How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

Stytch Password API

The Password API from Stytch — 8 operation(s) for password.

Stytch Password API is one of 47 APIs that Stytch publishes on the APIs.io network, described by a machine-readable OpenAPI specification.

Tagged areas include Password. The published artifact set on APIs.io includes an OpenAPI specification, API documentation, and an API reference.

This API exposes 9 operations across 8 paths, and defines 120 schemas. It is described by OpenAPI 3.2.0, at version 1.0.

Requests are made against 3 base URLs: https://api.stytch.com, https://test.stytch.com, https://management.stytch.com.

9 operations 8 paths 120 schemas 1 GET7 POST1 PUT

Metadata

The identity and technical contract details declared by the specification.

Specification
OpenAPI 3.2.0
API Version
1.0
Base URL
https://api.stytch.com
Authentication
HTTP Basic
Resource Areas
1

Authentication & Security 1

Stytch Password API declares 1 security scheme for authenticating requests. It accepts HTTP basic authentication (basicAuth).

Paths & Operations 9

Across 8 paths, the API surfaces 9 operations — 1 GET, 7 POST, 1 PUT. Each is listed below with its method, path, parameters, and response codes.

Password 9
POST
/v1/b2b/passwords/strength_check
Strengthcheck
api_b2b_password_v1_StrengthCheck body → 200400401429500
POST
/v1/b2b/passwords/migrate
Migrate
api_b2b_password_v1_Migrate body → 200400401429500
POST
/v1/b2b/passwords/authenticate
Authenticate
api_b2b_password_v1_Authenticate body → 200400401429500
POST
/v1/passwords
Create
api_password_v1_Create body → 200400401429500
POST
/v1/passwords/authenticate
Authenticate
api_password_v1_Authenticate body → 200400401429500
POST
/v1/passwords/strength_check
Strengthcheck
api_password_v1_StrengthCheck body → 200400401429500
POST
/v1/passwords/migrate
Migrate
api_password_v1_Migrate body → 200400401429500
GET
/pwa/v3/projects/:project_slug/environments/:environment_slug/password_strength_config
Get
pwa_password_v3_Get 2 params → 200400401429500
PUT
/pwa/v3/projects/:project_slug/environments/:environment_slug/password_strength_config
Set
pwa_password_v3_Set 2 params body → 200400401429500

Schemas 120

The contract defines 120 schemas that model the data the API accepts and returns. The most detailed are api_session_v1_AuthenticationFactor (46 properties), api_organization_v1_Organization (30 properties), api_organization_v1_Member (27 properties), api_b2b_scim_v1_SCIMAttributes (23 properties). Each schema is shown below with its type and property counts.

