How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

Need help?

Contact us
Venafi

Venafi Workload Identity Manager Policies API

The Workload Identity Manager Policies API from Venafi — 2 operation(s) for workload identity manager policies.

Documentation Provider Profile APIs.io OpenAPI GitHub

Venafi Workload Identity Manager Policies API is one of 58 APIs that Venafi publishes on the APIs.io network, described by a machine-readable OpenAPI specification.

Tagged areas include Workload Identity Manager Policies. The published artifact set on APIs.io includes an OpenAPI specification and API documentation.

This API exposes 5 operations across 2 paths, and defines 31 schemas. It is described by OpenAPI 3.2.0, at version 1.0.

Requests are made against 6 base URLs: https://api.venafi.cloud, https://api.eu.venafi.cloud, https://api.au.venafi.cloud, https://api.uk.venafi.cloud, https://api.sg.venafi.cloud, https://api.ca.venafi.cloud.

5 operations 2 paths 31 schemas 1 DELETE2 GET1 PATCH1 POST

Metadata

The identity and technical contract details declared by the specification.

Specification
OpenAPI 3.2.0
API Version
1.0
Base URL
https://api.venafi.cloud
Authentication
API Key, API Key
Resource Areas
1

Authentication & Security 2

Venafi Workload Identity Manager Policies API declares 2 security schemes for authenticating requests. An API key is passed in the header as service-account (service-account). An API key is passed in the header as tppl-api-key (tppl-api-key).

Paths & Operations 5

Across 2 paths, the API surfaces 5 operations — 1 DELETE, 2 GET, 1 PATCH, 1 POST. Each is listed below with its method, path, parameters, and response codes.

Workload Identity Manager Policies 5
POST
/v1/distributedissuers/policies
Create a new Workload Issuance policy
policies_create body → 201400403
GET
/v1/distributedissuers/policies
Get the details of all Workload Issuance policies
policies_getAll → 200
GET
/v1/distributedissuers/policies/{id}
Get a Workload Issuance policy's details
policies_getById 1 param → 200400404
PATCH
/v1/distributedissuers/policies/{id}
Update a Workload Issuance policy's details
policies_update 1 param body → 200400403404
DELETE
/v1/distributedissuers/policies/{id}
Remove a Workload Issuance policy
policies_delete 1 param → 200400403404

Schemas 31

The contract defines 31 schemas that model the data the API accepts and returns. The most detailed are DistributedIssuerConfigurationGetResponse (14 properties), PolicyGetResponse (13 properties), PolicyUpdateRequest (9 properties), ConfigurationGetResponse (7 properties). Each schema is shown below with its type and property counts.

SubjectAttributes
object
Subject attributes
6 properties
ClientAuthentication
object
1 property 1 required
AdvancedSettings
object
3 properties
JWTOIDCAuthentication
object
4 properties 3 required
JWTStandardClaimsAuthentication
object
3 properties 3 required
ClientAuthorization
object
1 property
KeyUsage
string
Key usage
ErrorResponse3
object
1 property
CloudProviders
object
3 properties
ConfigurationGetResponse
object
7 properties 1 required
DistributedIssuerConfigurationGetResponse
object
14 properties 1 required
PolicyDeleteResponse
object
2 properties
PolicyListResponse
object
1 property
PolicyUpdateRequest
object
9 properties
KeyAlgorithmInformation
object
Key algorithm
2 properties 2 required
ExtendedPolicyGetResponse
ForwardTrustProxyConfigurationGetResponse
object
Configuration that issues forward-trust proxy intermediate certificates. It references only a Sub CA provider; the policy, client authentication/authorization,…
2 properties 1 required
JWTJWKSAuthentication
object
3 properties 2 required
Property
object
5 properties
GoogleCloudProvider
object
2 properties 2 required
AzureCloudProvider
object
1 property 1 required
CustomClaimsAliases
object
3 properties
MinTLSVersion
string
Minimum required TLS protocol version
PolicyGetResponse
object
13 properties
AWSCloudProvider
object
2 properties 2 required
PolicyCreateRequest
Error1
object
A single error. The numeric code is stable and matches the codes listed at the start of each cause in the endpoints' error-response descriptions, so clients ca…
3 properties
SANs
object
Subject alternative names
4 properties
JWTClient
object
5 properties 4 required
KeyAlgorithm1
string
Key algorithm type
ExtendedKeyUsage
string
Extended key usage

