Files
okta-management-openapi-agent/skills/authorization-servers/SKILL.md
a2a-platform 32a091211f deploy
2026-06-27 01:03:51 +00:00

507 lines
16 KiB
Markdown

---
name: authorization-servers-routes
description: Handle 48 OpenAPI operation(s) under /api/v1/authorizationServers for the authorizationServers route group.
---
# authorizationServers API Routes
Handle 48 OpenAPI operation(s) under /api/v1/authorizationServers for the authorizationServers route group.
Use the generated operation tools to make real API calls. Do not invent API responses.
If a tool reports missing setup, return the exact setup field name to the caller.
For write, update, or delete operations, state the intended action before calling the tool.
## Operations
### list_authorization_servers
- Operation ID: `list_authorization_servers`
- Route: `GET /api/v1/authorizationServers`
- Mode: READ
- Summary: List all authorization servers
- Parameters:
- `q` in `query`
- `limit` in `query`
- `after` in `query`
### create_authorization_server
- Operation ID: `create_authorization_server`
- Route: `POST /api/v1/authorizationServers`
- Mode: WRITE
- Summary: Create an authorization server
- Body: JSON request body accepted.
### get_authorization_server
- Operation ID: `get_authorization_server`
- Route: `GET /api/v1/authorizationServers/{authServerId}`
- Mode: READ
- Summary: Retrieve an authorization server
- Parameters:
- `authServerId` in `path` required
### replace_authorization_server
- Operation ID: `replace_authorization_server`
- Route: `PUT /api/v1/authorizationServers/{authServerId}`
- Mode: WRITE
- Summary: Replace an authorization server
- Parameters:
- `authServerId` in `path` required
- Body: JSON request body accepted.
### delete_authorization_server
- Operation ID: `delete_authorization_server`
- Route: `DELETE /api/v1/authorizationServers/{authServerId}`
- Mode: WRITE
- Summary: Delete an authorization server
- Parameters:
- `authServerId` in `path` required
### list_associated_servers_by_trusted_type
- Operation ID: `list_associated_servers_by_trusted_type`
- Route: `GET /api/v1/authorizationServers/{authServerId}/associatedServers`
- Mode: READ
- Summary: List all associated authorization servers
- Parameters:
- `authServerId` in `path` required
- `trusted` in `query`
- `q` in `query`
- `limit` in `query`
- `after` in `query`
### create_associated_servers
- Operation ID: `create_associated_servers`
- Route: `POST /api/v1/authorizationServers/{authServerId}/associatedServers`
- Mode: WRITE
- Summary: Create an associated authorization server
- Parameters:
- `authServerId` in `path` required
- Body: JSON request body accepted.
### delete_associated_server
- Operation ID: `delete_associated_server`
- Route: `DELETE /api/v1/authorizationServers/{authServerId}/associatedServers/{associatedServerId}`
- Mode: WRITE
- Summary: Delete an associated authorization server
- Parameters:
- `authServerId` in `path` required
- `associatedServerId` in `path` required
### list_o_auth2_claims
- Operation ID: `list_o_auth2_claims`
- Route: `GET /api/v1/authorizationServers/{authServerId}/claims`
- Mode: READ
- Summary: List all custom token claims
- Parameters:
- `authServerId` in `path` required
### create_o_auth2_claim
- Operation ID: `create_o_auth2_claim`
- Route: `POST /api/v1/authorizationServers/{authServerId}/claims`
- Mode: WRITE
- Summary: Create a custom token claim
- Parameters:
- `authServerId` in `path` required
- Body: JSON request body accepted.
### get_o_auth2_claim
- Operation ID: `get_o_auth2_claim`
- Route: `GET /api/v1/authorizationServers/{authServerId}/claims/{claimId}`
- Mode: READ
- Summary: Retrieve a custom token claim
- Parameters:
- `authServerId` in `path` required
- `claimId` in `path` required
### replace_o_auth2_claim
- Operation ID: `replace_o_auth2_claim`
- Route: `PUT /api/v1/authorizationServers/{authServerId}/claims/{claimId}`
- Mode: WRITE
- Summary: Replace a custom token claim
- Parameters:
- `authServerId` in `path` required
- `claimId` in `path` required
- Body: JSON request body accepted.