api_organization_v1_ActiveSSOConnection
object
3 properties 3 required
api_b2b_session_v1_MemberSession
object
10 properties 9 required
api_organization_v1_SSORegistration
object
4 properties 3 required
api_session_v1_LinkedInOAuthFactor
object
3 properties 2 required
api_b2b_scim_v1_Entitlement
object
3 properties 3 required
api_session_v1_AppleOAuthFactor
object
3 properties 2 required
api_b2b_scim_v1_SCIMAttributes
object
23 properties 21 required
api_organization_v1_OAuthRegistration
object
5 properties 3 required
api_session_v1_HubspotOAuthFactor
object
3 properties 2 required
api_session_v1_SnapchatOAuthFactor
object
3 properties 2 required
api_b2b_session_v1_PrimaryRequired
object
1 property 1 required
api_session_v1_SlackOAuthFactor
object
3 properties 2 required
api_session_v1_CoinbaseOAuthFactor
object
3 properties 2 required
api_session_v1_RecoveryCodeFactor
object
1 property 1 required
api_b2b_password_v1_MigrateRequestHashType
string
api_b2b_scim_v1_IMs
object
3 properties 3 required
api_session_v1_SalesforceOAuthFactor
object
3 properties 2 required
api_session_v1_AuthenticationFactorType
string
api_session_v1_OIDCSSOFactor
object
3 properties 3 required
api_b2b_password_v1_MigrateRequest
object
Request type
18 properties 4 required
api_session_v1_AuthenticationFactor
object
46 properties 2 required
api_organization_v1_CustomRolePermission
object
2 properties 2 required
api_device_history_v1_DeviceAttributeDetails
object
3 properties 1 required
api_session_v1_TikTokOAuthFactor
object
3 properties 2 required
api_session_v1_EmbeddableMagicLinkFactor
object
1 property 1 required
api_session_v1_SteamOAuthFactor
object
3 properties 2 required
api_session_v1_GitLabOAuthFactor
object
3 properties 2 required
api_b2b_password_v1_StrengthCheckRequest
object
Request type
2 properties 1 required
api_b2b_password_v1_LudsFeedback
object
6 properties 6 required
api_password_v1_SHA1Config
object
2 properties 2 required
api_b2b_scim_v1_Manager
object
3 properties 3 required
api_b2b_scim_v1_X509Certificate
object
3 properties 3 required
api_b2b_password_v1_AuthenticateRequestLocale
string
api_session_v1_MicrosoftOAuthFactor
object
3 properties 2 required
api_session_v1_TwitchOAuthFactor
object
3 properties 2 required
api_session_v1_ShopifyOAuthFactor
object
3 properties 2 required
api_session_v1_TrustedAuthTokenFactor
object
1 property 1 required
api_session_v1_EmailFactor
object
2 properties 2 required
api_password_v1_Argon2Config
object
5 properties 5 required
api_session_v1_DiscordOAuthFactor
object
3 properties 2 required
api_session_v1_GoogleOAuthFactor
object
3 properties 2 required
api_session_v1_CryptoWalletFactor
object
3 properties 3 required
api_b2b_scim_v1_Photo
object
3 properties 3 required
api_session_v1_GithubOAuthExchangeFactor
object
1 property 1 required
api_b2b_password_v1_AuthenticateRequest
object
Request type
10 properties 3 required
api_b2b_scim_v1_Name
object
6 properties 6 required
api_session_v1_FacebookOAuthFactor
object
3 properties 2 required
api_b2b_scim_v1_PhoneNumber
object
3 properties 3 required
api_session_v1_OAuthAccessTokenExchangeFactor
object
1 property 1 required
api_organization_v1_Organization
object
30 properties 23 required
api_b2b_mfa_v1_MfaRequired
object
2 properties
api_b2b_scim_v1_Group
object
2 properties 2 required
api_session_v1_GoogleOAuthExchangeFactor
object
1 property 1 required
api_session_v1_SlackOAuthExchangeFactor
object
1 property 1 required
api_organization_v1_Member
object
27 properties 19 required
api_session_v1_WebAuthnFactor
object
3 properties 2 required
api_b2b_password_v1_MigrateResponse
object
6 properties 6 required
api_session_v1_HubspotOAuthExchangeFactor
object
1 property 1 required
api_b2b_password_v1_AuthenticateResponse
object
14 properties 10 required
api_b2b_scim_v1_Role
object
3 properties 3 required
api_b2b_scim_v1_Email
object
3 properties 3 required
api_session_v1_AmazonOAuthFactor
object
3 properties 2 required
api_password_v1_PBKDF2Config
object
4 properties 4 required
api_password_v1_ScryptConfig
object
5 properties 5 required
api_session_v1_BiometricFactor
object
1 property 1 required
api_organization_v1_MemberRoleSource
object
2 properties 1 required
api_session_v1_TwitterOAuthFactor
object
3 properties 2 required
api_session_v1_AuthenticationFactorDeliveryMethod
string
api_session_v1_InstagramOAuthFactor
object
3 properties 2 required
api_session_v1_SAMLSSOFactor
object
3 properties 3 required
api_session_v1_BitbucketOAuthFactor
object
3 properties 2 required
api_session_v1_ImpersonatedFactor
object
2 properties 2 required
api_b2b_password_v1_StrengthCheckResponse
object
9 properties 7 required
api_organization_v1_ActiveSCIMConnection
object
4 properties 3 required
api_b2b_mfa_v1_MemberOptions
object
2 properties 2 required
api_session_v1_FigmaOAuthFactor
object
3 properties 2 required
api_password_v1_SHA512Config
object
2 properties 2 required
api_organization_v1_CustomRole
object
3 properties 3 required
api_session_v1_YahooOAuthFactor
object
3 properties 2 required
api_b2b_scim_v1_Address
object
8 properties 8 required
api_organization_v1_SCIMRegistration
object
4 properties 2 required
api_password_v1_MD5Config
object
2 properties 2 required
api_session_v1_AuthenticatorAppFactor
object
1 property 1 required
api_session_v1_GithubOAuthFactor
object
3 properties 2 required
api_session_v1_SpotifyOAuthFactor
object
3 properties 2 required
api_device_history_v1_DeviceInfo
object
8 properties 1 required
api_session_v1_PhoneNumberFactor
object
2 properties 2 required
api_organization_v1_MemberRole
object
2 properties 2 required
api_organization_v1_EmailImplicitRoleAssignment
object
2 properties 2 required
api_organization_v1_RetiredEmail
object
2 properties 2 required
api_b2b_password_v1_ZxcvbnFeedback
object
2 properties 2 required
api_b2b_scim_v1_EnterpriseExtension
object
6 properties 5 required
api_user_v1_BiometricRegistration
object
2 properties 2 required
api_password_v1_AuthenticateRequest
object
Request type
7 properties 2 required
api_password_v1_StrengthCheckRequest
object
Request type
2 properties 1 required
api_password_v1_StrengthCheckResponse
object
8 properties 7 required
api_password_v1_MigrateRequest
object
Request type
17 properties 3 required
api_password_v1_LUDSRequirements
object
6 properties 6 required
api_password_v1_AuthenticateResponse
object
8 properties 6 required
api_user_v1_OAuthProvider
object
5 properties 5 required
api_password_v1_Feedback
object
3 properties 2 required
api_session_v1_Session
object
9 properties 4 required
api_user_v1_User
object
19 properties 11 required
api_user_v1_Password
object
2 properties 2 required
api_password_v1_CreateRequest
object
Request type
8 properties 2 required
api_password_v1_CreateResponse
object
9 properties 7 required
api_user_v1_CryptoWallet
object
4 properties 4 required
api_user_v1_WebAuthnRegistration
object
6 properties 6 required
api_attribute_v1_Attributes
object
2 properties
api_user_v1_Email
object
3 properties 3 required
api_password_v1_MigrateRequestHashType
string
api_password_v1_MigrateResponse
object
6 properties 6 required
api_user_v1_Name
object
3 properties
api_user_v1_PhoneNumber
object
3 properties 3 required
api_user_v1_TOTP
object
2 properties 2 required
account_manager_project_v1_ValidationPolicy
string
pwa_password_v3_GetResponse
object
Response type
3 properties 3 required
pwa_password_v3_SetRequest
object
Request type
6 properties 3 required
pwa_password_v3_SetResponse
object
Response type
3 properties 3 required
pwa_password_v3_PasswordStrengthConfig
object
6 properties 3 required