Specification

The full machine-readable OpenAPI contract behind this narrative.

Source

venafi-workload-identity-manager-policies-api-openapi.yml Raw ↑

Other APIs Venafi publishes across the network.

Venafi Access Management APIs API
AE Profile APIs.io
Venafi AlgorithmSelector APIs API
AE Profile APIs.io
Venafi Application API
AE Profile APIs.io
Venafi Authentication Server APIs API
AE Profile APIs.io
Venafi Certificate Approvals API
AE Profile APIs.io
Venafi Certificate Auto-renewal Monitoring API
AE Profile APIs.io
Venafi Certificate Discovery API
AE Profile APIs.io
Venafi Certificate Expiration Reports API
AE Profile APIs.io
Venafi Certificate Import API
AE Profile APIs.io
Venafi Certificate Installations API
AE Profile APIs.io
Venafi Certificate Inventory Monitoring API
AE Profile APIs.io
Venafi Certificate Management APIs API
AE Profile APIs.io
#Workload Identity Manager Policies
← Back to V APIs
API Details
ID
venafi:venafi-workload-identity-manager-policies-api
Base URL
https://api.venafi.cloud
Docs
https://developer.venafi.com/tlsprotectcloud/reference/tls-protect-overview
Provider
Venafi
APIs.io →  GitHub →
Explore more
All APIs Providers APIs.io Network
Work with this as data

Every API here is available over the API and to AI agents over MCP. APIs is not yet its own endpoint on the v1 API. Reach this content through network search and the tag graph, or the MCP server below.

Installs https://mcp.apievangelist.com/mcp in Claude, Cursor, VS Code and the rest — one button, every client.

MCP tools for apis
4 tools reach this content
  • search_api_evangelistSearch every content type across the network at once.
  • find_relatedThe shared-tag relevance graph — what else covers this.
  • get_tagEverything one tag labels, across all content types.
  • guide_topicPRO — a curated bundle for a topic: area, guidance, rules, papers, stories, services.
All tools & prompts
Call it yourself
curl for this page
Search the network for this 
curl "https://api.apievangelist.com/v1/search?q=venafi-workload-identity-manager-policies-api&limit=10"
Everything under a tag 
curl "https://api.apievangelist.com/v1/tags/venafi-workload-identity-manager-policies-api"

Discovery needs no key. Full bodies and the synthesis endpoints are Pro.

Get an API key

Free tier, no email required. Sign in with whichever identity you already have.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have. Your account

Where this information came from

This is an independent, third-party profile of Venafi Workload Identity Manager Policies API, published by API Evangelist. We do not operate, host, resell, or support these APIs, and we are not affiliated with or endorsed by the company unless stated above. Everything here is built from publicly available information — the company's own site, developer portal, documentation, public repositories, and the specifications it publishes for public use. Nothing is obtained by breaching a system, defeating an access control, or using credentials.

The Kin Score and Agent Readiness rating are independently calculated assessments of a company's public API artifacts, scored against a published rubric. They are not certifications, endorsements, security assessments, or audits.

Corrections, re-scores, and removal are free — no partnership or purchase required, and you do not need to justify the request. A removed company is recorded as unrated, never scored zero for having asked. Acknowledgement within one business day; removal within two.

info@apievangelist.com · Read the full data-sourcing policy →
On a security or compliance team? Put security in the subject line and you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.