mgmt/outbound/app/create
Create Outbound App
CreateOutboundApp body → 200
POST
/v1/mgmt/outbound/app/update
Update Outbound App
UpdateOutboundApp body → 200
POST
/v1/mgmt/outbound/app/delete
Delete Outbound App
DeleteOutboundApp body → 200
POST
/v1/mgmt/outbound/app/user/token
Fetch Outbound App User Token
FetchOutboundAppUserToken body → 200
POST
/v1/mgmt/outbound/app/user/token/latest
Fetch Latest Outbound App User Token
FetchLatestOutboundAppUserToken body → 200
POST
/v1/mgmt/outbound/app/tenant/token
Fetch Outbound App Tenant Token
FetchOutboundAppTenantToken body → 200
POST
/v1/mgmt/outbound/app/create/bydcrpreset
Create outbound application according to existing dcr preset
CreateOutboundAppByDcrPreset body → 200
POST
/v1/mgmt/outbound/app/create/bytemplate
Create outbound application by existing template
CreateOutboundAppByTemplate body → 200
POST
/v1/mgmt/outbound/app/tenant/token/latest
Fetch Latest Outbound App Tenant Token
FetchLatestOutboundAppTenantToken body → 200
POST
/v1/mgmt/outbound/app/connect
Connect to outbound application
ConnectOutboundApp body → 200
DELETE
/v1/mgmt/outbound/token
Delete outbound application token by id
DeleteOutboundAppTokenByID 1 param → 200
DELETE
/v1/mgmt/outbound/user/tokens
Delete outbound application tokens by appId or userId
DeleteOutboundAppUserTokens 2 params → 200
POST
/v1/mgmt/outbound/app/user/apikey/upload
Upload user API key for outbound app
UploadOutboundAppUserAPIKey body → 200
POST
/v1/mgmt/outbound/app/tenant/apikey/upload
Upload tenant API key for outbound app
UploadOutboundAppTenantAPIKey body → 200
GET
/v1/mgmt/password/settings
Get Tenant Password Settings
GetPasswordSettings 1 param → 200
POST
/v1/mgmt/password/settings
Update Tenant Password Settings
ConfigurePasswordSettings body → 200
GET
/v1/mgmt/permission/all
Load All Permission
LoadAllPermissions → 200
POST
/v1/mgmt/permission/create
Create Permission
CreatePermission body → 200
POST
/v1/mgmt/permission/update
Update Permission
UpdatePermission body → 200
POST
/v1/mgmt/permission/delete
Delete Permission
DeletePermission body → 200
POST
/v1/mgmt/permission/create/batch
Bulk Create Permissions
CreatePermissions body → 200
POST
/v1/mgmt/permission/update/batch
Bulk Update Permissions
UpdatePermissions body → 200
POST
/v1/mgmt/permission/delete/batch
Bulk Delete Permissions
DeletePermissions body → 200
POST
/v1/mgmt/resource/create
Create resource
CreateResource body → 200
POST
/v1/mgmt/resource/update
Update resource
UpdateResource body → 200
GET
/v1/mgmt/resource/load
Load resource by ID
LoadResource 1 param → 200
GET
/v1/mgmt/resource/load/uri
Load resource by URI
LoadResourceByURI 1 param → 200
POST
/v1/mgmt/resource/delete
Delete resource
DeleteResource body → 200
POST
/v1/mgmt/resource/delete/batch
Delete resources batch
DeleteResources body → 200
GET
/v1/mgmt/resources/load
Load all resources
LoadAllResources → 200
POST
/v1/mgmt/resource/dynamic-registration-template/create
Create dynamic registration template
CreateDynamicRegistrationTemplate body → 200
POST
/v1/mgmt/resource/dynamic-registration-template/update
Update dynamic registration template
UpdateDynamicRegistrationTemplate body → 200
GET
/v1/mgmt/resource/dynamic-registration-template/load
Load dynamic registration template
LoadDynamicRegistrationTemplate 1 param → 200
POST
/v1/mgmt/resource/dynamic-registration-template/delete
Delete dynamic registration template
DeleteDynamicRegistrationTemplate body → 200
POST
/v1/mgmt/resource/dynamic-registration-templates/delete
Delete dynamic registration templates
DeleteDynamicRegistrationTemplates body → 200
GET
/v1/mgmt/resource/dynamic-registration-templates/load
Load all dynamic registration templates
LoadAllDynamicRegistrationTemplates → 200
POST
/v1/mgmt/resourcepolicy/create
Create resource policy
CreateResourcePolicy body → 200
POST
/v1/mgmt/resourcepolicy/update
Update resource policy
UpdateResourcePolicy body → 200
POST
/v1/mgmt/resourcepolicy/delete
Delete resource policy
DeleteResourcePolicy body → 200
GET
/v1/mgmt/resourcepolicy/app/load
Load resource policies by app
LoadResourcePoliciesByApp 1 param → 200
POST
/v1/mgmt/resourcepolicy/create/batch
Batch create resource policies
BatchCreateResourcePolicies body → 200
POST
/v1/mgmt/resourcepolicy/delete/batch
Batch delete resource policies
BatchDeleteResourcePolicies body → 200
GET
/v1/mgmt/role/all
Load All Roles
LoadAllRoles → 200
POST
/v1/mgmt/role/search
Search Roles
SearchRoles body → 200
POST
/v1/mgmt/role/create
Create Role
CreateRole body → 200
POST
/v1/mgmt/role/update
Update Role
UpdateRole body → 200
POST
/v1/mgmt/role/delete
Delete Role
DeleteRole body → 200
POST
/v1/mgmt/role/create/batch
Bulk Create Roles
CreateRoles body → 200
POST
/v1/mgmt/role/delete/batch
Batch Delete Roles
DeleteRoles body → 200
POST
/v1/mgmt/role/update/batch
Bulk Update Roles
UpdateRoles body → 200
POST
/v1/mgmt/sso/idp/app/wsfed/create
Create SSO WS-Fed IDP application
CreateSSOWSFedApplication body → 200
GET
/v1/mgmt/sso/idp/apps/load
Load All Applications
