Skip to main content

​
Overview

Authlete is an API-first service where every aspect of the platform is configurable via API. At a high level, the Authlete API is grouped into two categories:
  • Management APIs: Enable you to manage services and clients. 🔧
  • Runtime APIs: Allow you to build your own Authorization Servers or Verifiable Credential (VC) issuers. 🔐
All API endpoints are secured using access tokens issued by Authlete’s Identity Provider (IdP). If you already have an Authlete account, simply use the Get Token option on the Authentication page to log in and obtain an access token for API usage. If you don’t have an account yet, sign up here to get started.
For the complete interactive OpenAPI specification with detailed schemas and examples, see our API References tab.

​
Error Handling

All API endpoints return consistent error responses with the following structure: 
{
  "resultCode": "A004001",
  "resultMessage": "Error description",
  "resultDescription": "Detailed error information"
}
Common error codes:
  • A004001: Invalid request parameters
  • A004002: Authentication required
  • A004003: Insufficient permissions
  • A004004: Resource not found
  • A004005: Internal server error

​
Rate Limiting

API calls are subject to rate limiting:
  • Service Management: 1,000 requests/hour
  • Client Management: 5,000 requests/hour
  • Authorization APIs: 10,000 requests/hour
  • Token APIs: 10,000 requests/hour

​
SDKs and Libraries

We provide official SDKs for popular programming languages:

​
Support

Need help with the API?