Logto · Capability

Logto API references

API references for Logto services. Note: The documentation is for Logto Cloud. If you are using Logto OSS, please refer to the response of `/api/swagger.json` endpoint on your Logto instance.

Run with Naftiko LogtoAPI

What You Can Do

GET
Listapplications — Get applications
/api/applications
POST
Createapplication — Create an application
/api/applications
GET
Getapplication — Get application
/api/applications/{id}
PATCH
Updateapplication — Update application
/api/applications/{id}
DELETE
Deleteapplication — Delete application
/api/applications/{id}
PATCH
Updateapplicationcustomdata — Update application custom data
/api/applications/{applicationId}/custom-data
GET
Listapplicationroles — Get application API resource roles
/api/applications/{applicationId}/roles
POST
Assignapplicationroles — Assign API resource roles to application
/api/applications/{applicationId}/roles
PUT
Replaceapplicationroles — Update API resource roles for application
/api/applications/{applicationId}/roles
DELETE
Deleteapplicationrole — Remove a API resource role from application
/api/applications/{applicationId}/roles/{roleId}
GET
Listapplicationprotectedappmetadatacustomdomains — Get application custom domains.
/api/applications/{id}/protected-app-metadata/custom-domains
POST
Createapplicationprotectedappmetadatacustomdomai — Add a custom domain to the application.
/api/applications/{id}/protected-app-metadata/custom-domains
DELETE
Deleteapplicationprotectedappmetadatacustomdomai — Remove custom domain.
/api/applications/{id}/protected-app-metadata/custom-domains/{domain}
GET
Listapplicationorganizations — Get application organizations
/api/applications/{id}/organizations
DELETE
Deleteapplicationlegacysecret — Delete application legacy secret
/api/applications/{id}/legacy-secret
GET
Listapplicationsecrets — Get application secrets
/api/applications/{id}/secrets
POST
Createapplicationsecret — Add application secret
/api/applications/{id}/secrets
DELETE
Deleteapplicationsecret — Delete application secret
/api/applications/{id}/secrets/{name}
PATCH
Updateapplicationsecret — Update application secret
/api/applications/{id}/secrets/{name}
POST
Createapplicationuserconsentscope — Assign user consent scopes to application.
/api/applications/{applicationId}/user-consent-scopes
GET
Listapplicationuserconsentscopes — List all the user consent scopes of an application.
/api/applications/{applicationId}/user-consent-scopes
DELETE
Deleteapplicationuserconsentscope — Remove user consent scope from application.
/api/applications/{applicationId}/user-consent-scopes/{scopeType}/{scopeId}
PUT
Replaceapplicationsigninexperience — Update application level sign-in experience
/api/applications/{applicationId}/sign-in-experience
GET
Getapplicationsigninexperience — Get the application level sign-in experience
/api/applications/{applicationId}/sign-in-experience
GET
Listapplicationuserconsentorganizations — List all the user consented organizations of a application.
/api/applications/{id}/users/{userId}/consent-organizations
PUT
Replaceapplicationuserconsentorganizations — Grant a list of organization access of a user for a application.
/api/applications/{id}/users/{userId}/consent-organizations
POST
Createapplicationuserconsentorganization — Grant a list of organization access of a user for a application.
/api/applications/{id}/users/{userId}/consent-organizations
DELETE
Deleteapplicationuserconsentorganization — Revoke a user's access to an organization for a application.
/api/applications/{id}/users/{userId}/consent-organizations/{organizationId}
GET
Getadminconsoleconfig — Get admin console config
/api/configs/admin-console
PATCH
Updateadminconsoleconfig — Update admin console config
/api/configs/admin-console
GET
Getoidcsessionconfig — Get OIDC session config
/api/configs/oidc/session
PATCH
Updateoidcsessionconfig — Update OIDC session config
/api/configs/oidc/session
GET
Getoidckeys — Get OIDC keys
/api/configs/oidc/{keyType}
DELETE
Deleteoidckey — Delete OIDC key
/api/configs/oidc/{keyType}/{keyId}
POST
Rotateoidckeys — Rotate OIDC keys
/api/configs/oidc/{keyType}/rotate
PUT
Upsertjwtcustomizer — Create or update JWT customizer
/api/configs/jwt-customizer/{tokenTypePath}
PATCH
Updatejwtcustomizer — Update JWT customizer
/api/configs/jwt-customizer/{tokenTypePath}
GET
Getjwtcustomizer — Get JWT customizer
/api/configs/jwt-customizer/{tokenTypePath}
DELETE
Deletejwtcustomizer — Delete JWT customizer
/api/configs/jwt-customizer/{tokenTypePath}
GET
Listjwtcustomizers — Get all JWT customizers
/api/configs/jwt-customizer
POST
Testjwtcustomizer — Test JWT customizer
/api/configs/jwt-customizer/test
GET
Getidtokenconfig — Get ID token claims configuration
/api/configs/id-token
PUT
Upsertidtokenconfig — Upsert ID token claims configuration
/api/configs/id-token
POST
Createconnector — Create connector
/api/connectors
GET
Listconnectors — Get connectors
/api/connectors
GET
Getconnector — Get connector
/api/connectors/{id}
PATCH
Updateconnector — Update connector
/api/connectors/{id}
DELETE
Deleteconnector — Delete connector
/api/connectors/{id}
POST
Createconnectortest — Test passwordless connector
/api/connectors/{factoryId}/test
POST
Createconnectorauthorizationuri — Get connector's authorization URI
/api/connectors/{connectorId}/authorization-uri
GET
Listconnectorfactories — Get connector factories
/api/connector-factories
GET
Getconnectorfactory — Get connector factory
/api/connector-factories/{id}
GET
Listresources — Get API resources
/api/resources
POST
Createresource — Create an API resource
/api/resources
GET
Getresource — Get API resource
/api/resources/{id}
PATCH
Updateresource — Update API resource
/api/resources/{id}
DELETE
Deleteresource — Delete API resource
/api/resources/{id}
PATCH
Updateresourceisdefault — Set API resource as default
/api/resources/{id}/is-default
GET
Listresourcescopes — Get API resource scopes
/api/resources/{resourceId}/scopes
POST
Createresourcescope — Create API resource scope
/api/resources/{resourceId}/scopes