LoadAllSSOApplications → 200
GET
/v1/mgmt/sso/idp/app/load
Load Application by ID
LoadSSOApplication 1 param → 200
POST
/v1/mgmt/sso/idp/app/wsfed/update
Update SSO WS-Fed IDP application
UpdateSSOWSFedApplication body → 200
POST
/v1/mgmt/sso/idp/app/oidc/create
Create OIDC Application
CreateSSOOIDCApplication body → 200
POST
/v1/mgmt/sso/idp/app/oidc/update
Update OIDC Application
UpdateSSOOIDCApplication body → 200
POST
/v1/mgmt/sso/idp/app/saml/create
Create SAML Application
CreateSSOSAMLApplication body → 200
POST
/v1/mgmt/sso/idp/app/saml/update
Update SAML Application
UpdateSSOSAMLApplication body → 200
POST
/v1/mgmt/sso/idp/app/delete
Delete Application
DeleteSSOApplication body → 200
GET
/v2/mgmt/sso/settings
Get Tenant's SAML/OIDC Settings
LoadSSOSettings 2 params → 200
GET
/v2/mgmt/sso/settings/all
Load all SSO Settings for a tenant
LoadAllSSOSettings 1 param → 200
POST
/v1/mgmt/sso/redirect
Configure SSO Redirect URL
ConfigureSSORedirectURL body → 200
POST
/v1/mgmt/sso/saml
Set Tenant's SAML Settings
ConfigureSSOSAMLSettings body → 200
POST
/v1/mgmt/sso/saml/metadata
Set Tenant's SAML Settings via Metadata URL
ConfigureSSOSAMLSettingsByMetadata body → 200
POST
/v1/mgmt/sso/oidc
Set Tenant's OIDC Settings
ConfigureSSOOIDCSettings body → 200
POST
/v1/mgmt/sso/settings/new
Create New SSO Settings
NewSSOSettingsRequest body → 200
DELETE
/v1/mgmt/sso/settings
Delete Tenant's SAML/OIDC Settings
DeleteSSOSettings 2 params → 200
POST
/v1/mgmt/sso/recalculate-mappings
Recalculate SSO Mappings
RecalculateSSOMappings body → 200
POST
/v1/mgmt/sso/provider-ids
Update SSO Provider IDs
UpdateSSOProviderIDs body → 200
GET
/v1/mgmt/tenant/all
Load All Tenants
LoadAllTenants → 200
GET
/v1/mgmt/tenant
Load Tenant By ID
LoadTenant 1 param → 200
POST
/v1/mgmt/tenant/search
Search Tenants
SearchTenants body → 200
POST
/v1/mgmt/tenant/updateDefaultRoles
Update Tenant Default Roles
UpdateTenantDefaultRoles body → 200
POST
/v1/mgmt/tenant/create
Create Tenant
CreateTenant body → 200
POST
/v1/mgmt/tenant/update
Update Tenant
UpdateTenant body → 200
POST
/v1/mgmt/tenant/delete
Delete Tenant
DeleteTenant body → 200
POST
/v1/mgmt/tenant/sso-user-remove
Remove SSO User from Tenant
RemoveSSOSuffixFromExternalId body → 200
POST
/v1/mgmt/tenant/adminlinks/sso/authenticated
Authenticated SSO Admin Link
GetTenantAdminLinkSSOForAuthenticatedUsers body → 200
POST
/v2/mgmt/tenant/adminlinks/sso/generate
Generate SSO Admin Link
GenerateTenantAdminLinkSSO body → 200
POST
/v1/mgmt/tenant/adminlinks/sso/revoke
Revoke SSO Admin Link
RevokeTenantAdminLinkSSO body → 200
POST
/v1/mgmt/tenant/adminlinks/sso/send
Send SSO Admin Link
SendTenantAdminLinkSSO body → 200
POST
/v1/mgmt/tenant/adminlinks/sso/generatedeprecated
Generate Tenant Admin SSO Link (Deprecated)
GenerateTenantAdminLinkSSODeprecated body → 200
GET
/v1/mgmt/tenant/settings
Get Tenant Session Settings
GetTenantSettings 1 param → 200
POST
/v1/mgmt/tenant/settings
Update Tenant Session Settings
ConfigureTenantSettings body → 200
POST
/v1/mgmt/tests/generate/otp
Generate OTP
GenerateOTPForTestUser body → 200
POST
/v1/mgmt/tests/generate/magiclink
Generate Magic Link
GenerateMagicLinkForTestUser body → 200
POST
/v1/mgmt/tests/generate/enchantedlink
Generate Enchanted Link
GenerateEnchantedLinkForTestUser body → 200
DELETE
/v1/mgmt/user/test/delete/all
Delete All Test Users
DeleteAllTestUsers → 200
POST
/v1/mgmt/thirdparty/app/create
Create third party application
CreateThirdPartyApplication body → 200
POST
/v1/mgmt/thirdparty/app/update
Update third party application
UpdateThirdPartyApplication body → 200
POST
/v1/mgmt/thirdparty/app/patch
Patch third party application
PatchThirdPartyApplication body → 200
GET
/v1/mgmt/thirdparty/app/load
Load third party application by ID
LoadThirdPartyApplication 2 params → 200
GET
/v1/mgmt/thirdparty/apps/load
Load All third party applications
LoadAllThirdPartyApplications 2 params → 200
GET
/v1/mgmt/thirdparty/app/secret
Get third party application secret
GetThirdPartyApplicationSecret 1 param → 200
POST
/v1/mgmt/thirdparty/app/rotate
Rotate third party application secret by application ID
RotateThirdPartyApplicationSecret body → 200
GET
/v1/mgmt/thirdparty/app/rotate
NoPublishRotate → 200
POST
/v1/mgmt/thirdparty/consents/search
Search third party applications consents
SearchThirdPartyApplicationConsents body → 200
POST
/v1/mgmt/thirdparty/consents/delete
Delete third party applications consents
DeleteThirdPartyApplicationConsents body → 200
POST
/v1/mgmt/thirdparty/consents/delete/tenant
Delete third party applications consents by tenant
DeleteThirdPartyApplicationTenantConsents body → 200
POST
/v1/mgmt/thirdparty/app/delete
Delete third party application
DeleteThirdPartyApplication body → 200
POST
/v1/mgmt/thirdparty/app/delete/batch
Batch delete third party applications
DeleteThirdPartyApplications body → 200
POST
/v1/mgmt/user/signup/embeddedlink
Generate a token for user sign up, later can be verified with magiclink
EmbeddedLinkSignup body → 200

