How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

Fortanix Apps API

The Apps API from Fortanix — 7 operation(s) for apps.

Fortanix Apps API is one of 51 APIs that Fortanix publishes on the APIs.io network, described by a machine-readable OpenAPI specification.

Tagged areas include Application. The published artifact set on APIs.io includes an OpenAPI specification, API documentation, and an API reference.

This API exposes 13 operations across 7 paths, and defines 103 schemas. It is described by OpenAPI 3.2.0, at version 0.1.0-20260710.

Requests are made against a single base URL, {dsmEndpoint}.

13 operations 7 paths 103 schemas 2 DELETE6 GET2 PATCH3 POST

Metadata

The identity and technical contract details declared by the specification.

Specification
OpenAPI 3.2.0
API Version
0.1.0-20260710
Base URL
https://amer.smartkey.io
Authentication
HTTP Basic, API Key, HTTP Bearer
License
Terms of Service
Resource Areas
1

Authentication & Security 3

Fortanix Apps API declares 3 security schemes for authenticating requests. It accepts HTTP basic authentication (basicAuth). An API key is passed in the header as Authorization (apiKeyAuth). It accepts HTTP bearer tokens (JWT) (bearerToken).

  • apiKeyAuth — Please enter your token prefixed with 'Basic ' (e.g., 'Basic yourtokenhere')

Paths & Operations 13

Across 7 paths, the API surfaces 13 operations — 2 DELETE, 6 GET, 2 PATCH, 3 POST. Each is listed below with its method, path, parameters, and response codes.

Apps 13
POST
/sys/v1/apps/{app_id}/groups
Assign the app a new group membership
AddGroupMembership 1 param body → 2XX
GET
/sys/v1/apps/{app_id}/groups
Get all group memberships for the app
GetAllGroupMemberships 2 params → 2XX
POST
/sys/v1/apps
Create a new application with the specified properties.
CreateApp 1 param body → 2XX
GET
/sys/v1/apps
Get details of all apps accessible to requester.
ListApps 1 param → 2XX
DELETE
/sys/v1/apps/{app_id}
Delete an app.
DeleteApp 1 param → 204
GET
/sys/v1/apps/{app_id}
Lookup an application.
GetApp 2 params → 2XX
PATCH
/sys/v1/apps/{app_id}
Update app settings like groups, client config, etc.
UpdateApp 2 params body → 2XX
DELETE
/sys/v1/apps/{app_id}/groups/{group_id}
Remove an app's membership in a specific group
DeleteGroupMembership 2 params → 204
GET
/sys/v1/apps/{app_id}/groups/{group_id}
Get an app's group membership
GetGroupMembership 2 params → 2XX
PATCH
/sys/v1/apps/{app_id}/groups/{group_id}
Update an app's particular group membership
UpdateGroupMembership 2 params body → 2XX
GET
/sys/v1/apps/{app_id}/credential
Get an application's credential.
GetAppCredential 1 param → 2XX
GET
/sys/v1/apps/client_configs
Get configurations for various clients. This API can only be called by apps
GetClientConfigs → 2XX
POST
/sys/v1/apps/{app_id}/reset_secret
Regenerate API key.
ResetAppSecret 2 params body → 2XX

Schemas 103

The contract defines 103 schemas that model the data the API accepts and returns. Each schema is shown below with its type and property counts.

