How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

Need help?

Contact us
Huma

Huma Auth API

The Auth API from Huma — 22 operation(s) for auth.

Documentation Provider Profile APIs.io OpenAPI GitHub

Huma Auth API is one of 77 APIs that Huma publishes on the APIs.io network, described by a machine-readable OpenAPI specification.

Tagged areas include Authentication. The published artifact set on APIs.io includes an OpenAPI specification, an API reference, API documentation, a getting-started guide, and authentication docs.

This API exposes 23 operations across 22 paths, and defines 31 schemas. It is described by OpenAPI 3.2.0, at version 1.0.0.

Requests are made against a single base URL, https://workspace-gcp-uk.api.huma.com/api/integration/v1.

23 operations 22 paths 31 schemas 1 DELETE4 GET18 POST

Metadata

The identity and technical contract details declared by the specification.

Specification
OpenAPI 3.2.0
API Version
1.0.0
Base URL
https://workspace-gcp-uk.api.huma.com/api/integration/v1
Authentication
API Key, HTTP Bearer, HTTP Bearer
Resource Areas
1

Authentication & Security 3

Huma Auth API declares 3 security schemes for authenticating requests. An API key is passed in the header as Authorization (Hawk_Auth). It accepts HTTP bearer tokens (JWT) (JWT_Auth). It accepts HTTP bearer tokens (JWT) (jwtAuth).

  • Hawk_Auth — Hawk MAC authentication. Paste a full Authorization header value. Example: Authorization: Hawk id="userId:clientId", ts=" ", nonce=" ", mac=" "[, hash=" "][, e…
  • JWT_Auth — Use HTTP Bearer auth with a JWT. Send the token in the Authorization header: Authorization: Bearer The token should contain standard claims plus projectId and…

Paths & Operations 23

Across 22 paths, the API surfaces 23 operations — 1 DELETE, 4 GET, 18 POST. Each is listed below with its method, path, parameters, and response codes.

Auth 23
POST
/api/auth/v1/authprofile
Auth Profile
api_auth_v1_authprofile_create_[auth_profile] body → 200
POST
/api/auth/v1/check-auth-attributes
Check Auth Attributes
api_auth_v1_check_auth_attributes_create_[check_auth_attributes] body → 200
POST
/api/auth/v1/confirm
Confirmation
api_auth_v1_confirm_create_[confirmation] 1 param body → 200
GET
/api/auth/v1/me
Me
api_auth_v1_me_retrieve_[me] → 200
POST
/api/auth/v1/password-reset
Password Reset
api_auth_v1_password_reset_create_[password_reset] body → 200
POST
/api/auth/v1/refreshtoken
Refresh Token V1
api_auth_v1_refreshtoken_create_[refresh_token_v1] 1 param body → 200
POST
/api/auth/v1/request-code
Request Code
api_auth_v1_request_code_create_[request_code] 1 param body → 200
POST
/api/auth/v1/request-password-reset
Request Password Reset
api_auth_v1_request_password_reset_create_[request_password_reset] body → 200
POST
/api/auth/v1/sendverificationtoken
Send Verification Token
api_auth_v1_sendverificationtoken_create_[send_verification_token] body → 200
POST
/api/auth/v1/service-account
Create Service Account
api_auth_v1_service_account_create_[create_service_account] body → 201
POST
/api/auth/v1/set-auth-attributes
Set Auth Attributes
api_auth_v1_set_auth_attributes_create_[set_auth_attributes] body → 200
POST
/api/auth/v1/signin
Sign In V1
api_auth_v1_signin_create_[sign_in_v1] 1 param body → 200
POST
/api/auth/v1/signout
Sign Out V1
api_auth_v1_signout_create_[sign_out_v1] 1 param body → 200
POST
/api/auth/v1/signup
Sign Up
api_auth_v1_signup_create_[sign_up] body → 200
POST
/api/auth/v1/sso/callback
Saml Callback
api_auth_v1_sso_callback_create_[saml_callback] body → 200
GET
/api/auth/v1/sso/oidc-callback
Oidc Callback
api_auth_v1_sso_oidc_callback_retrieve_[oidc_callback] 20 params → 200
POST
/api/auth/v1/sso/request
Sso Request
api_auth_v1_sso_request_create_[sso_request] body → 200
GET
/api/auth/v1/user/{user_id}/api-key
Retrieve Api Keys
api_auth_v1_user_api_key_retrieve_[retrieve_api_keys] 1 param → 200
POST
/api/auth/v1/user/{user_id}/api-key
Generate Api Key
api_auth_v1_user_api_key_create_[generate_api_key] 1 param body → 201
DELETE
/api/auth/v1/user/{user_id}/api-key/{key_id}
Delete Api Key
api_auth_v1_user_api_key_destroy_[delete_api_key] 2 params → 204
GET
/api/auth/v1/user/{user_id}/sessions
Retrieve Sessions
api_auth_v1_user_sessions_retrieve_[retrieve_sessions] 1 param → 200
POST
/api/auth/v1/user/{user_id}/token
Generate Auth Token
api_auth_v1_user_token_create_[generate_auth_token] 1 param → 201
POST
/api/auth/v1/verify
Verify Credentials
api_auth_v1_verify_create_[verify_credentials] body → 200

Schemas 31

The contract defines 31 schemas that model the data the API accepts and returns. The most detailed are SAMLCallbackObjectDRF (20 properties), SignUpRequestObjectDRF (16 properties), SsoInfoDRF (16 properties), SetAuthAttributesRequestObjectDRF (14 properties). Each schema is shown below with its type and property counts.

