How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

Openwork Authentication API

The Authentication API from Openwork — 19 operation(s) for authentication.

Openwork Authentication API is one of 37 APIs that Openwork publishes on the APIs.io network, described by a machine-readable OpenAPI specification.

Tagged areas include Authentication. The published artifact set on APIs.io includes an OpenAPI specification, API documentation, and an API reference.

This API exposes 23 operations across 19 paths, and defines 51 schemas. It is described by OpenAPI 3.1.0, at version dev.

Requests are made against a single base URL, https://api.openworklabs.com.

23 operations 19 paths 51 schemas 2 DELETE10 GET9 POST2 PUT

Metadata

The identity and technical contract details declared by the specification.

Specification
OpenAPI 3.1.0
API Version
dev
Base URL
https://api.openworklabs.com
Authentication
HTTP Bearer, API Key
Resource Areas
1

Authentication & Security 2

Openwork Authentication API declares 2 security schemes for authenticating requests. It accepts HTTP bearer tokens (session-token) (bearerAuth). An API key is passed in the header as x-api-key (denApiKey).

  • bearerAuth — Session token passed as Authorization: Bearer for user-authenticated Den routes.
  • denApiKey — Organization API key passed as the x-api-key header for API-key-authenticated Den routes.

Paths & Operations 23

Across 19 paths, the API surfaces 23 operations — 2 DELETE, 10 GET, 9 POST, 2 PUT. Each is listed below with its method, path, parameters, and response codes.

Authentication 23
GET
/v1/auth/login-options
Resolve deterministic login option
getV1AuthLoginOptions 1 param → 200400
POST
/v1/oauth-providers/{providerId}/client
Save an org's OAuth client for a provider
postV1OauthProvidersByProviderIdClient 1 param body → 200400401403404
GET
/v1/oauth-providers/{providerId}/client
Get an org's OAuth client configuration for a provider
getV1OauthProvidersByProviderIdClient 1 param → 200401403404
GET
/v1/oauth-providers/{providerId}/connect/start
Begin connecting the calling member's account for a provider
getV1OauthProvidersByProviderIdConnectStart 1 param → 200400401404
GET
/v1/mcp-connections/google-workspace/connect/start
Begin connecting the calling member to Google Workspace
getV1McpConnectionsGoogleWorkspaceConnectStart → 200400401404
GET
/v1/mcp-connections/microsoft-365/connect/start
Begin connecting the calling member to Microsoft 365
getV1McpConnectionsMicrosoft365ConnectStart → 200400401404
GET
/v1/oauth-providers/{providerId}/connect/callback
OAuth callback for a provider
getV1OauthProvidersByProviderIdConnectCallback 1 param → 200400
POST
/v1/mcp-connections/discover
Discover external MCP connection requirements
postV1McpConnectionsDiscover body → 200400401403502
POST
/v1/mcp-connections/{connectionId}/oauth/issuer-review
Review a changed External MCP OAuth issuer
postV1McpConnectionsByConnectionIdOauthIssuerReview 1 param body → 200400401403404409502
POST
/v1/mcp-connections/resolve
Resolve a free-form query to an MCP server
postV1McpConnectionsResolve body → 200400401403
POST
/v1/mcp-connections/{connectionId}/tools/call
Manually run a tool from an External MCP Connection
postV1McpConnectionsByConnectionIdToolsCall 1 param body → 200400401403404409413502
PUT
/v1/mcp-connections/{connectionId}
Edit an External MCP Connection
putV1McpConnectionsByConnectionId 1 param body → 200400401403404409502
DELETE
/v1/mcp-connections/{connectionId}
Remove an External MCP Connection
deleteV1McpConnectionsByConnectionId 1 param → 200401403404
POST
/v1/mcp-connections/{connectionId}/disconnect
Disconnect (clear credentials for) an External MCP Connection without removing it
postV1McpConnectionsByConnectionIdDisconnect 1 param → 200401403404
POST
/v1/mcp-connections/{connectionId}/disconnect-my-account
Disconnect the calling member's account for a per-member External MCP Connection
postV1McpConnectionsByConnectionIdDisconnectMyAccount 1 param → 200400401404
GET
/v1/mcp-connections/{connectionId}/connect/start
Begin the OAuth handshake for an External MCP Connection
getV1McpConnectionsByConnectionIdConnectStart 1 param → 200401404409502
GET
/v1/mcp-connections/oauth/callback
Shared OAuth callback for External MCP Connections
getV1McpConnectionsOauthCallback → 200400
GET
/v1/mcp-connections/{connectionId}/connect/callback
OAuth callback for an External MCP Connection
getV1McpConnectionsByConnectionIdConnectCallback 1 param → 200400
GET
/v1/telegram/connection
Get the organization Telegram connection
getV1TelegramConnection → 200401
PUT
/v1/telegram/connection
Connect an organization Telegram bot
putV1TelegramConnection body → 200400401403409502
DELETE
/v1/telegram/connection
Disconnect the organization Telegram bot
deleteV1TelegramConnection → 200401403404
POST
/v1/telegram/connection/pairing
Create a one-time Telegram pairing link
postV1TelegramConnectionPairing → 200401403404
POST
/v1/mcp/token
Mint MCP access token
postV1McpToken body → 200400401403

Schemas 51

The contract defines 51 schemas that model the data the API accepts and returns. The most detailed are ExternalMcpConnectionUpdatedResponse (39 properties), ExternalMcpDiagnostic (18 properties), TelegramConnection (9 properties), OAuthClientConfigDetailResponse (7 properties). Each schema is shown below with its type and property counts.