Schemas 523

The contract defines 523 schemas that model the data the API accepts and returns. The most detailed are SearchUsersRequest (37 properties), ResponseUser (34 properties), CreateUserRequest (28 properties), CreateUsers (25 properties). Each schema is shown below with its type and property counts.

FetchOutboundAppTenantTokenResponse
object
1 property
SAMLIDPRoleGroupMappingInfo
object
2 properties
GetThirdPartyApplicationSecretResponse
object
1 property
Analytic
object
9 properties
TestUserGenerateMagicLinkResponse
object
2 properties
LoadMcpServerClientResponse
object
1 property
SetUserPasswordRequest
object
2 properties
UpdateOutboundAppRequest
object
1 property
CreateOutboundAppByTemplateResponse
object
1 property
UsersResponse
object
2 properties
JWTBearerSettings
object
4 properties
Flow
object
18 properties
ImportFlowLocalizationRequest
object
2 properties
LoadGroupMembersRequest
object
2 properties
TargetsRelationsResponse
object
1 property
CreateUserRequest
object
28 properties
RemoveIPsFromListRequest
object
2 properties
Group
object
3 properties
UpdateDescoperRequest
object
3 properties
GetBackupResponse
object
1 property
managementv1.AssociatedTenant
object
2 properties
DeleteNamespaceRequest
object
2 properties
UpdateUserSSOAppsRequest
object
2 properties
DeleteFlowsRequest
object
1 property
LoadOutboundAppsResponse
object
1 property
AccessKeyResponse
object
1 property
GetMappableSchemaResponse
object
2 properties
RotateMcpServerClientSecretRequest
object
2 properties
CreateDescopersResponse
object
2 properties
LoadTenantResponse
object
1 property
ImportListsRequest
object
1 property
ThirdPartyApplicationJARSettings
object
JAR (JWT-Secured Authorization Request, RFC 9101) settings for Third Party Applications
4 properties
SaveNamespaceResponse
object
UpdateRoleRequest
object
8 properties
UpdateUserPhoneRequest
object
4 properties
LoadAllSSOSettingsResponse
object
1 property
LoadAllMcpServersRequest
object
ProjectReferences
object
Used by managementservice snapshots - make sure not to break compatibility
6 properties
UpdateDescoperResponse
object
1 property
SSOApplicationCustomSettings
object
1 property
CreateMcpServerClientResponse
object
3 properties
SearchThirdPartyApplicationConsentsResponse
object
2 properties
CreateDescopersRequest
object
1 property
RestoreBackupResponse
object
1 property
ResourceIdentifier
object
2 properties
SearchField
object
Custom Attributes
5 properties
CheckPathStep
object
4 properties
RelationDefinition
object
3 properties
SAMLIDPAttributeMappingInfo
object
3 properties
Audit
object
14 properties
managementv1.JWTResponse
object
1 property
MappableResources
object
2 properties
ThirdPartyApplication
object
25 properties
DeleteDynamicRegistrationTemplatesRequest
object
1 property
SnapshotSecret
object
4 properties
PasswordImportPhpass
object
4 properties
CreateTenantRequest
object
11 properties
LoadJwtTemplateLibraryEntryResponse
object
1 property
CreateAccessKeyRequest
object
9 properties
CreateUpdateSSOWSFedApplicationRequest
object
13 properties
CreateBackupRequest
object
JWTTemplate
object
17 properties
ManagementConfig
object
1 property
CreateMcpServerRequest
object
Keep this message synchronized with the matching one in ProjectService
15 properties
Tenant
object
15 properties
UpdateUserTenantRequest
object
2 properties
ListJwtTemplatesRequest
object
HasRelationsRequest
object
1 property
LoadResourceByURIResponse
object
1 property
projectv1.ThirdPartyApplicationSessionSettings
object
9 properties
SearchFlowTemplatesRequest
object
Tuple
object
5 properties
GetPasswordSettingsResponse
object
21 properties
DeleteThirdPartyApplicationsRequest
object
1 property
CreateOutboundAppByDcrPresetResponse
object
1 property
CreateManagementKeyRequest
object
6 properties
UpdateJwtTemplateRequest
object
1 property
ConfigureSSOSAMLSettingsRequest
object
5 properties
LoadMemberGroupsResponse
object
1 property
ExpireUserPasswordRequest
object
1 property
DeleteSchemaRequest
object
ManagementKeyTagRole
object
Management key
2 properties
google.protobuf.Value
Represents a dynamically typed value which can be either null, a number, a string, a boolean, a recursive struct value, or a list of values.
CheckResponseTuple
object
3 properties
ExportedTheme
object
Used by managementservice snapshots - make sure not to break compatibility
3 properties
FetchOutboundAppUserTokenResponse
object
1 property
UpdateProjectTagsRequest
object
1 property
UpdateUserRolesRequest
object
3 properties
UploadOutboundAppTenantAPIKeyRequest
object
3 properties
Descoper
object
5 properties
SendTenantAdminLinkResponse
object
LoadSchemaRequest
object
PasswordImportHash
object
1 property
DeleteOutboundAppRequest
object
1 property
SearchAnalyticsResponse
object
1 property
ExportSnapshotResponse
object
1 property
UpdateMcpServerRequest
object
1 property
SearchManagementKeysResponse
object
1 property
SearchAuditResponse
object
2 properties
BatchCreateResourcePoliciesResponse
object
1 property
LoadAllTenantsResponse
object
1 property
LoadRolesResponse
object
1 property
