Region
Identity & platform
Sign-in, provisioning, billing and the platform itself
71 operations
oauth
10 operationsSign-in for AI apps: authorization, consent and connected apps
- GET/.well-known/oauth-authorization-server/oauthMetadata for this deployment's OAuth authorization server
- GET/.well-known/oauth-protected-resource/mcpWhich authorization server protects the MCP service, and what it can grant
- POST/oauth/authorizationsOpen a consent request from the consent page, for the signed-in person
- GET/oauth/authorizations/{authorization_id}A consent request waiting for the signed-in person's answer
- POST/oauth/authorizations/{authorization_id}/approveAllow an app the scopes the person chose, and send the browser back to it
- POST/oauth/authorizations/{authorization_id}/denyRefuse to connect an app, and send the browser back to it
- GET/oauth/authorizeStart connecting an app: checks the request and sends the browser to the consent page
- POST/oauth/tokenExchange an authorization code, or a refresh token, for an access token
- GET/user/oauth-grantsThe apps the authenticated user has connected through sign-in
- DEL/user/oauth-grants/{oauth_grant_id}Disconnect an app: its access ends at once
oidc
2 operationsPublic OIDC issuer (discovery + JWKS) for workload-identity federation
sso
12 operationsSingle sign-on: an organization's identity provider, domains and invites
- GET/auth/sso/resolveRoute an email address to its organization's single sign-on.
- GET/groups/{group_id}/sso-connectionRead the organization's single sign-on connection.
- PUT/groups/{group_id}/sso-connectionCreate or replace the organization's single sign-on connection.
- DEL/groups/{group_id}/sso-connectionDisable the organization's single sign-on.
- POST/groups/{group_id}/sso-connection/testCheck the organization's single sign-on connection without changing it.
- GET/groups/{group_id}/sso-domainsList the organization's claimed domains and their verification status.
- POST/groups/{group_id}/sso-domainsClaim an email domain for the organization and obtain a DNS TXT verification challenge.
- DEL/groups/{group_id}/sso-domains/{domain}Release a claimed domain.
- POST/groups/{group_id}/sso-domains/{domain}/verifyCheck the domain's DNS TXT record and mark the domain verified.
- GET/groups/{group_id}/sso-invitesList the organization's pending single sign-on invites.
- POST/groups/{group_id}/sso-invitesInvite an email address to join the organization at its next single sign-on.
- DEL/groups/{group_id}/sso-invites/{email}Revoke a pending single sign-on invite.
scim
18 operationsSCIM 2.0 provisioning: an organization's identity provider pushes its people and groups
- GET/groups/{group_id}/scim-tokensThe organization's SCIM tokens, live and revoked.
- POST/groups/{group_id}/scim-tokensMint a token for the organization's identity provider to provision with.
- DEL/groups/{group_id}/scim-tokens/{scim_token_id}Revoke a SCIM token.
- GET/scim/v2/organizations/{group_id}/GroupsThe teams the identity provider keeps, or the one a `displayName eq` filter names.
- POST/scim/v2/organizations/{group_id}/GroupsCreate a team the identity provider keeps.
- GET/scim/v2/organizations/{group_id}/Groups/{team_id}One team the identity provider keeps.
- PUT/scim/v2/organizations/{group_id}/Groups/{team_id}Replace a group's name and members.
- PATCH/scim/v2/organizations/{group_id}/Groups/{team_id}Add or remove members, or rename a group.
- DEL/scim/v2/organizations/{group_id}/Groups/{team_id}Delete a team the identity provider keeps, with every grant it held.
- GET/scim/v2/organizations/{group_id}/ResourceTypesThe resource types this SCIM endpoint serves.
- GET/scim/v2/organizations/{group_id}/SchemasThe attributes this SCIM endpoint reads and writes.
- GET/scim/v2/organizations/{group_id}/ServiceProviderConfigWhat this SCIM endpoint supports.
- GET/scim/v2/organizations/{group_id}/UsersThe people the identity provider has pushed, or the one a `userName eq` filter names.
- POST/scim/v2/organizations/{group_id}/UsersProvision a person.
- GET/scim/v2/organizations/{group_id}/Users/{scim_user_id}One person the identity provider pushed.
- PUT/scim/v2/organizations/{group_id}/Users/{scim_user_id}Replace a person's attributes; `active: false` de-provisions them.
- PATCH/scim/v2/organizations/{group_id}/Users/{scim_user_id}Change some of a person's attributes; `active: false` de-provisions them.
- DEL/scim/v2/organizations/{group_id}/Users/{scim_user_id}De-provision a person and forget them.
client-config
1 operationPublic client configuration: how the CLI and git remote helper reach this deployment
billing
14 operationsPlans, subscriptions, invoices, balances and limit increases
- GET/admin/limit-increase-requestsReview queue: limit-increase requests across all namespaces (platform admin)
- POST/admin/limit-increase-requests/{request_id}/approveApprove a limit-increase request and apply the override (platform admin)
- POST/admin/limit-increase-requests/{request_id}/denyDeny a limit-increase request (platform admin)
- POST/admin/namespaces/{root_group_id}/billing/balance/adjustmentsAdjust a namespace's prepaid balance (platform admin)
- PUT/admin/namespaces/{root_group_id}/limit-overridesSet or clear a namespace's limit overrides directly (platform admin)
- POST/billing/stripe/webhookReceive an event from Stripe
- GET/groups/{group_id}/billing/balanceA namespace's prepaid balance.
- POST/groups/{group_id}/billing/checkout-sessionStart a Stripe Checkout Session to subscribe the namespace to a paid tier
- GET/groups/{group_id}/billing/invoicesList the namespace's invoices, newest first
- POST/groups/{group_id}/billing/portal-sessionOpen the Stripe Billing Portal for the namespace's customer
- GET/groups/{group_id}/billing/subscriptionRead the namespace's subscription (tier, status, period)
- GET/groups/{group_id}/billing/usage/entriesA namespace's usage ledger, newest first.
- POST/groups/{group_id}/limit-increaseFile a request to raise one namespace limit
- GET/groups/{group_id}/limit-increase-requestsList the namespace's own limit-increase requests
onboarding
2 operationsYour getting-started checklist
templates
2 operationsFile templates: licences, .gitignore files and starter files
feedback
3 operationsFeedback about the platform, from people and from AI agents
- GET/admin/feedbackThe feedback people and agents have sent, newest first (platform admin)
- GET/admin/feedback/{feedback_id}One report (platform admin) — what the support desk's notice of a bug links to
- POST/feedbackSend feedback about Gitmoap itself: a bug, a missing capability, a confusing result, an unhelpful error
contact
1 operationWrite to a person at Gitmoap — support, privacy, legal notices, reports and security
legal
6 operationsThe Terms of Service and the other legal documents, every version published, Gitmoap's means of contact, and accepting the Terms
- GET/legalThe legal documents, the version of each in force and the one coming, and Gitmoap's means of contact
- GET/legal/{document_key}The version of a legal document in force today, with its text and every version published
- GET/legal/{document_key}/versions/{version}One published version of a legal document, exactly as it was published
- GET/user/legal-acceptancesThe versions of the legal documents you have accepted, newest first
- PUT/user/legal-acceptances/{document_key}/versions/{version}Accept a legal document at the version you were shown
- GET/user/legal-acceptances/pendingThe legal documents you have yet to accept