How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

SIMBA Blocks Authentication Service API

SIMBA's OAuth 2.0 / OpenID Connect authorization server and token validator (the "member service validator"). Publishes an OIDC discovery document and a JWKS, issues tokens over the authorization_code, refresh_token and client_credentials grants with PKCE S256, validates external tokens for downstream services, and exposes a Verifiable-Presentation challenge endpoint (/oauth/vc-secure-session) that binds a W3C DID to a session with an optional DPoP proof header. OpenAPI 3.1.0, 22 operations across 15 paths.

SIMBA Blocks Authentication Service API is one of 4 APIs that SIMBA Chain publishes on the APIs.io network, described by a machine-readable OpenAPI specification.

Tagged areas include Authentication, OpenID Connect, Verifiable Credentials, and Decentralized Identifiers. The published artifact set on APIs.io includes an OpenAPI specification, API documentation, and an API reference.

This API exposes 22 operations across 15 paths, organized into 3 resource areas, and defines 26 schemas. It is described by OpenAPI 3.1.0, at version 0.1.0.

Requests are made against the base URL https://blocks.simbachain.com/api/member-service-validator.

22 operations 15 paths 26 schemas 1 DELETE12 GET1 HEAD1 OPTIONS1 PATCH5 POST1 PUT

Metadata

The identity and technical contract details declared by the specification.

Specification
OpenAPI 3.1.0
API Version
0.1.0
Base URL
https://blocks.simbachain.com/api/member-service-validator
Resource Areas
3

Paths & Operations 22

Across 15 paths, the API surfaces 22 operations — 1 DELETE, 12 GET, 1 HEAD, 1 OPTIONS, 1 PATCH, 5 POST, 1 PUT. They span 3 resource areas: Authentication, Permissions, Probes. Each is listed below with its method, path, parameters, and response codes.

Authentication 16
GET
/oauth/.well-known/jwks
Get Jwks
get_jwks_oauth__well_known_jwks_get → 200
GET
/oauth/authorize
Authorize
authorize_oauth_authorize_get 16 params → 200422
GET
/oauth/authorize/complete
Authorize Complete
authorize_complete_oauth_authorize_complete_get 1 param → 200422
POST
/oauth/token
Get Access Token
get_access_token_oauth_token_post 2 params body → 200422
POST
/oauth/vc-secure-session
Get Vc Secure Session
get_vc_secure_session_oauth_vc_secure_session_post 1 param body → 200422
HEAD
/oauth/validate{rest_of_path}
Validate HEAD Request
validate_external_token_oauth_validate_rest_of_path__head 6 params → 200422
PATCH
/oauth/validate{rest_of_path}
Validate PATCH Request
validate_external_token_oauth_validate_rest_of_path__patch 6 params → 200422
DELETE
/oauth/validate{rest_of_path}
Validate DELETE Request
validate_external_token_oauth_validate_rest_of_path__delete 6 params → 200422
PUT
/oauth/validate{rest_of_path}
Validate PUT Request
validate_external_token_oauth_validate_rest_of_path__put 6 params → 200422
POST
/oauth/validate{rest_of_path}
Validate POST Request
validate_external_token_oauth_validate_rest_of_path__post 6 params → 200422
GET
/oauth/validate{rest_of_path}
Validate GET Request
validate_external_token_oauth_validate_rest_of_path__get 6 params → 200422
OPTIONS
/oauth/validate{rest_of_path}
Validate Options
validate_options_oauth_validate_rest_of_path__options 1 param → 200422
GET
/oauth/.well-known/openid-configuration
Openid Configuration
openid_configuration_oauth__well_known_openid_configuration_get → 200
GET
/oauth/userinfo
Userinfo
userinfo_oauth_userinfo_get 2 params → 200422
GET
/oauth/logout
Logout Get
logout_get_oauth_logout_get 3 params → 200422
POST
/oauth/logout
Logout Post
logout_post_oauth_logout_post body → 200422
Permissions 2
GET
/identity_permissions/
Get Identities Permissions
get_identities_permissions_identity_permissions__get 6 params → 200422
POST
/sync_permissions/
Sync Permission
sync_permission_sync_permissions__post body → 201422
Probes 4
GET
/version
Get Version
get_version_version_get → 200
GET
/healthz
Health
health_healthz_get → 200
GET
/readiness
Readiness
readiness_readiness_get → 200
GET
/pingz
Ping
ping_pingz_get → 200

Schemas 26

The contract defines 26 schemas that model the data the API accepts and returns. The most detailed are OrgScopedPermission (13 properties), SyncPermissionInput (9 properties), TokenResponse (8 properties), Organisation (7 properties). Each schema is shown below with its type and property counts.

AuthorizationCodeParams
object
5 properties 5 required
Body_logout_post_oauth_logout_post
object
4 properties
ClientCredentialParams
object
3 properties 3 required
Effect
string
GetIdentityPermissions
object
2 properties 2 required
GetVcSecureParams
object
1 property 1 required
GrantTypes
string
HTTPValidationError
object
1 property
Identity
object
5 properties 4 required
JWKS
object
1 property 1 required
OrgScopedPermission
object
13 properties 9 required
Organisation
object
A model representing an organisation. The field name is unique.
7 properties 3 required
PingResponse
object
3 properties 2 required
PingResponses
object
2 properties 2 required
RefreshTokenParams
object
4 properties 3 required
ResponseType
string
SupportedCodeChallengeMethods
string
SyncPermissionInput
object
A model representing a permission to sync.
9 properties 8 required
SyncRoleInput
object
A model representing a role to sync.
6 properties 5 required
SyncServicePermissions
object
A model representing a service roles and permission to sync.
3 properties 3 required
SystemTypes
string
TokenResponse
object
8 properties 3 required
VPChallenge
object
1 property 1 required
ValidationError
object
5 properties 3 required
VpParams
object
2 properties 2 required
VpRefreshTokenParams
object
2 properties 2 required

Specification

The full machine-readable OpenAPI contract behind this narrative.

Source

simba-chain-member-service-validator-openapi.json Raw ↑

Other APIs SIMBA Chain publishes across the network.

SIMBA Blocks Member Service API
SIMBA Blocks Platform Service (Dynamic Contract API)
SIMBA Blocks Documentation MCP Server
Where this information came from

This is an independent, third-party profile of SIMBA Blocks Authentication Service API, published by API Evangelist. We do not operate, host, resell, or support these APIs, and we are not affiliated with or endorsed by the company unless stated above. Everything here is built from publicly available information — the company's own site, developer portal, documentation, public repositories, and the specifications it publishes for public use. Nothing is obtained by breaching a system, defeating an access control, or using credentials.

The Kin Score and Agent Readiness rating are independently calculated assessments of a company's public API artifacts, scored against a published rubric. They are not certifications, endorsements, security assessments, or audits.

Corrections, re-scores, and removal are free — no partnership or purchase required, and you do not need to justify the request. A removed company is recorded as unrated, never scored zero for having asked. Acknowledgement within one business day; removal within two.

info@apievangelist.com · Read the full data-sourcing policy →
On a security or compliance team? Put security in the subject line and you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.