How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

Need help?

Contact us
Vendasta

Vendasta SCIM 2.0 User Management API

A SCIM 2.0 implementation for provisioning and de-provisioning Vendasta users and groups from an external identity provider. Covers Users, Groups and System Operations (ServiceProviderConfig, ResourceTypes, Schemas), with published guides on group-to-user assignment, supported PATCH operations, and the known limitations of SCIM in Vendasta. Uses the same gateway bearer token as the rest of the platform.

Documentation Provider Profile APIs.io OpenAPI GitHub

Vendasta SCIM 2.0 User Management API is one of 38 APIs that Vendasta publishes on the APIs.io network, described by a machine-readable OpenAPI specification.

Tagged areas include SCIM, Identity, Provisioning, User, and Group. The published artifact set on APIs.io includes an OpenAPI specification.

This API exposes 16 operations across 11 paths, organized into 3 resource areas, and defines 19 schemas. It is described by OpenAPI 3.0.3, at version 1.0.0.

Requests are made against 4 base URLs: https://prod.apigateway.co/scim, https://demo.apigateway.co/scim, http://localhost:11001/scim, {local}/scim.

16 operations 11 paths 19 schemas 1 DELETE11 GET2 PATCH1 POST1 PUT

Metadata

The identity and technical contract details declared by the specification.

Specification
OpenAPI 3.0.3
API Version
1.0.0
Base URL
https://prod.apigateway.co/scim
Authentication
HTTP Bearer, OAuth 2.0, OAuth 2.0
Resource Areas
3

Authentication & Security 3

Vendasta SCIM 2.0 User Management API declares 3 security schemes for authenticating requests. It accepts HTTP bearer tokens (JWT) (bearerAuth). It supports OAuth 2.0 (OAuth2Demo) using the authorizationCode flow, exposing 2 scopes. It supports OAuth 2.0 (OAuth2Prod) using the authorizationCode flow, exposing 2 scopes. By default, every request must be authenticated.

Paths & Operations 16

Across 11 paths, the API surfaces 16 operations — 1 DELETE, 11 GET, 2 PATCH, 1 POST, 1 PUT. They span 3 resource areas: User, Group, System Operations. Each is listed below with its method, path, parameters, and response codes.

User 7

User resources

GET
/{namespace}/Users
Search Users
scim-search-users 10 params → 200400
POST
/{namespace}/Users
Create User
scim-create-user 1 param body → 201400409
GET
/{namespace}/Users/{id}
Get User
scim-get-user 2 params → 200404
PUT
/{namespace}/Users/{id}
Replace User
scim-replace-user 2 params body → 200400
PATCH
/{namespace}/Users/{id}
Update User
scim-update-user 2 params body → 200405
DELETE
/{namespace}/Users/{id}
Delete User
scim-delete-user 2 params → 204405
GET
/{namespace}/Me
Me redirect
get-namespace-Me 1 param → 308
Group 3

Group resource

GET
/{namespace}/Groups
Search Groups
3 params → 200404
GET
/{namespace}/Groups/{id}
Get Group
3 params → 200404
PATCH
/{namespace}/Groups/{id}
Update Group
2 params body → 204405
System Operations 6

System Operations

GET
/{namespace}/ResourceTypes
List Resource Types
get-namespace-ResourceTypes 4 params → 200default
GET
/{namespace}/ResourceTypes/{id}
Get Resource Type
get-ResourceTypes-id 3 params → 200default
GET
/{namespace}/Schemas
List Schemas
get-namespace-Schemas 4 params → 200default
GET
/{namespace}/Schemas/{id}
Get Schema
get-Schemas-id 2 params → 200default
GET
/{namespace}/ServiceProviderConfig
Get Service Provider Config
get-ServiceProviderConfig 4 params → 200
GET
/{namespace}/Bulk
Bulk Actions
get-namespace-Bulk 1 param → 501

Schemas 19

The contract defines 19 schemas that model the data the API accepts and returns. The most detailed are User (20 properties), SchemaServiceProviderConfig (10 properties), ResourceResourceType (8 properties), Address (8 properties). Each schema is shown below with its type and property counts.

