How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

IntegrationOS O Auth API

The OAuth API from IntegrationOS — 7 operation(s) for oauth.

IntegrationOS O Auth API is one of 31 APIs that IntegrationOS publishes on the APIs.io network, described by a machine-readable OpenAPI specification.

Tagged areas include Authentication. The published artifact set on APIs.io includes an OpenAPI specification, an API reference, a getting-started guide, API documentation, and an engineering blog.

This API exposes 7 operations across 7 paths, and defines 24 schemas. It is described by OpenAPI 3.2.0, at version 5.35.0.

Requests are made against the base URL https://api.withone.ai.

7 operations 7 paths 24 schemas 5 GET2 POST

Metadata

The identity and technical contract details declared by the specification.

Specification
OpenAPI 3.2.0
API Version
5.35.0
Base URL
https://api.withone.ai
Authentication
HTTP Bearer, OAuth 2.0, API Key, API Key, API Key, API Key, API Key
Resource Areas
1

Authentication & Security 7

IntegrationOS O Auth API declares 7 security schemes for authenticating requests. It accepts HTTP bearer tokens (Bearer). It supports OAuth 2.0 (OAuth2) using the authorizationCode flow, exposing 38 scopes. An API key is passed in the cookie as withone (Session). An API key is passed in the header as X-One-Connection-Key (X-One-Connection-Key). An API key is passed in the header as X-One-Secret (X-One-Secret). An API key is passed in the header as X-One-Connection-Key (X-Pica-Connection-Key). An API key is passed in the header as X-One-Secret (X-Pica-Secret).

Paths & Operations 7

Across 7 paths, the API surfaces 7 operations — 5 GET, 2 POST. Each is listed below with its method, path, parameters, and response codes.

OAuth 7
GET
/oauth/authorize/actions
A platform's actions from the open catalog, for the card's custom picker
oauth_authorize_actions 5 params → 200400402403404429500
GET
/oauth/authorize/actions/search
[authorizeactions], answered by relevance to the picker's search text
oauth_authorize_actions_search 6 params → 200400402403404429500
POST
/oauth/authorize/activate
Stands up an offered-but-prospective connector so the card can connect it
oauth_authorize_activate 3 params body → 200400402403404429500
POST
/oauth/authorize/connect
The platforms the card may offer, and the OAuth request the one the user picks…
oauth_authorize_connect 6 params body → 200400402403404429500
GET
/oauth/authorize/connections
The connections the signed-in user already holds in the tenant they picked
oauth_authorize_connections 6 params → 200400402403404429500
GET
/oauth/authorize/context
What the connect card needs to render one in-flight consent ceremony
oauth_authorize_context 1 param → 200400402403404429500
GET
/oauth/authorize/prior-grant
The user's existing grant for the ceremony's client, one entry per granted…
oauth_authorize_prior_grant 3 params → 200400402403404429500

Schemas 24

The contract defines 24 schemas that model the data the API accepts and returns. The most detailed are ConnectedPlatformView (16 properties), ConsentContext (7 properties), OpenKnowledgeActionListItem (6 properties), PrepareInitParams (6 properties). Each schema is shown below with its type and property counts.

ConnectionStateType
string
CeremonyConnectResponse
What the card renders its platform tiles from. Shaped like InitResponse, which the dashboard's AuthKit legs return, and over the same [ConnectedPlatformView]:…
ConnectionIdentityType
string
ConsentTenancy
object
The tenants a user may grant a consent ceremony against.
2 properties 2 required
ResolvedConnectorView
ConsentContext
object
Everything the connect card needs to render one consent ceremony.
7 properties 4 required
AllowedActionView
object
2 properties 2 required
OpenKnowledgeActionListItem
object
6 properties 6 required
ConsentOrganization
object
One organization a consent ceremony can be scoped to.
2 properties 2 required
SecretKeyEnvironment
string
Method
string
ConnectionDefinitionId
string
Prefixed ID with 'conndef' prefix (e.g., 'conndef1C'), also accepts raw integer
PrepareInitParams
object
6 properties
ConnectedPlatformId
string
Prefixed ID with 'connplf' prefix (e.g., 'connplf1C'), also accepts raw integer
ConnectedPlatformView
object
16 properties 10 required
ActivateRequest
object
The connector the activate leg stands up, named in the body beside the [CeremonyQuery] that names the ceremony.
1 property 1 required
Paginated_CeremonyConnectionView
object
4 properties 4 required
EnvelopeView
object
What a connector rule lets through, as every surface publishes it. Absent means unrestricted, on the way out and on the way back in. A submission that omits me…
2 properties
ConsentViewer
object
Who the ceremony is being shown to. Absent - JSON null - is what tells the card to render sign-in.
3 properties 3 required
Paginated_OpenKnowledgeActionListItem
object
4 properties 4 required
OAuthRequestId
string
Prefixed ID with 'oauthreq' prefix (e.g., 'oauthreq1C'), also accepts raw integer
ConsentProject
object
One project a consent ceremony can be scoped to, and the organization it belongs to.
3 properties 3 required
ErrorResponse
object
5 properties 5 required
Paginated_ConnectedPlatformView
object
4 properties 4 required

Specification

The full machine-readable OpenAPI contract behind this narrative.

Source

integration-os-oauth-api-openapi.yml Raw ↑

Other APIs IntegrationOS publishes across the network.

IntegrationOS Access API
IntegrationOS Actions API
IntegrationOS AI Agent Cron Runs API
IntegrationOS AI Agents API
IntegrationOS AI Runner Secrets API
IntegrationOS AI Runners API
IntegrationOS AI Skills API
IntegrationOS Auth Kit API
IntegrationOS Billing API
IntegrationOS Connection Definitions API
IntegrationOS Connection OAuth Definitions API
IntegrationOS Connections API
Where this information came from

This is an independent, third-party profile of IntegrationOS O Auth API, published by API Evangelist. We do not operate, host, resell, or support these APIs, and we are not affiliated with or endorsed by the company unless stated above. Everything here is built from publicly available information — the company's own site, developer portal, documentation, public repositories, and the specifications it publishes for public use. Nothing is obtained by breaching a system, defeating an access control, or using credentials.

The Kin Score and Agent Readiness rating are independently calculated assessments of a company's public API artifacts, scored against a published rubric. They are not certifications, endorsements, security assessments, or audits.

Corrections, re-scores, and removal are free — no partnership or purchase required, and you do not need to justify the request. A removed company is recorded as unrated, never scored zero for having asked. Acknowledgement within one business day; removal within two.

info@apievangelist.com · Read the full data-sourcing policy →
On a security or compliance team? Put security in the subject line and you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.