CheckAuthAttributesRequestObjectDRF
object
6 properties 2 required
SignOutRequestObjectV1DRF
object
10 properties 1 required
CheckAuthAttributesResponseObjectDRF
object
10 properties
SetAuthAttributesResponseObjectDRF
object
2 properties
DeviceSessionDTODRF
object
7 properties 1 required
SignInRequestObjectDRF
object
11 properties 3 required
SignUpRequestObjectDRF
object
16 properties 4 required
ListAuthKeysResponseObjectDRF
object
2 properties
SignInResponseObjectDRF
object
5 properties
RequestPasswordResetRequestObjectDRF
object
4 properties 3 required
SsoInfoDRF
object
16 properties 4 required
SendVerificationTokenRequestObjectDRF
object
7 properties 3 required
AuthProfileRequestObjectDRF
object
1 property
VerifyCredentialsRequestObjectDRF
object
8 properties 4 required
ConfirmationRequestObjectDRF
object
6 properties 4 required
ResultIdResponseObjectDRF
object
1 property
RefreshTokenRequestObjectV1DRF
object
5 properties 1 required
SsoDTODRF
object
4 properties
SendVerificationTokenResponseObjectDRF
object
2 properties
SsoRequestObjectDRF
object
5 properties 3 required
ResetPasswordRequestObjectDRF
object
3 properties 3 required
SAMLCallbackObjectDRF
object
20 properties 3 required
ConfirmationOutDRF
object
6 properties
AuthProfileResponseObjectDRF
object
1 property
CreateServiceAccountRequestObjectDRF
object
6 properties 4 required
GenerateAuthKeysResponseObjectDRF
object
2 properties 2 required
OkResponseDRF
object
1 property
GenerateAuthKeysRequestObjectDRF
object
4 properties 1 required
RefreshTokenResponseObjectDRF
object
4 properties
SetAuthAttributesRequestObjectDRF
object
14 properties 2 required
RequestSignupCodeRequestObjectDRF
object
7 properties 2 required

Specification

The full machine-readable OpenAPI contract behind this narrative.

Source

huma-auth-api-openapi.yml Raw ↑

Other APIs Huma publishes across the network.

Huma Mobile & Web SDK
AE Profile APIs.io
Huma AI Engine API
AE Profile APIs.io
Huma Appointment API
AE Profile APIs.io
Huma Assets API
AE Profile APIs.io
Huma Audit Log API
AE Profile APIs.io
Huma Authorization Admin API
AE Profile APIs.io
Huma Autocomplete API
AE Profile APIs.io
Huma Billing API
AE Profile APIs.io
Huma Billing Portal Route API
AE Profile APIs.io
Huma Builder API
AE Profile APIs.io
Huma Calendar Route API
AE Profile APIs.io
Huma CMS API
AE Profile APIs.io
#Authentication
← Back to H APIs
API Details
ID
huma:huma-auth-api
Base URL
https://workspace-gcp-uk.api.huma.com/api/integration/v1
Docs
https://docs.huma.com/api-integration/intro
Provider
Huma
APIs.io →  GitHub →
Explore more
All APIs Providers APIs.io Network
Work with this as data

Every API here is available over the API and to AI agents over MCP. APIs is not yet its own endpoint on the v1 API. Reach this content through network search and the tag graph, or the MCP server below.

Installs https://mcp.apievangelist.com/mcp in Claude, Cursor, VS Code and the rest — one button, every client.

MCP tools for apis
4 tools reach this content
  • search_api_evangelistSearch every content type across the network at once.
  • find_relatedThe shared-tag relevance graph — what else covers this.
  • get_tagEverything one tag labels, across all content types.
  • guide_topicPRO — a curated bundle for a topic: area, guidance, rules, papers, stories, services.
All tools & prompts
Call it yourself
curl for this page
Search the network for this 
curl "https://api.apievangelist.com/v1/search?q=huma-auth-api&limit=10"
Everything under a tag 
curl "https://api.apievangelist.com/v1/tags/huma-auth-api"

Discovery needs no key. Full bodies and the synthesis endpoints are Pro.

Get an API key

Free tier, no email required. Sign in with whichever identity you already have.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have. Your account

Where this information came from

This is an independent, third-party profile of Huma Auth API, published by API Evangelist. We do not operate, host, resell, or support these APIs, and we are not affiliated with or endorsed by the company unless stated above. Everything here is built from publicly available information — the company's own site, developer portal, documentation, public repositories, and the specifications it publishes for public use. Nothing is obtained by breaching a system, defeating an access control, or using credentials.

The Kin Score and Agent Readiness rating are independently calculated assessments of a company's public API artifacts, scored against a published rubric. They are not certifications, endorsements, security assessments, or audits.

Corrections, re-scores, and removal are free — no partnership or purchase required, and you do not need to justify the request. A removed company is recorded as unrated, never scored zero for having asked. Acknowledgement within one business day; removal within two.

info@apievangelist.com · Read the full data-sourcing policy →
On a security or compliance team? Put security in the subject line and you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.