User
object
20 properties 4 required
PhoneNumber
object
2 properties
Address
object
8 properties
Name
object
6 properties 1 required
Email
object
3 properties
Group
object
5 properties
Member
object
3 properties
ServiceProviderConfig
object
2 properties
ListResponseUsers
object
5 properties
ListResponseGroup
object
5 properties
PatchOp
object
2 properties
Operation
object
3 properties
ResourceResourceType
object
The "ResourceType" schema specifies the metadata about a resource type. Resource type resources are READ-ONLY and identified using the following schema URI: "u…
8 properties 5 required
ResourceSchema
object
This section defines a way to specify the schema in use by resources available and accepted by a SCIM service provider. For each "schemas" URI value, this sche…
5 properties 2 required
MessageListResponse
object
All seach requests should return a response with this format. When not all resources matching the filter criteria can be returned due to paging the next page c…
5 properties 2 required
MessageError
object
4 properties 2 required
CommonResourceAttributes
object
Each SCIM resource (Users, Groups, etc.) includes the following common attributes. With the exception of the "ServiceProviderConfig" and "ResourceType" server…
4 properties 1 required
SchemaServiceProviderConfig
object
SCIM provides a schema for representing the service provider's configuration, identified using the following schema URI: "urn:ietf:params:scim:schemas:core:2.0…
10 properties 8 required
Meta
object
5 properties

Specification

The full machine-readable OpenAPI contract behind this narrative.

Source

vendasta-scim-openapi.yml Raw ↑

Other APIs Vendasta publishes across the network.

Vendasta account API
AE Profile APIs.io
Vendasta activity API
AE Profile APIs.io
Vendasta change_spend API
AE Profile APIs.io
Vendasta customer API
AE Profile APIs.io
Vendasta executive_report API
AE Profile APIs.io
Vendasta marketplace_app API
AE Profile APIs.io
Vendasta oauth API
AE Profile APIs.io
Vendasta user API
AE Profile APIs.io
Vendasta Platform REST API
AE Profile APIs.io
Vendasta CRM REST API
AE Profile APIs.io
Vendasta CRM API (gRPC gateway)
AE Profile APIs.io
Vendasta Local SEO REST API
AE Profile APIs.io
#SCIM#Identity#Provisioning#User#Group#SSO
← Back to V APIs
API Details
ID
vendasta:vendasta-scim-api
Base URL
https://prod.apigateway.co/scim
Docs
https://developers.vendasta.com/platform
Provider
Vendasta
APIs.io →  GitHub →
Explore more
All APIs Providers APIs.io Network
Work with this as data

Every API here is available over the API and to AI agents over MCP. APIs is not yet its own endpoint on the v1 API. Reach this content through network search and the tag graph, or the MCP server below.

Installs https://mcp.apievangelist.com/mcp in Claude, Cursor, VS Code and the rest — one button, every client.

MCP tools for apis
4 tools reach this content
  • search_api_evangelistSearch every content type across the network at once.
  • find_relatedThe shared-tag relevance graph — what else covers this.
  • get_tagEverything one tag labels, across all content types.
  • guide_topicPRO — a curated bundle for a topic: area, guidance, rules, papers, stories, services.
All tools & prompts
Call it yourself
curl for this page
Search the network for this 
curl "https://api.apievangelist.com/v1/search?q=vendasta-scim-api&limit=10"
Everything under a tag 
curl "https://api.apievangelist.com/v1/tags/vendasta-scim-api"

Discovery needs no key. Full bodies and the synthesis endpoints are Pro.

Get an API key

Free tier, no email required. Sign in with whichever identity you already have.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have. Your account

Where this information came from

This is an independent, third-party profile of Vendasta SCIM 2.0 User Management API, published by API Evangelist. We do not operate, host, resell, or support these APIs, and we are not affiliated with or endorsed by the company unless stated above. Everything here is built from publicly available information — the company's own site, developer portal, documentation, public repositories, and the specifications it publishes for public use. Nothing is obtained by breaching a system, defeating an access control, or using credentials.

The Kin Score and Agent Readiness rating are independently calculated assessments of a company's public API artifacts, scored against a published rubric. They are not certifications, endorsements, security assessments, or audits.

Corrections, re-scores, and removal are free — no partnership or purchase required, and you do not need to justify the request. A removed company is recorded as unrated, never scored zero for having asked. Acknowledgement within one business day; removal within two.

info@apievangelist.com · Read the full data-sourcing policy →
On a security or compliance team? Put security in the subject line and you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.