ClientFileLogging
SigningKeysVariantStored
PreviousCredential
ApiPath
GoogleAccessReason
string
An access reason provided by Google when making EKMS API calls.
AppRole
string
App's role.
CipherMode
string
Cipher mode used for symmetric key algorithms.
CountAccuracy
An indicator of how accurate a count of objects is.
GoogleAccessReasonPolicy
CommonClientConfig
RemovableKmipClientConfig
AppSort
SigningKeysStored
GetAppGroupMemberships
TrustedCaCredential
SecretCredentialRequest
TepKeyMapList
AppAuthType
AppGroupRoleDescriptorVariantSystemDefined
GetGroupsParams
TepKeyMap
AppOauthConfigVariantDisabled
LastAppOperationTimestamp
AppCredentialRequest
CreateGroupMembership
ClientConfigurationsRequest
AppCredential
AppAccountRole
string
SecretCredentialRequestGenerate
GoogleServiceAccountCredential
AppAccountRoleDescriptor
GroupSort
GroupMetaData
CountAccuracyVariantExact
TepSchemaVariantOpenAPI
KeyOpsOverride
SigningKeys
Signing keys used to validate JSON Web Signature objects including signed JSON Web Tokens.
PrivateClaimsPolicy
TepSchema
AwsXksCredential
IpAddressPolicy
The IPs that are allowed for an application. ipv4 or ipv6 both are acceptable types.
TepKeyContext
string
ObjectTypeFilterSelection
AwsXksCredentialRequest
CollectionMetadata
RemovablePkcs11ClientConfig
OneAppAuthType
string
Authentication method of an app.
ClientLogConfig
RemovableCommonClientConfig
TrustAnchorSubject
Subjects or subject alternative names (SANs) for trusted CA auth. DSM will check the subject field and any SANs inside incoming client certificates and compare…
TepClientConfig
PrincipalUserViaApp
PolicyDefinitionRego
RemovableTepClientConfig
ObjectTypeFilter
GcpAppPermissions
string
CRYPTOSPACEGETINFO: CRYPTOSPACEGETPUBLICKEY:
AppOauthConfigVariantEnabled
AppCredentialResponse
ClientFileLoggingVariantDisabled
ClientConfigurations
AppGroupRole
string
GroupMembershipRequest
PolicyDefinitionVariantRego
AppGroupRoleDescriptor
AppResetSecretRequest
GetAppParams
ObjectCount
AppGroupRoleDescriptorVariantCustom
TrustAnchor
Trust anchors (i.e., root CA certificates) for a [TrustedCaCredential].
SigningKeysVariantFetched
KeyOperations
string
Operations allowed to be performed on a given key. SIGN: If this is set, the key can be used to for signing. VERIFY: If this is set, the key can used for verif…
AppOauthConfig
OAuth settings for an app. If enabled, an app can request to act on behalf of a user.
AppPermissions
string
Operations allowed to be performed by an app. SIGN: VERIFY: ENCRYPT: DECRYPT: WRAPKEY: UNWRAPKEY: DERIVEKEY: MACGENERATE: MACVERIFY: EXPORT: MANAGE: AGREEKEY:…
AppAuthTypeVariants
KmipClientConfig
ObjectTypeFilterVariantAll
ApprovalWaitConfig
SigningKeysFetched
AppAccountRoleDescriptorVariantSystemDefined
App
ListAppsParams
SignedJwtCredential
ListAppsResponse
The response of the get all apps API
AppAccountMembership
AppRequest
ClientFileLoggingConfig
AppAccountRoleDescriptorVariantCustom
AppGroupMembership
ListAppsResponseWithMetadata
OauthScope
string
OAuth scope.
AppGroups
Pkcs11ClientConfig
QuorumApprovalConfig
SubjectGeneral
A GeneralName that can be used as a [subject alternative name][SAN] in a certificate. Today, the directoryName, dNSName, and iPAddress choices are supported. N…
ClientFileLoggingVariantEnabled
OneAppCredential
App authentication mechanisms.
CountAccuracyVariantApproximate
Principal
A security principal.
ObjectType
string
Type of security object.
OneAppCredentialRequest
ObjectTypeFilterVariantSelection
PolicyDefinition
AppOauthConfigEnabled

Specification

The full machine-readable OpenAPI contract behind this narrative.

Source

fortanix-apps-api-openapi.yml Raw ↑

Other APIs Fortanix publishes across the network.

Fortanix Confidential Computing Manager REST API
Fortanix Account Extensions API
Fortanix Accounts API
Fortanix Admin API
Fortanix App API
Fortanix Application Config API
Fortanix Approval Requests API
Fortanix Approval Requests API
Fortanix Auth API
Fortanix Authentication API
Fortanix Batch API
Fortanix Build API
Where this information came from

This is an independent, third-party profile of Fortanix Apps API, published by API Evangelist. We do not operate, host, resell, or support these APIs, and we are not affiliated with or endorsed by the company unless stated above. Everything here is built from publicly available information — the company's own site, developer portal, documentation, public repositories, and the specifications it publishes for public use. Nothing is obtained by breaching a system, defeating an access control, or using credentials.

The Kin Score and Agent Readiness rating are independently calculated assessments of a company's public API artifacts, scored against a published rubric. They are not certifications, endorsements, security assessments, or audits.

Corrections, re-scores, and removal are free — no partnership or purchase required, and you do not need to justify the request. A removed company is recorded as unrated, never scored zero for having asked. Acknowledgement within one business day; removal within two.

info@apievangelist.com · Read the full data-sourcing policy →
On a security or compliance team? Put security in the subject line and you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.