projectv1.McpServerDynamicClientRegistration
object
3 properties
LoadResourceResponse
object
1 property
DeleteMcpServerClientRequest
object
2 properties
GetDescoperResponse
object
1 property
DeleteRolesRequest
object
3 properties
FlowLocalizationOverrides
object
5 properties
PasswordImportPbkdf2
object
4 properties
SSOApplicationOIDCSettings
object
8 properties
SaveRelationDefinitionRequest
object
4 properties
JWTResponse
object
NOTE: if you add a new field to this message, also add it to the OptionalJWTResponse message
19 properties
DynamicRegistrationTemplate
object
DynamicRegistrationTemplate CRUD messages
11 properties
UpdatePermissionRequest
object
4 properties
ListFlowTemplatesResponse
object
2 properties
CreateMcpServerClientRequest
object
8 properties
DeleteUserRequest
object
2 properties
LoadMcpServerRequest
object
1 property
ConditionParam
object
2 properties
ThirdPartyApplicationCIBASettings
object
7 properties
CreateDynamicRegistrationTemplateRequest
object
7 properties
RemoveUserPasskeysRequest
object
2 properties
managementv1.ApplicationScope
object
Keep this message synchronized with the matching one in ProjectService
4 properties
GetManagementFlowAsyncResultRequest
object
1 property
CreatePermissionRequest
object
2 properties
PasswordImport
object
10 properties
ValidateSnapshotResponse
object
3 properties
ConfigurePasswordSettingsRequest
object
21 properties
ImportAccessKeysRequest
object
1 property
CheckRequest
object
3 properties
GetManagementKeyResponse
object
1 property
ImportFlowRequest
object
3 properties
DeleteNamespaceResponse
object
SearchFGAMappableResourcesRequest
object
3 properties
SearchAuditRequest
object
23 properties
ImportThemeRequest
object
1 property
CreateOutboundAppRequest
object
22 properties
GetCloneProjectProcessResponse
object
3 properties
DeleteResourceRelationsForResourcesResponse
object
AddIPsToListRequest
object
2 properties
DeleteRelationsRequest
object
1 property
RotateThirdPartyApplicationSecretResponse
object
1 property
UpdateListRequest
object
5 properties
AccessKey
object
15 properties
OutboundAppToken
object
15 properties
Role
object
8 properties
TestUserGenerateMagicLinkRequest
object
4 properties
ExportFlowLocalizationRequest
object
1 property
ExportFlowLocalizationResponse
object
1 property
GetModifiedResponse
object
3 properties
CreateTuplesResponse
object
WhatCanTargetAccessWithRelationRequest
object
5 properties
DeleteMcpServerRequest
object
1 property
UpdateUserImpersonationConsentRequest
object
2 properties
DeleteMcpServerClientsResponse
object
SaveSchemaResponse
object
LoginOptions
object
10 properties
GroupMember
object
3 properties
LoadResourcePoliciesByAppResponse
object
1 property
GenerateJWTSignUpRequest
object
9 properties
AnonymousJWTResponse
object
6 properties
DeleteJwtTemplateRequest
object
1 property
FetchOutboundAppUserTokenRequest
object
6 properties
DeleteAllTuplesResponse
object
UpdateDynamicRegistrationTemplateResponse
object
1 property
LoadAllResourcesResponse
object
2 properties
UpdateUserRecoveryPhoneRequest
object
3 properties
SaveDSLSchemaResponse
object
GetListResponse
object
1 property
RelationQuery
object
Query if the given resource has the given relation to the given user
5 properties
UploadOutboundAppUserAPIKeyRequest
object
4 properties
CreateTuplesRequest
object
1 property
ListJwtTemplateLibraryResponse
object
1 property
ClearListRequest
object
1 property
RotateMcpServerClientSecretResponse
object
1 property
CompleteExternalAuthRequest
object
8 properties
CreateUsersResponse
object
3 properties
LoadPermissionsResponse
object
1 property
DescoperCreate
object
4 properties
WebauthnImportDevice
object
2 properties
FetchOutboundAppTenantTokenRequest
object
5 properties
CreateRelationsRequest
object
1 property
ExportSnapshotRequest
object
1 property
LoadSSOSettingsResponse
object
4 properties
UpdateResourceRequest
object
1 property
RunManagementFlowRequest
object
2 properties
UserTenants
object
4 properties
SaveResourcesDetailsResponse
object
Response message for saving details for resources
Backup
object
8 properties
DeleteManagementKeysResponse
object
1 property
UpdateMcpServerClientRequest
object
9 properties
CreateJwtTemplateRequest
object
1 property
WebauthnImportAuth0
object
The keyId, rpId and publicKey fields in this message are present in both passkey and MFA webauthn types. The other fields are missing in the MFA webauthn type.
8 properties
SearchMappableResourcesResponse
object
1 property
SaveResourcesDetailsRequest
object
Request message for saving details for resources
1 property
managementv1.McpServerDynamicClientRegistration
object
Keep this message synchronized with the matching one in ProjectService
3 properties
ManagementKeyReBac
object
3 properties
PasswordImportFirebase
object
6 properties
RotateThirdPartyApplicationSecretRequest
object
1 property
UpdateJWTRequest
object
3 properties
DeleteRelationsForResourcesResponse
object
DescoperProjectRole
object
2 properties
UpdateTenantDefaultRolesRequest
object
2 properties
GenerateTenantAdminLinkRequest
object
4 properties
SearchAnalyticsRequest
