API Reference

The Authaz Management API is the same surface the dashboard uses. Every endpoint is documented in the interactive reference (rendered from our OpenAPI spec). This page covers how to authenticate and what's where.

curl https://your-app.authaz.io/api/v1/users \
  -H "X-API-Key: $AUTHAZ_API_KEY"

Authentication#

Two methods work on every endpoint. Pick whichever fits the caller.

X-API-Key (Management API key)#

Long-lived keys generated in the dashboard. The default for backend services and CI:

curl https://your-app.authaz.io/api/v1/users \
  -H "X-API-Key: mgmt_live_xxxxxxxxxxxx"

API keys are scoped to one application and (optionally) one tenant. They can also be restricted by permission — give your CI a key that can only users:read, not users:delete.