> ## Documentation Index
> Fetch the complete documentation index at: https://veryfront.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Identity and Access API

> Authenticate callers and manage account and project access.

Authenticate callers and manage account and project access.

Assign access through account and project roles. Private resources may require additional permissions.

[Authentication](#authentication) · [Current user](#current-user) · [Accounts](#accounts) · [Account Collaboration](#account-collaboration) · [Account Members](#account-members) · [Account Invitations](#account-invitations) · [Account directory](#account-directory) · [Project Members](#project-members) · [Project Invitations](#project-invitations) · [Project Ownership](#project-ownership) · [API keys](#api-keys) · [OAuth Metadata](#oauth-metadata) · [OAuth Clients](#oauth-clients) · [OAuth Authorization Requests](#oauth-authorization-requests) · [OAuth Tokens](#oauth-tokens) · [OAuth Grants](#oauth-grants)

## Authentication

Sign in through an identity provider or magic link, create tokens, and end sessions. Retrieve public verification keys from [the JWKS endpoint](/docs/cloud/rest/api-reference/authentication/get-jwks).

| Endpoint | Methods | Description |
| - | - | - |
| `/auth/token` | [POST](/docs/cloud/rest/api-reference/authentication/create-token) | Create token |
| `/auth/environment-token` | [POST](/docs/cloud/rest/api-reference/authentication/create-environment-access-token) | Create environment access token |
| `/auth/github` | [GET](/docs/cloud/rest/api-reference/authentication/github-oauth) | GitHub OAuth |
| `/auth/google` | [GET](/docs/cloud/rest/api-reference/authentication/google-oauth) | Google OAuth |
| `/auth/microsoft` | [GET](/docs/cloud/rest/api-reference/authentication/microsoft-oauth) | Microsoft OAuth |
| `/auth/magiclink/create` | [POST](/docs/cloud/rest/api-reference/authentication/create-magic-link) | Create magic link |
| `/auth/magiclink` | [GET](/docs/cloud/rest/api-reference/authentication/verify-magic-link) | Verify magic link |
| `/auth/logout` | [GET](/docs/cloud/rest/api-reference/authentication/log-out-post-required), [POST](/docs/cloud/rest/api-reference/authentication/log-out) | Log out (POST required); Log out |
| `/.well-known/jwks.json` | [GET](/docs/cloud/rest/api-reference/authentication/get-jwks) | Get JWKS |

## Current user

Read the authenticated user’s profile.

| Endpoint | Methods | Description |
| - | - | - |
| `/me` | [GET](/docs/cloud/rest/api-reference/current-user/get-profile) | Get profile |

## Accounts

List, create, or read accounts.

| Endpoint | Methods | Description |
| - | - | - |
| `/accounts` | [GET](/docs/cloud/rest/api-reference/accounts/list-accounts), [POST](/docs/cloud/rest/api-reference/accounts/create-account) | List accounts; Create account |
| `/accounts/{account_id}` | [GET](/docs/cloud/rest/api-reference/accounts/get-account) | Get account |

## Account Collaboration

Read owner-wide collaboration entitlements and seat usage. The project reference selects its owner.

| Endpoint | Methods | Description |
| - | - | - |
| `/projects/{project_reference}/collaboration` | [GET](/docs/cloud/rest/api-reference/account-collaboration/get-project-collaboration) | Get project collaboration |

## Account Members

List, update, or remove account members.

| Endpoint | Methods | Description |
| - | - | - |
| `/accounts/{account_id}/members` | [GET](/docs/cloud/rest/api-reference/account-members/list-account-members) | List account members |
| `/accounts/{account_id}/members/{user_id}` | [PATCH](/docs/cloud/rest/api-reference/account-members/update-account-member), [DELETE](/docs/cloud/rest/api-reference/account-members/revoke-account-member) | Update account member; Revoke account member |

## Account Invitations

List, create, revoke, or accept account invitations.

| Endpoint | Methods | Description |
| - | - | - |
| `/accounts/{account_id}/invitations` | [GET](/docs/cloud/rest/api-reference/account-invitations/list-account-invitations), [POST](/docs/cloud/rest/api-reference/account-invitations/create-account-invitation) | List account invitations; Create account invitation |
| `/accounts/{account_id}/invitations/{invitation_id}` | [DELETE](/docs/cloud/rest/api-reference/account-invitations/revoke-account-invitation) | Revoke account invitation |
| `/accounts/-/invitations/accept` | [POST](/docs/cloud/rest/api-reference/account-invitations/accept-account-invitation) | Accept account invitation |

## Account directory

List pending invitations and active members across projects you own.

| Endpoint | Methods | Description |
| - | - | - |
| `/account/invites` | [GET](/docs/cloud/rest/api-reference/account-directory/list-account-invites) | List account invites |
| `/account/users` | [GET](/docs/cloud/rest/api-reference/account-directory/list-account-users) | List account users |

## Project Members

List, read, remove, or update project members.