object
15 properties
ImportAccessKeysResponse
object
1 property
PasswordImportBach
object
2 properties
GenerateJWTSignInRequest
object
9 properties
UpdateManagementKeyRequest
object
5 properties
LoadResourcesDetailsRequest
object
Request message for loading details for resources
1 property
DeleteThirdPartyApplicationRequest
object
1 property
DeleteThirdPartyApplicationConsentsRequest
object
4 properties
RemoveUserPasskeyRequest
object
2 properties
UpdateUserDisplayNameRequest
object
5 properties
ManagementKeyProjectRole
object
2 properties
ListProjectsRequest
object
TestUserGenerateEnchantedLinkResponse
object
3 properties
managementv1.ThirdPartyApplicationSessionSettings
object
9 properties
UserAuthHistory
object
6 properties
UserProviderTokenResponse
object
6 properties
SaveSchemaDryDeletes
object
3 properties
WhatCanTargetAccessRequest
object
1 property
SSOSetupSuiteSettings
object
3 properties
DeleteRoleRequest
object
3 properties
UpdateMcpServerClientResponse
object
1 property
ResourceRelationsRequest
object
2 properties
TestUserGenerateOTPRequest
object
3 properties
ExportFlowRequest
object
1 property
CIMDSettings
object
2 properties
ManagementConfigTriggers
object
3 properties
CreatePermissionsRequest
object
1 property
PatchUserBatchResponse
object
3 properties
ListWidgetsResponse
object
1 property
CreateAuditRequest
object
6 properties
CheckResponse
object
1 property
GetMcpServerClientSecretResponse
object
1 property
ApplyJwtTemplateFromLibraryRequest
object
5 properties
UpdatePermissionsRequest
object
1 property
UpdateSSOProviderIDsRequest
object
6 properties
List
object
Lists
5 properties
FetchLatestOutboundAppTenantTokenRequest
object
4 properties
Relation
object
Relation is specified between resource and target where target can be direct target (user or related resource), targetSet (anyone who has another relation), an…
9 properties
SAMLIDPGroupsMappingInfo
object
5 properties
CreateListResponse
object
1 property
CreateAccessKeyResponse
object
2 properties
WhoCanAccessRequest
object
Query the list of users who have the relation to the resource
3 properties
LoadSSOApplicationResponse
object
1 property
UpdateResourceResponse
object
1 property
UpdateUserPictureRequest
object
2 properties
PasswordImportArgon2
object
6 properties
RevokeTenantAdminLinkRequest
object
2 properties
DeleteRelationDefinitionRequest
object
3 properties
Interaction
object
5 properties
ImportMessagingLocalizationResponse
object
1 property
LoadJwtTemplateLibraryEntryRequest
object
1 property
LoadGroupsRequest
object
1 property
SortField
object
2 properties
WhoCanAccessResponse
object
1 property
ExportedFlowMetadata
object
Used by managementservice snapshots - make sure not to break compatibility
10 properties
FetchLatestOutboundAppTenantTokenResponse
object
1 property
LoadResourcesDetailsResponse
object
Response message for loading details for resources
1 property
SaveSchemaDryRunResponse
object
1 property
AttributeMapping
object
8 properties
CreateManagementKeyResponse
object
2 properties
GetListByNameResponse
object
1 property
DeleteResourcesRequest
object
1 property
ConfigureSSOSAMLSettingsByMetadataRequest
object
5 properties
McpServer
object
Keep this message synchronized with the matching one in ProjectService
14 properties
CreateBackupResponse
object
1 property
RoleMapping
object
2 properties
PatchUserRequest
object
20 properties
UpdateAccessKeyRequest
object
8 properties
ExportMessagingLocalizationResponse
object
1 property
RecalculateSSOMappingsRequest
object
2 properties
ManagementConfigEventTriggers
object
1 property
ImportUserPasskeysRequest
object
2 properties
DeleteBackupResponse
object
FetchLatestOutboundAppUserTokenResponse
object
1 property
GetModifiedRequest
object
1 property
LoadJwtTemplateResponse
object
1 property
RunManagementFlowResponse
object
1 property
ListUserPasskeysRequest
object
1 property
FlowTemplateScreen
object
4 properties
CreateMcpServerResponse
object
1 property
LoadMcpServerClientRequest
object
3 properties
DescoperAttributes
object
Descopers
3 properties
CreateResourceResponse
object
1 property
DeleteSchemaResponse
object
DeleteSSOApplicationRequest
object
1 property
StringArray
object
2 properties
DeleteUsersRequest
object
1 property
SaveDSLSchemaRequest
object
New API
1 property
RecalculateSSOMappingsResponse
object
LoadGroupMembersResponse
object
1 property
CheckIPInListRequest
object
2 properties
ListDescopersRequest
object
UserQuery
object
7 properties
onetimev1.AssociatedTenant
object
2 properties
ImportAccessKeyRequest
object
10 properties
RemoveUserTOTPRequest
object
1 property
DeleteThirdPartyApplicationConsentsResponse
object
PatchUserBatchFailureResponse
object
2 properties
URLParam
object
2 properties
PatchUserBatchRequest
object
1 property
LoadMcpServerResponse
object
1 property
SSOApplicationWSFedSettings
object
14 properties
UserLogoutRequest
object
3 properties
ConfigureSSOOIDCSettingsRequest
object
4 properties
TemplateLocalizationOverrides
object
4 properties
DeleteMcpServersRequest
object
1 property
DeleteTuplesResponse
object
PasswordImportSha
