The Grantex Auth Service exposes a REST API covering agent registration, authorization flows, token management, audit logging, policy enforcement, anomaly detection, compliance exports, SCIM provisioning, SSO, billing, FIDO2/WebAuthn passkey management, W3C Verifiable Credentials, and DID infrastructure.Documentation Index
Fetch the complete documentation index at: https://docs.grantex.dev/llms.txt
Use this file to discover all available pages before exploring further.
Base URLs
| Environment | URL |
|---|---|
| Production | https://grantex-auth-dd4mtrt2gq-uc.a.run.app |
| Local | http://localhost:3001 |
Authentication
Most endpoints require a Bearer token in theAuthorization header. This is your developer API key, obtained via POST /v1/signup.
POST /v1/scim/tokens.
Public endpoints (health, JWKS, consent UI, SSO flow) require no authentication.
Rate Limits
| Endpoint | Limit |
|---|---|
| Global default | 100 requests/minute |
POST /v1/authorize | 10 requests/minute |
POST /v1/token | 20 requests/minute |
POST /v1/token/refresh | 20 requests/minute |
GET /.well-known/jwks.json | Not rate-limited |
OpenAPI Spec
The full OpenAPI 3.1 specification is available atopenapi.yaml. You can import it into Swagger Editor, Postman, or any OpenAPI-compatible tool.