| Endpoint | Methods | Description |
| - | - | - |
| `/projects/{project_reference}/users` | [GET](/docs/cloud/rest/api-reference/project-members/list-project-users) | List project users |
| `/projects/{project_reference}/users/{user_id}` | [GET](/docs/cloud/rest/api-reference/project-members/get-project-user), [DELETE](/docs/cloud/rest/api-reference/project-members/delete-project-user) | Get project user; Delete project user |
| `/projects/{project_reference}/users/{user_id}/role` | [PATCH](/docs/cloud/rest/api-reference/project-members/update-project-user-role) | Update project user role |

## Project Invitations

Create, read, delete, or resend project invitations.

| Endpoint | Methods | Description |
| - | - | - |
| `/projects/{project_reference}/invites` | [GET](/docs/cloud/rest/api-reference/project-invitations/list-project-invites), [POST](/docs/cloud/rest/api-reference/project-invitations/create-project-invite) | List project invites; Create project invite |
| `/projects/{project_reference}/invites/{invite_id}` | [GET](/docs/cloud/rest/api-reference/project-invitations/get-project-invite), [DELETE](/docs/cloud/rest/api-reference/project-invitations/delete-project-invite) | Get project invite; Delete project invite |
| `/projects/{project_reference}/invites/{invite_id}/resend` | [POST](/docs/cloud/rest/api-reference/project-invitations/resend-project-invite) | Resend project invite |

## Project Ownership

Transfer project ownership.

| Endpoint | Methods | Description |
| - | - | - |
| `/projects/{project_reference}/users/{user_id}/transfer-ownership` | [POST](/docs/cloud/rest/api-reference/project-ownership/transfer-project-ownership) | Transfer project ownership |

## API keys

Create, inspect, update, and revoke API keys. View [API key usage](/docs/cloud/rest/apis/billing-and-usage-api#api-key-usage) in the Billing and Usage API.

| Endpoint | Methods | Description |
| - | - | - |
| `/api-keys` | [GET](/docs/cloud/rest/api-reference/api-keys/list-api-keys), [POST](/docs/cloud/rest/api-reference/api-keys/create-api-key) | List API keys; Create API key |
| `/api-keys/{id}` | [GET](/docs/cloud/rest/api-reference/api-keys/get-api-key), [PATCH](/docs/cloud/rest/api-reference/api-keys/update-api-key), [DELETE](/docs/cloud/rest/api-reference/api-keys/delete-api-key) | Get API key; Update API key; Delete API key |

## OAuth Metadata

Discover OAuth authorization and protected-resource metadata.

| Endpoint | Methods | Description |
| - | - | - |
| `/.well-known/oauth-authorization-server` | [GET](/docs/cloud/rest/api-reference/oauth-metadata/discover-mcp-authorization-endpoints) | Discover MCP authorization endpoints |
| `/.well-known/oauth-protected-resource/mcp` | [GET](/docs/cloud/rest/api-reference/oauth-metadata/discover-root-mcp-authorization) | Discover root MCP authorization |
| `/.well-known/oauth-protected-resource/projects/{project_reference}/mcp` | [GET](/docs/cloud/rest/api-reference/oauth-metadata/discover-project-mcp-authorization) | Discover project MCP authorization |

## OAuth Clients

Register public OAuth clients.

| Endpoint | Methods | Description |
| - | - | - |
| `/oauth/register` | [POST](/docs/cloud/rest/api-reference/oauth-clients/register-a-public-mcp-client) | Register a public MCP client |

## OAuth Authorization Requests

Start, read, or decide MCP authorization requests.

| Endpoint | Methods | Description |
| - | - | - |
| `/oauth/authorize` | [GET](/docs/cloud/rest/api-reference/oauth-authorization-requests/start-mcp-authorization-with-pkce) | Start MCP authorization with PKCE |
| `/oauth/authorization-requests/{id}` | [GET](/docs/cloud/rest/api-reference/oauth-authorization-requests/read-an-mcp-authorization-request) | Read an MCP authorization request |
| `/oauth/authorization-requests/{id}/decision` | [POST](/docs/cloud/rest/api-reference/oauth-authorization-requests/approve-or-deny-mcp-access) | Approve or deny MCP access |

## OAuth Tokens

Exchange, rotate, or revoke OAuth tokens.

| Endpoint | Methods | Description |
| - | - | - |
| `/oauth/token` | [POST](/docs/cloud/rest/api-reference/oauth-tokens/exchange-a-code-or-rotate-an-mcp-refresh-token) | Exchange a code or rotate an MCP refresh token |
| `/oauth/revoke` | [POST](/docs/cloud/rest/api-reference/oauth-tokens/revoke-an-mcp-client-grant) | Revoke an MCP client grant |

## OAuth Grants

List or revoke authorized MCP app grants.

| Endpoint | Methods | Description |
| - | - | - |
| `/oauth/grants` | [GET](/docs/cloud/rest/api-reference/oauth-grants/list-authorized-mcp-apps) | List authorized MCP apps |
| `/oauth/grants/{id}` | [DELETE](/docs/cloud/rest/api-reference/oauth-grants/revoke-an-authorized-mcp-app) | Revoke an authorized MCP app |

[Back to REST API reference](/docs/cloud/rest)


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.