object
3 properties
ListJwtTemplateLibraryRequest
object
UploadOutboundAppTenantAPIKeyResponse
object
AnonymousUserRequest
object
4 properties
SSOApplication
object
10 properties
DeleteListRequest
object
1 property
UpdateUserStatusRequest
object
2 properties
CheckPath
object
1 property
DeleteMcpServerResponse
object
CreateUpdateSSOOIDCApplicationRequest
object
11 properties
AddTextsToListRequest
object
2 properties
GetAllListsResponse
object
1 property
ReBACGroupsMappingRelation
object
3 properties
CloneProjectResponse
object
5 properties
ListBackupsResponse
object
1 property
ImpersonateRequest
object
7 properties
RemoveTextsFromListRequest
object
2 properties
DeleteMcpServerClientResponse
object
ListTrustedDevicesForUsersResponse
object
1 property
ListDescopersResponse
object
2 properties
SSOApplicationSAMLSettings
object
22 properties
ExportThemeResponse
object
1 property
DeleteRelationsResponse
object
CreateThirdPartyApplicationResponse
object
3 properties
Permission
object
4 properties
SearchMcpServerClientsResponse
object
2 properties
LoadDynamicRegistrationTemplateResponse
object
1 property
DynamicRegistrationSettings
object
DynamicRegistrationSettings groups the DCR/CIMD configuration plus inline client-side defaults for an mcp-typed Resource. Only meaningful when the parent Resou…
9 properties
UpdateUserEmailRequest
object
4 properties
PatchThirdPartyApplicationRequest
object
19 properties
ListUserPasskeysResponse
object
1 property
LoadOutboundAppResponse
object
1 property
WebauthnImportDescope
object
8 properties
FetchOutboundAppTokenOptions
object
2 properties
ExportedScreen
object
Used by managementservice snapshots - make sure not to break compatibility
3 properties
LoadThirdPartyApplicationResponse
object
1 property
TestUserGenerateOTPResponse
object
2 properties
ConnectOutboundAppResponse
object
1 property
ConfigureTenantSettingsRequest
object
16 properties
Project
object
5 properties
ConfigureSSORedirectURLRequest
object
4 properties
LoadSchemaResponse
object
1 property
RoleItem
object
2 properties
UserPasskey
object
5 properties
ImportMessagingLocalizationRequest
object
1 property
TargetsRelationsRequest
object
2 properties
ValidateJwtTemplateResponse
object
2 properties
AssociatedTenantAK
object
3 properties
UserMapping
object
11 properties
AccessKeysResponse
object
1 property
ReBACGroupsMapping
object
1 property
UpdateOutboundAppResponse
object
1 property
CreateDynamicRegistrationTemplateResponse
object
1 property
BatchCreateResourcePoliciesRequest
object
Batch resource policy operations
1 property
ThirdPartyApplicationConsent
object
9 properties
ResourceDetails
object
3 properties
EmbeddedLinkSignInResponse
object
3 properties
LoadAllThirdPartyApplicationsResponse
object
2 properties
DescoperTagRole
object
2 properties
Node
object
3 properties
SamlSettingsResponse
object
20 properties
ManagementKey
object
10 properties
CreateSSOApplicationResponse
object
1 property
GroupsMapping
object
2 properties
UsersAuthHistoryResponse
object
1 property
DeleteTuplesRequest
object
1 property
ExportFlowResponse
object
1 property
ConnectOutboundAppRequest
object
2 properties
ListProjectsResponse
object
1 property
SearchFlowsRequest
object
1 property
DeleteManagementKeysRequest
object
1 property
SSOSAMLByMetadataSettings
object
13 properties
UpdateResourcePolicyRequest
object
6 properties
UserResponse
object
2 properties
CreateOutboundAppByTemplateRequest
object
5 properties
SaveRelationDefinitionResponse
object
CreateOutboundAppByTemplateOverrides
object
17 properties
DeleteDescoperResponse
object
JwtTemplateValidationIssue
object
Single validation failure produced by ValidateJwtTemplate. code is a stable identifier callers (e.g. MCP agents) can pattern-match on.
4 properties
AccessKeyRequest
object
1 property
DescoperRBAC
object
3 properties
CreateResourceRequest
object
8 properties
Input
object
12 properties
DeleteResourceRelationsForResourcesRequest
object
1 property
AccessKeyBatchRequest
object
1 property
RunManagementFlowAsyncResponse
object
1 property
DeleteOutboundAppResponse
object
CreateTenantResponse
object
1 property
UpdateUserRequest
object
20 properties
McpServerClient
object
12 properties
UpdateProjectNameRequest
object
1 property
DeleteThirdPartyApplicationTenantConsentsRequest
object
3 properties
LoadAllMcpServersResponse
object
2 properties
TrustedDevice
object
expands userv1.TrustedDevice with isCurrentDevice
8 properties
TestUserGenerateEnchantedLinkRequest
object
3 properties
CloneProjectRequest
object
3 properties
LoadGroupsResponse
object
1 property
SetUserPasswordResponse
object
1 property
UpdateTenantRequest
object
10 properties
LoadAllDynamicRegistrationTemplatesResponse
object
2 properties
DynamicClientRegistrationApprovedScopes
object
3 properties
Resource
object
Resource CRUD messages
12 properties
ExportedFlowTranslation
object
Used by managementservice snapshots - make sure not to break compatibility
4 properties
SSOSetupSuiteSettingsDisabledFeatures
object
5 properties
ManagementFlowOptions
object
3 properties
RemoveSSOSuffixFromExternalIdRequest