### delete_o_auth2_claim
- Operation ID: `delete_o_auth2_claim`
- Route: `DELETE /api/v1/authorizationServers/{authServerId}/claims/{claimId}`
- Mode: WRITE
- Summary: Delete a custom token claim
- Parameters:
- `authServerId` in `path` required
- `claimId` in `path` required
### list_o_auth2_clients_for_authorization_server
- Operation ID: `list_o_auth2_clients_for_authorization_server`
- Route: `GET /api/v1/authorizationServers/{authServerId}/clients`
- Mode: READ
- Summary: List all client resources for an authorization server
- Parameters:
- `authServerId` in `path` required
### list_refresh_tokens_for_authorization_server_and_client
- Operation ID: `list_refresh_tokens_for_authorization_server_and_client`
- Route: `GET /api/v1/authorizationServers/{authServerId}/clients/{clientId}/tokens`
- Mode: READ
- Summary: List all refresh tokens for a client
- Parameters:
- `authServerId` in `path` required
- `clientId` in `path` required
- `expand` in `query`
- `after` in `query`
- `limit` in `query`
### revoke_refresh_tokens_for_authorization_server_and_client
- Operation ID: `revoke_refresh_tokens_for_authorization_server_and_client`
- Route: `DELETE /api/v1/authorizationServers/{authServerId}/clients/{clientId}/tokens`
- Mode: WRITE
- Summary: Revoke all refresh tokens for a client
- Parameters:
- `authServerId` in `path` required
- `clientId` in `path` required
### get_refresh_token_for_authorization_server_and_client
- Operation ID: `get_refresh_token_for_authorization_server_and_client`
- Route: `GET /api/v1/authorizationServers/{authServerId}/clients/{clientId}/tokens/{tokenId}`
- Mode: READ
- Summary: Retrieve a refresh token for a client
- Parameters:
- `authServerId` in `path` required
- `clientId` in `path` required
- `tokenId` in `path` required
- `expand` in `query`
### revoke_refresh_token_for_authorization_server_and_client
- Operation ID: `revoke_refresh_token_for_authorization_server_and_client`
- Route: `DELETE /api/v1/authorizationServers/{authServerId}/clients/{clientId}/tokens/{tokenId}`
- Mode: WRITE
- Summary: Revoke a refresh token for a client
- Parameters:
- `authServerId` in `path` required
- `clientId` in `path` required
- `tokenId` in `path` required
### list_authorization_server_keys
- Operation ID: `list_authorization_server_keys`
- Route: `GET /api/v1/authorizationServers/{authServerId}/credentials/keys`
- Mode: READ
- Summary: List all credential keys
- Parameters:
- `authServerId` in `path` required
### get_authorization_server_key
- Operation ID: `get_authorization_server_key`
- Route: `GET /api/v1/authorizationServers/{authServerId}/credentials/keys/{keyId}`
- Mode: READ
- Summary: Retrieve an authorization server key
- Parameters:
- `authServerId` in `path` required
- `keyId` in `path` required
### rotate_authorization_server_keys
- Operation ID: `rotate_authorization_server_keys`
- Route: `POST /api/v1/authorizationServers/{authServerId}/credentials/lifecycle/keyRotate`
- Mode: WRITE
- Summary: Rotate all credential keys
- Parameters:
- `authServerId` in `path` required
- Body: JSON request body accepted.
### activate_authorization_server
- Operation ID: `activate_authorization_server`
- Route: `POST /api/v1/authorizationServers/{authServerId}/lifecycle/activate`
- Mode: WRITE
- Summary: Activate an authorization server
- Parameters:
- `authServerId` in `path` required
### deactivate_authorization_server
- Operation ID: `deactivate_authorization_server`
- Route: `POST /api/v1/authorizationServers/{authServerId}/lifecycle/deactivate`
- Mode: WRITE
- Summary: Deactivate an authorization server
- Parameters:
- `authServerId` in `path` required
### list_authorization_server_policies
- Operation ID: `list_authorization_server_policies`
- Route: `GET /api/v1/authorizationServers/{authServerId}/policies`
- Mode: READ
- Summary: List all policies
- Parameters:
- `authServerId` in `path` required
### create_authorization_server_policy
- Operation ID: `create_authorization_server_policy`
- Route: `POST /api/v1/authorizationServers/{authServerId}/policies`
- Mode: WRITE
- Summary: Create a policy
- Parameters:
- `authServerId` in `path` required
- Body: JSON request body accepted.