ExternalMcpConnectionAccessInput
object
3 properties
ExternalMcpConnectionToolRunFailedError
object
4 properties 4 required
ExternalMcpConnectStartResponse
object
2 properties 2 required
ExternalMcpRequirementsDiscovery
object
6 properties 6 required
ExternalMcpConnectStartConflictError
ExternalMcpConnectionNotReadyError
object
2 properties 2 required
ExternalMcpConnectionToolRunInput
object
2 properties 2 required
NativeProviderConnectStartResponse
object
2 properties 2 required
ExternalMcpConnectionAccessSummary
object
3 properties 3 required
ExternalMcpConnectStartFailedError
object
3 properties 3 required
McpTokenOrganizationRequiredError
object
2 properties 2 required
ExternalMcpRequirementsDiscoveryInput
object
1 property 1 required
ExternalMcpConnectionRequiredBy
object
2 properties 2 required
ExternalMcpPresetResponse
object
6 properties 5 required
OAuthConnectStartResponse
object
1 property 1 required
ExternalMcpDiagnostic
object
18 properties 9 required
OAuthClientConfigResponse
object
5 properties 5 required
ExternalMcpResolveInput
object
1 property 1 required
TelegramConnectionError
object
2 properties 2 required
TelegramConnection
object
9 properties 9 required
ExternalMcpResolveResult
object
5 properties 2 required
ExternalMcpOAuthIssuerMismatchError
object
2 properties 2 required
UnauthorizedError
object
1 property 1 required
TelegramConnectionResponse
object
1 property 1 required
ExternalMcpConnectionMarketplaceManagedError
object
2 properties 2 required
TelegramDeleteResponse
object
2 properties 2 required
OAuthClientNotConfiguredError
object
2 properties 2 required
ExternalMcpIssuerReviewInput
ExternalMcpConnectionToolInspectionDiagnosis
object
3 properties 3 required
ExternalMcpConnectionConflictError
object
2 properties 2 required
OAuthClientConfigDetailResponse
object
7 properties 7 required
ForbiddenError
object
3 properties 1 required
ExternalMcpConnectionToolInspection
object
3 properties 1 required
ExternalMcpConnectionToolRequestTooLargeError
object
2 properties 2 required
ExternalMcpConnectionToolInspectionHeader
object
3 properties 3 required
AuthLoginOptionsResponse
object
6 properties 2 required
ExternalMcpConnectionUpdateConflictError
ExternalMcpConnectionToolRunResponse
object
4 properties 4 required
UnknownOAuthProviderError
object
2 properties 2 required
McpTokenResponse
object
5 properties 5 required
ExternalMcpOAuthConfigurationRequiredError
object
5 properties 5 required
ExternalMcpConnectionToolInspectionRequest
object
5 properties 5 required
ExternalMcpConnectionValidationFailedError
object
3 properties 3 required
InvalidRequestError
object
2 properties 2 required
TelegramPairingResponse
object
1 property 1 required
ExternalMcpConnectionToolInspectionResponse
object
5 properties 5 required
ExternalMcpIssuerReviewResponse
object
6 properties 3 required
ExternalMcpConnectionToolInspectionBody
object
4 properties 3 required
ExternalMcpConnectionUpdatedResponse
object
39 properties 14 required
ExternalMcpRequirementsDiscoveryFailedError
object
2 properties 2 required
ExternalMcpConnectionNotFoundError
object
2 properties 2 required

Specification

The full machine-readable OpenAPI contract behind this narrative.

Source

openwork-authentication-api-openapi.yml Raw ↑

Other APIs Openwork publishes across the network.

Openwork Admin API
Openwork API Keys API
Openwork Auth API
Openwork Bootstrap API
Openwork Capability Sources API
Openwork Config Objects API
Openwork Connectors API
Openwork Desktop Policies API
Openwork Dev API
Openwork Diagnostics API
Openwork GitHub API
Openwork Inference API
Where this information came from

This is an independent, third-party profile of Openwork Authentication API, published by API Evangelist. We do not operate, host, resell, or support these APIs, and we are not affiliated with or endorsed by the company unless stated above. Everything here is built from publicly available information — the company's own site, developer portal, documentation, public repositories, and the specifications it publishes for public use. Nothing is obtained by breaching a system, defeating an access control, or using credentials.

The Kin Score and Agent Readiness rating are independently calculated assessments of a company's public API artifacts, scored against a published rubric. They are not certifications, endorsements, security assessments, or audits.

Corrections, re-scores, and removal are free — no partnership or purchase required, and you do not need to justify the request. A removed company is recorded as unrated, never scored zero for having asked. Acknowledgement within one business day; removal within two.

info@apievangelist.com · Read the full data-sourcing policy →
On a security or compliance team? Put security in the subject line and you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.