object
1 property
CreateOutboundAppResponse
object
1 property
MappableResourceQuery
object
2 properties
SearchTenantsRequest
object
8 properties
ResourcePolicy
object
ResourcePolicy CRUD messages
9 properties
ResourceRelationsResponse
object
1 property
DeleteMcpServersResponse
object
UpdateResourcePolicyResponse
object
1 property
JwtTemplateResponse
object
1 property
DeleteResourceRequest
object
1 property
ListUserOutboundAppsWithValidUserTokenResponse
object
1 property
HasRelationsResponse
object
2 properties
SaveSchemaRequest
object
2 properties
DeleteAllTestUsersResponse
object
LoadAllSSOApplicationsResponse
object
1 property
CreateResourcePolicyRequest
object
6 properties
StopImpersonationRequest
object
4 properties
CreateUsersRequest
object
6 properties
SearchRolesRequest
object
8 properties
DeleteDynamicRegistrationTemplateRequest
object
1 property
UpdateUserCustomAttributeRequest
object
3 properties
DeleteResourcePolicyRequest
object
2 properties
ListTrustedDevicesForUsersRequest
object
1 property
OAuthUserDataClaimsMapping
object
Note that this is used both in SSO settings and in OAuth settings import/export, make sure not to change any fields which might break backwards compatibility w…
12 properties
SSOSAMLSettings
object
16 properties
UpdateUserLoginIDRequest
object
2 properties
SearchUsersRequest
object
37 properties
ResourcePolicyIdentifier
object
2 properties
SearchThirdPartyApplicationConsentsRequest
object
6 properties
DeleteMcpServerClientsRequest
object
2 properties
CreateOutboundAppByDcrPresetRequest
object
2 properties
ConnectOutboundAppOptions
object
6 properties
Option
object
2 properties
LoadJwtTemplateRequest
object
1 property
FlowTemplate
object
10 properties
DeletePermissionsRequest
object
2 properties
Namespace
object
2 properties
ValidateJwtTemplateRequest
object
2 properties
GenerateTenantAdminLinkResponse
object
1 property
FetchLatestOutboundAppUserTokenRequest
object
5 properties
ListFlowsResponse
object
2 properties
CIMDDomainPolicy
object
2 properties
UpdateUserRecoveryEmailRequest
object
3 properties
CreateUpdateSSOSAMLApplicationRequest
object
21 properties
SendTenantAdminLinkRequest
object
3 properties
UpdateRolesRequest
object
1 property
ExportedFlow
object
Used by managementservice snapshots - make sure not to break compatibility
5 properties
CreateRoleRequest
object
6 properties
BatchDeleteResourcePoliciesRequest
object
1 property
SignUpUser
object
9 properties
IDPResponse
object
9 properties
GetTenantAdminLinkSSOForAuthenticateUsersRequest
object
1 property
SearchAccessKeysRequest
object
6 properties
CreateResourcePolicyResponse
object
1 property
UpdateManagementKeyResponse
object
1 property
CreateThirdPartyApplicationRequest
object
22 properties
CloneProjectAsyncResponse
object
1 property
DeletePermissionRequest
object
2 properties
LoadUsersRequest
object
2 properties
UploadOutboundAppUserAPIKeyResponse
object
LoadMemberGroupsRequest
object
3 properties
projectv1.ApplicationScope
object
Keep this message synchronized with the matching one in ManagementService
4 properties
IssuerSettings
object
4 properties
SearchMcpServerClientsRequest
object
10 properties
ListJwtTemplatesResponse
object
1 property
ImportSnapshotRequest
object
3 properties
CreateRolesRequest
object
1 property
CreateUsersFailureResponse
object
2 properties
CheckResponseInfo
object
5 properties
UpdateThirdPartyApplicationRequest
object
19 properties
CIMDDomainPolicies
object
1 property
DeleteRelationsForResourcesRequest
object
1 property
ExportMessagingLocalizationRequest
object
NodeExpression
object
5 properties
WhatCanTargetAccessWithRelationResponse
object
1 property
NewSSOSettingsRequest
object
3 properties
CreateUsers
object
25 properties
LoadDSLSchemaResponse
object
2 properties
Widget
object
4 properties
UpdateMcpServerResponse
object
1 property
EmbeddedLinkSignUpOrInRequest
object
6 properties
DeleteTenantRequest
object
2 properties
CheckTextInListResponse
object
1 property
WhatCanTargetAccessResponse
object
1 property
OutboundApp
object
22 properties
UpdateDynamicRegistrationTemplateRequest
object
1 property
UpdateListResponse
object
1 property
CreateRelationsResponse
object
Condition
object
4 properties
UsersAuthHistoryRequest
object
1 property
GetMcpServerClientSecretRequest
object
2 properties
CompleteExternalAuthResponse
object
1 property
GetTenantSettingsResponse
object
15 properties
CreateListRequest
object
4 properties
Schema
object
3 properties
SnapshotSecrets
object
4 properties
CheckIPInListResponse
object
1 property
SaveNamespaceRequest
object
3 properties
ResponseUser
object
34 properties
JWTTemplateLibraryEntry
object
Library entry — read-only starter shipped by Descope. Mirrors the key fields of JWTTemplate plus library-only metadata.
19 properties
RestoreBackupRequest
object
1 property
ImportFlowLocalizationResponse
object
1 property
SSOOIDCSettings
object
22 properties
MappableResource
object
2 properties
DeleteRelationDefinitionResponse
object
CheckTextInListRequest
object
2 properties
UpdateUserRemoveTrustedDevicesRequest
object
2 properties