### get_authorization_server_policy
- Operation ID: `get_authorization_server_policy`
- Route: `GET /api/v1/authorizationServers/{authServerId}/policies/{policyId}`
- Mode: READ
- Summary: Retrieve a policy
- Parameters:
- `authServerId` in `path` required
- `policyId` in `path` required
### replace_authorization_server_policy
- Operation ID: `replace_authorization_server_policy`
- Route: `PUT /api/v1/authorizationServers/{authServerId}/policies/{policyId}`
- Mode: WRITE
- Summary: Replace a policy
- Parameters:
- `authServerId` in `path` required
- `policyId` in `path` required
- Body: JSON request body accepted.
### delete_authorization_server_policy
- Operation ID: `delete_authorization_server_policy`
- Route: `DELETE /api/v1/authorizationServers/{authServerId}/policies/{policyId}`
- Mode: WRITE
- Summary: Delete a policy
- Parameters:
- `authServerId` in `path` required
- `policyId` in `path` required
### activate_authorization_server_policy
- Operation ID: `activate_authorization_server_policy`
- Route: `POST /api/v1/authorizationServers/{authServerId}/policies/{policyId}/lifecycle/activate`
- Mode: WRITE
- Summary: Activate a policy
- Parameters:
- `authServerId` in `path` required
- `policyId` in `path` required
### deactivate_authorization_server_policy
- Operation ID: `deactivate_authorization_server_policy`
- Route: `POST /api/v1/authorizationServers/{authServerId}/policies/{policyId}/lifecycle/deactivate`
- Mode: WRITE
- Summary: Deactivate a policy
- Parameters:
- `authServerId` in `path` required
- `policyId` in `path` required
### list_authorization_server_policy_rules
- Operation ID: `list_authorization_server_policy_rules`
- Route: `GET /api/v1/authorizationServers/{authServerId}/policies/{policyId}/rules`
- Mode: READ
- Summary: List all policy rules
- Parameters:
- `authServerId` in `path` required
- `policyId` in `path` required
### create_authorization_server_policy_rule
- Operation ID: `create_authorization_server_policy_rule`
- Route: `POST /api/v1/authorizationServers/{authServerId}/policies/{policyId}/rules`
- Mode: WRITE
- Summary: Create a policy rule
- Parameters:
- `authServerId` in `path` required
- `policyId` in `path` required
- Body: JSON request body accepted.
### get_authorization_server_policy_rule
- Operation ID: `get_authorization_server_policy_rule`
- Route: `GET /api/v1/authorizationServers/{authServerId}/policies/{policyId}/rules/{ruleId}`
- Mode: READ
- Summary: Retrieve a policy rule
- Parameters:
- `authServerId` in `path` required
- `policyId` in `path` required
- `ruleId` in `path` required
### replace_authorization_server_policy_rule
- Operation ID: `replace_authorization_server_policy_rule`
- Route: `PUT /api/v1/authorizationServers/{authServerId}/policies/{policyId}/rules/{ruleId}`
- Mode: WRITE
- Summary: Replace a policy rule
- Parameters:
- `authServerId` in `path` required
- `policyId` in `path` required
- `ruleId` in `path` required
- Body: JSON request body accepted.
### delete_authorization_server_policy_rule
- Operation ID: `delete_authorization_server_policy_rule`
- Route: `DELETE /api/v1/authorizationServers/{authServerId}/policies/{policyId}/rules/{ruleId}`
- Mode: WRITE
- Summary: Delete a policy rule
- Parameters:
- `authServerId` in `path` required
- `policyId` in `path` required
- `ruleId` in `path` required
### activate_authorization_server_policy_rule
- Operation ID: `activate_authorization_server_policy_rule`
- Route: `POST /api/v1/authorizationServers/{authServerId}/policies/{policyId}/rules/{ruleId}/lifecycle/activate`
- Mode: WRITE
- Summary: Activate a policy rule
- Parameters:
- `authServerId` in `path` required
- `policyId` in `path` required
- `ruleId` in `path` required
### deactivate_authorization_server_policy_rule
- Operation ID: `deactivate_authorization_server_policy_rule`
- Route: `POST /api/v1/authorizationServers/{authServerId}/policies/{policyId}/rules/{ruleId}/lifecycle/deactivate`
- Mode: WRITE
- Summary: Deactivate a policy rule
- Parameters:
- `authServerId` in `path` required
- `policyId` in `path` required
- `ruleId` in `path` required
### list_o_auth2_resource_server_json_web_keys
- Operation ID: `list_o_auth2_resource_server_json_web_keys`
- Route: `GET /api/v1/authorizationServers/{authServerId}/resourceservercredentials/keys`
- Mode: READ
- Summary: List all Custom Authorization Server Public JSON Web Keys
- Parameters:
- `authServerId` in `path` required
### add_o_auth2_resource_server_json_web_key
- Operation ID: `add_o_auth2_resource_server_json_web_key`
- Route: `POST /api/v1/authorizationServers/{authServerId}/resourceservercredentials/keys`
- Mode: WRITE
- Summary: Add a JSON Web Key
- Parameters:
- `authServerId` in `path` required
- Body: JSON request body accepted.