Specification

The full machine-readable OpenAPI contract behind this narrative.

Source

stytch-password-api-openapi.yml Raw ↑

Other APIs Stytch publishes across the network.

Stytch Application API
Stytch B2B IDP API
Stytch B2B Impersonation API
Stytch B2B Magic Links API
Stytch B2B OAuth API
Stytch B2B OTP API
Stytch B2B Passwords API
Stytch B2B RBAC API
Stytch B2B Recovery Codes API
Stytch B2B SCIM API
Stytch B2B TOTP API
Stytch Clients API
Where this information came from

This is an independent, third-party profile of Stytch Password API, published by API Evangelist. We do not operate, host, resell, or support these APIs, and we are not affiliated with or endorsed by the company unless stated above. Everything here is built from publicly available information — the company's own site, developer portal, documentation, public repositories, and the specifications it publishes for public use. Nothing is obtained by breaching a system, defeating an access control, or using credentials.

The Kin Score and Agent Readiness rating are independently calculated assessments of a company's public API artifacts, scored against a published rubric. They are not certifications, endorsements, security assessments, or audits.

Corrections, re-scores, and removal are free — no partnership or purchase required, and you do not need to justify the request. A removed company is recorded as unrated, never scored zero for having asked. Acknowledgement within one business day; removal within two.

info@apievangelist.com · Read the full data-sourcing policy →
On a security or compliance team? Put security in the subject line and you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.