How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

Svix Authentication API

Easily give your users access to our pre-built management UI.

Svix Authentication API is one of 29 APIs that Svix publishes on the APIs.io network, described by a machine-readable OpenAPI specification.

Tagged areas include Authentication. The published artifact set on APIs.io includes an OpenAPI specification, API documentation, an API reference, authentication docs, and rate-limit docs.

This API exposes 21 operations across 16 paths, and defines 28 schemas. It is described by OpenAPI 3.2.0, at version 1.922.0.

Requests are made against 5 base URLs: https://api.eu.svix.com, https://api.us.svix.com, https://api.ca.svix.com, https://api.au.svix.com, https://api.in.svix.com.

21 operations 16 paths 28 schemas 1 DELETE6 GET1 PATCH11 POST2 PUT

Metadata

The identity and technical contract details declared by the specification.

Specification
OpenAPI 3.2.0
API Version
1.922.0
Base URL
https://api.svix.com
Authentication
HTTP Bearer
Resource Areas
1

Authentication & Security 1

Svix Authentication API declares 1 security scheme for authenticating requests. It accepts HTTP bearer tokens (HTTPBearer).

  • HTTPBearer — HTTP Bearer token passed in the Authorization header

Paths & Operations 21

Across 16 paths, the API surfaces 21 operations — 1 DELETE, 6 GET, 1 PATCH, 11 POST, 2 PUT. Each is listed below with its method, path, parameters, and response codes.

Authentication 21

Easily give your users access to our pre-built management UI.

POST
/api/v1/auth/app-portal-access/{app_id}
Get Consumer App Portal Access
v1.authentication.app-portal-access 2 params body → 200400401403404409422429
GET
/api/v1/auth/whoami
Whoami
v1.authentication.whoami → 200400401403404409422429
POST
/api/v1/auth/logout
Logout
v1.authentication.logout 1 param → 204400401403404409422429
POST
/api/v1/auth/app/{app_id}/expire-all
Expire All
v1.authentication.expire-all 2 params body → 204400401403404409422429
GET
/api/v1/auth/org-group-admin-token
List Org Group Tokens
v1.authentication.org-group-admin-token.list 3 params → 200400401403404409422429
POST
/api/v1/auth/org-group-admin-token
Create Org Group Admin Token
v1.authentication.org-group-admin-token.create 1 param body → 201400401403404409422429
PUT
/api/v1/auth/org-group-admin-token/{key_id}
Update Org Group Token
v1.authentication.org-group-admin-token.update 1 param body → 200400401403404409422429
POST
/api/v1/auth/org-group-admin-token/{key_id}/expire
Expire Org Group Token
v1.authentication.org-group-admin-token.expire 2 params body → 204400401403404409422429
POST
/api/v1/auth/app/{app_id}/poller/{endpoint_id}/token/rotate
Rotate Poller Token
v1.authentication.rotate-poller-token 3 params body → 201400401403404409422429
GET
/api/v1/auth/app/{app_id}/poller/{endpoint_id}/token
Get Poller Token
v1.authentication.get-poller-token 2 params → 200400401403404409422429
GET
/api/v1/auth/app/{app_id}/mcp-token
List MCP Tokens
v1.authentication.list-mcp-tokens 4 params → 200400401403404409422429
POST
/api/v1/auth/app/{app_id}/mcp-token
Create Mcp Token
v1.authentication.create-mcp-token 2 params body → 200400401403404409422429
DELETE
/api/v1/auth/app/{app_id}/mcp-token/{token_id}
Revoke MCP Token
v1.authentication.revoke-mcp-token 2 params → 204400401403404409422429
POST
/api/v1/auth/app/{app_id}/create-message-token
Create Cmg Token
v1.authentication.create-message-token 2 params body → 200400401403404409422429
POST
/api/v1/management/authentication/{env_id}/api-token/{key_id}/expire
Expire Api Token
v1.management.authentication.expire-api-token 3 params body → 204400401403404409422429
GET
/api/v1/management/authentication/{env_id}/api-token/{key_id}
Get Api Token
v1.management.authentication.get-api-token 2 params → 200400401403404409422429
PUT
/api/v1/management/authentication/{env_id}/api-token/{key_id}
Update Api Token
v1.management.authentication.update-api-token 2 params body → 200400401403404409422429
PATCH
/api/v1/management/authentication/{env_id}/api-token/{key_id}
Patch Api Token
v1.management.authentication.patch-api-token 2 params body → 200400401403404409422429
GET
/api/v1/management/authentication/{env_id}/api-token
List Api Tokens
v1.management.authentication.list-api-tokens 4 params → 200400401403404409422429
POST
/api/v1/management/authentication/{env_id}/api-token
Create Api Token
v1.management.authentication.create-api-token 2 params body → 200400401403404409422429
POST
/api/v1/auth/one-time-token
Exchange One Time Token
v1.authentication.exchange-one-time-token 1 param body → 200400401403404409422429