### get_o_auth2_resource_server_json_web_key
- Operation ID: `get_o_auth2_resource_server_json_web_key`
- Route: `GET /api/v1/authorizationServers/{authServerId}/resourceservercredentials/keys/{keyId}`
- Mode: READ
- Summary: Retrieve a Custom Authorization Server Public JSON Web Key
- Parameters:
- `authServerId` in `path` required
- `keyId` in `path` required
### delete_o_auth2_resource_server_json_web_key
- Operation ID: `delete_o_auth2_resource_server_json_web_key`
- Route: `DELETE /api/v1/authorizationServers/{authServerId}/resourceservercredentials/keys/{keyId}`
- Mode: WRITE
- Summary: Delete a Custom Authorization Server Public JSON Web Key
- Parameters:
- `authServerId` in `path` required
- `keyId` in `path` required
### activate_o_auth2_resource_server_json_web_key
- Operation ID: `activate_o_auth2_resource_server_json_web_key`
- Route: `POST /api/v1/authorizationServers/{authServerId}/resourceservercredentials/keys/{keyId}/lifecycle/activate`
- Mode: WRITE
- Summary: Activate a Custom Authorization Server Public JSON Web Key
- Parameters:
- `authServerId` in `path` required
- `keyId` in `path` required
### deactivate_o_auth2_resource_server_json_web_key
- Operation ID: `deactivate_o_auth2_resource_server_json_web_key`
- Route: `POST /api/v1/authorizationServers/{authServerId}/resourceservercredentials/keys/{keyId}/lifecycle/deactivate`
- Mode: WRITE
- Summary: Deactivate a Custom Authorization Server Public JSON Web Key
- Parameters:
- `authServerId` in `path` required
- `keyId` in `path` required
### list_o_auth2_scopes
- Operation ID: `list_o_auth2_scopes`
- Route: `GET /api/v1/authorizationServers/{authServerId}/scopes`
- Mode: READ
- Summary: List all custom token scopes
- Parameters:
- `authServerId` in `path` required
- `q` in `query`
- `filter` in `query`
- `after` in `query`
- `limit` in `query`
### create_o_auth2_scope
- Operation ID: `create_o_auth2_scope`
- Route: `POST /api/v1/authorizationServers/{authServerId}/scopes`
- Mode: WRITE
- Summary: Create a custom token scope
- Parameters:
- `authServerId` in `path` required
- Body: JSON request body accepted.
### get_o_auth2_scope
- Operation ID: `get_o_auth2_scope`
- Route: `GET /api/v1/authorizationServers/{authServerId}/scopes/{scopeId}`
- Mode: READ
- Summary: Retrieve a custom token scope
- Parameters:
- `authServerId` in `path` required
- `scopeId` in `path` required
### replace_o_auth2_scope
- Operation ID: `replace_o_auth2_scope`
- Route: `PUT /api/v1/authorizationServers/{authServerId}/scopes/{scopeId}`
- Mode: WRITE
- Summary: Replace a custom token scope
- Parameters:
- `authServerId` in `path` required
- `scopeId` in `path` required
- Body: JSON request body accepted.
### delete_o_auth2_scope
- Operation ID: `delete_o_auth2_scope`
- Route: `DELETE /api/v1/authorizationServers/{authServerId}/scopes/{scopeId}`
- Mode: WRITE
- Summary: Delete a custom token scope
- Parameters:
- `authServerId` in `path` required
- `scopeId` in `path` required