Specification

The full machine-readable OpenAPI contract behind this narrative.

Source

descope-mgmt-api-openapi.yml Raw ↑

Other APIs Descope publishes across the network.

Descope Apps API
AE Profile APIs.io
Descope Auth API
AE Profile APIs.io
Descope Custom Attributes API
AE Profile APIs.io
Descope Default API
AE Profile APIs.io
Descope Email API
AE Profile APIs.io
Descope Embedded Link API
AE Profile APIs.io
Descope Fedcm API
AE Profile APIs.io
Descope Instant Message (IM) API
AE Profile APIs.io
Descope Keys API
AE Profile APIs.io
Descope Oauth2 API
AE Profile APIs.io
Descope Scim API
AE Profile APIs.io
Descope Text Message (SMS) API
AE Profile APIs.io
#Mgmt
← Back to D APIs
API Details
ID
descope:descope-mgmt-api
Base URL
https://api.descope.com
Docs
https://docs.descope.com/api
Provider
Descope
APIs.io →  GitHub →
Explore more
All APIs Providers APIs.io Network
Work with this as data

Every API here is available over the API and to AI agents over MCP. APIs is not yet its own endpoint on the v1 API. Reach this content through network search and the tag graph, or the MCP server below.

Installs https://mcp.apievangelist.com/mcp in Claude, Cursor, VS Code and the rest — one button, every client.

MCP tools for apis
4 tools reach this content
  • search_api_evangelistSearch every content type across the network at once.
  • find_relatedThe shared-tag relevance graph — what else covers this.
  • get_tagEverything one tag labels, across all content types.
  • guide_topicPRO — a curated bundle for a topic: area, guidance, rules, papers, stories, services.
All tools & prompts
Call it yourself
curl for this page
Search the network for this 
curl "https://api.apievangelist.com/v1/search?q=descope-mgmt-api&limit=10"
Everything under a tag 
curl "https://api.apievangelist.com/v1/tags/descope-mgmt-api"

Discovery needs no key. Full bodies and the synthesis endpoints are Pro.

Get an API key

Free tier, no email required. Sign in with whichever identity you already have.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have. Your account

Where this information came from

This is an independent, third-party profile of Descope Mgmt API, published by API Evangelist. We do not operate, host, resell, or support these APIs, and we are not affiliated with or endorsed by the company unless stated above. Everything here is built from publicly available information — the company's own site, developer portal, documentation, public repositories, and the specifications it publishes for public use. Nothing is obtained by breaching a system, defeating an access control, or using credentials.

The Kin Score and Agent Readiness rating are independently calculated assessments of a company's public API artifacts, scored against a published rubric. They are not certifications, endorsements, security assessments, or audits.

Corrections, re-scores, and removal are free — no partnership or purchase required, and you do not need to justify the request. A removed company is recorded as unrated, never scored zero for having asked. Acknowledgement within one business day; removal within two.

info@apievangelist.com · Read the full data-sourcing policy →
On a security or compliance team? Put security in the subject line and you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.