Schemas 28

The contract defines 28 schemas that model the data the API accepts and returns. The most detailed are AppPortalAccessIn (6 properties), ApiTokenCensoredOut (6 properties), ApiTokenOut (6 properties), GlobalApiTokenCensoredOut (6 properties). Each schema is shown below with its type and property counts.

CreateTokenIn
object
2 properties 1 required
AppPortalAccessOut
object
2 properties 2 required
AppPortalAccessIn
object
6 properties
OneTimeTokenOut
object
2 properties 2 required
CreateMcpTokenOut
object
2 properties 2 required
ApiTokenExpireIn
object
1 property
ApplicationTokenExpireIn
object
2 properties
GlobalApiTokenCensoredOut
object
6 properties 3 required
ApiTokenOut
object
6 properties 3 required
WhoamiOut
object
5 properties 1 required
ListResponse_GlobalApiTokenCensoredOut_
object
4 properties 3 required
ApplicationIn
object
5 properties 1 required
ApiTokenCensoredOut
object
6 properties 3 required
ApiTokenIn
object
2 properties 1 required
ListResponse_ApiTokenCensoredOut_
object
4 properties 3 required
CreateMcpTokenIn
object
1 property
AppPortalCapability
string
ApiTokenUpdate
object
1 property 1 required
RotatePollerTokenIn
object
2 properties
HttpErrorOut
object
2 properties 2 required
HTTPValidationError
object
1 property 1 required
ValidationError
object
Validation errors have their own schema to provide context for invalid requests eg. mismatched types and out of bounds values. There may be any number of these…
3 properties 3 required
Ordering
string
Defines the ordering in a listing of results.
OneTimeTokenIn
object
1 property 1 required
ListResponse_McpTokenOut_
object
4 properties 3 required
AuthenticationSource
string
The authentication type of the current request
McpTokenOut
object
4 properties 4 required
ApiTokenPatch
object
2 properties

Specification

The full machine-readable OpenAPI contract behind this narrative.

Source

svix-authentication-api-openapi.yml Raw ↑

Other APIs Svix publishes across the network.

Svix Open Source Server API
Svix Application API
Svix Background Task API
Svix Connector API
Svix Endpoint API
Svix Environment API
Svix Event API
Svix Event Type API
Svix Health API
Svix Ingest Endpoint API
Svix Ingest Source API
Svix Integration API
Where this information came from

This is an independent, third-party profile of Svix Authentication API, published by API Evangelist. We do not operate, host, resell, or support these APIs, and we are not affiliated with or endorsed by the company unless stated above. Everything here is built from publicly available information — the company's own site, developer portal, documentation, public repositories, and the specifications it publishes for public use. Nothing is obtained by breaching a system, defeating an access control, or using credentials.

The Kin Score and Agent Readiness rating are independently calculated assessments of a company's public API artifacts, scored against a published rubric. They are not certifications, endorsements, security assessments, or audits.

Corrections, re-scores, and removal are free — no partnership or purchase required, and you do not need to justify the request. A removed company is recorded as unrated, never scored zero for having asked. Acknowledgement within one business day; removal within two.

info@apievangelist.com · Read the full data-sourcing policy →
On a security or compliance team? Put security in the subject line and you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.