Auth0

Add roles to a user.

Create a new client/application.

Create a new authentication/identity connection.

Create a new API resource server (API in Auth0).

Create a new role.

Create a new user in a database or connection.

Delete a client/application.

Delete a connection.

Delete a resource server.

Delete a role.

Delete a user from the tenant.

Retrieve a client by client_id.

Get a specific connection by id.

Retrieve a specific log entry.

Retrieve an organization.

Retrieve a resource server by ID.

List permissions defined for a resource server.

Retrieve a role by ID.

List permissions assigned to a role.

List users assigned to a role.

Retrieve a user by their Auth0 user_id.

List roles assigned to a user.

Lookup users by email address (query param email).

List registered applications (clients) in the tenant.

List authentication/identity connections (e.g., databases, social, enterprise).

List audit/logs events for the tenant.

List organizations in the tenant (RBAC/Org features).

List configured APIs (resource servers) for the tenant.

Retrieve roles defined in the tenant.

List roles assigned to a user.

Retrieve a list of user profiles with optional search and paging parameters.

Remove roles from a user.

Assign permissions to a role for a given API.

Update a client/application.

Update a connection.

Update a resource server.

Update an existing role.

Update an existing user’s profile attributes.

Entry point to browser-based authentication flows; redirects the user to the identity provider for login.

Returns the authenticated user’s profile information based on the access token.

SSO callback endpoint used in IdP-initiated or SSO flows (varies by flow; see SSO docs).

Legacy mechanism to obtain a delegation token for calling another API/add-on (deprecated in newer tenants).

Exchanges an authorization grant (e.g., authorization_code, password, client_credentials, refresh_token) for access and/or refresh tokens.

Redirected verification endpoint used when passwordless uses a browser redirect flow.

Polls the token endpoint with the device_code to obtain an access token after device authorization.

Starts the OAuth 2.0 Device Authorization Flow by obtaining a device_code and user_code.

SSO callback for IdP-initiated or hosted login flows (covered in SSO docs).

Initiates a passwordless login by sending a one-time code or magic link to the user.

Legacy endpoint to retrieve information about a token (superseded by newer flows; deprecated in modern tenants).

Verifies the passwordless code to complete login (code-based passwordless flow).

Complete a connected accounts linking flow.

Initiate linking a connected account (Token Vault/Linked accounts flow).

Enrolls a new authentication method for the current user.

Legacy endpoint variant for initiating a connected accounts flow.

List authentication methods enrolled by the current user.

List accounts connected to the user.

List factors the user can enroll.