MCP Tools

listapplications

Get applications

read-only idempotent
createapplication

Create an application

getapplication

Get application

read-only idempotent
updateapplication

Update application

deleteapplication

Delete application

idempotent
updateapplicationcustomdata

Update application custom data

listapplicationroles

Get application API resource roles

read-only idempotent
assignapplicationroles

Assign API resource roles to application

replaceapplicationroles

Update API resource roles for application

idempotent
deleteapplicationrole

Remove a API resource role from application

idempotent
listapplicationprotectedappmetadatacustomdomains

Get application custom domains.

read-only idempotent
createapplicationprotectedappmetadatacustomdomai

Add a custom domain to the application.

deleteapplicationprotectedappmetadatacustomdomai

Remove custom domain.

idempotent
listapplicationorganizations

Get application organizations

read-only idempotent
deleteapplicationlegacysecret

Delete application legacy secret

idempotent
listapplicationsecrets

Get application secrets

read-only idempotent
createapplicationsecret

Add application secret

deleteapplicationsecret

Delete application secret

idempotent
updateapplicationsecret

Update application secret

createapplicationuserconsentscope

Assign user consent scopes to application.

listapplicationuserconsentscopes

List all the user consent scopes of an application.

read-only idempotent
deleteapplicationuserconsentscope

Remove user consent scope from application.

idempotent
replaceapplicationsigninexperience

Update application level sign-in experience

idempotent
getapplicationsigninexperience

Get the application level sign-in experience

read-only idempotent
listapplicationuserconsentorganizations

List all the user consented organizations of a application.

read-only idempotent
replaceapplicationuserconsentorganizations

Grant a list of organization access of a user for a application.

idempotent
createapplicationuserconsentorganization

Grant a list of organization access of a user for a application.

deleteapplicationuserconsentorganization

Revoke a user's access to an organization for a application.

idempotent
getadminconsoleconfig

Get admin console config

read-only idempotent
updateadminconsoleconfig

Update admin console config

getoidcsessionconfig

Get OIDC session config

read-only idempotent
updateoidcsessionconfig

Update OIDC session config

getoidckeys

Get OIDC keys

read-only idempotent
deleteoidckey

Delete OIDC key

idempotent
rotateoidckeys

Rotate OIDC keys

upsertjwtcustomizer

Create or update JWT customizer

idempotent
updatejwtcustomizer

Update JWT customizer

getjwtcustomizer

Get JWT customizer

read-only idempotent
deletejwtcustomizer

Delete JWT customizer

idempotent
listjwtcustomizers

Get all JWT customizers

read-only idempotent
testjwtcustomizer

Test JWT customizer

getidtokenconfig

Get ID token claims configuration

read-only idempotent
upsertidtokenconfig

Upsert ID token claims configuration

idempotent
createconnector

Create connector

listconnectors

Get connectors

read-only idempotent
getconnector

Get connector

read-only idempotent
updateconnector

Update connector

deleteconnector

Delete connector

idempotent
createconnectortest

Test passwordless connector

createconnectorauthorizationuri

Get connector's authorization URI

listconnectorfactories

Get connector factories

read-only idempotent
getconnectorfactory

Get connector factory

read-only idempotent
listresources

Get API resources

read-only idempotent
createresource

Create an API resource

getresource

Get API resource

read-only idempotent
updateresource

Update API resource

deleteresource

Delete API resource

idempotent
updateresourceisdefault

Set API resource as default

listresourcescopes

Get API resource scopes

read-only idempotent
createresourcescope

Create API resource scope

Capability Spec

logto-capability.yaml Raw ↑
naftiko: 1.0.0-alpha2
info:
  label: Logto API references
  description: 'API references for Logto services. Note: The documentation is for Logto Cloud. If you are using Logto OSS,
    please refer to the response of `/api/swagger.json` endpoint on your Logto instance.'
  tags:
  - Logto
  - API
  created: '2026-05-06'
  modified: '2026-05-06'
capability:
  consumes:
  - type: http
    namespace: logto
    baseUri: https://[tenant_id].logto.app
    description: Logto API references HTTP API.
    authentication:
      type: bearer
      token: '{{LOGTO_TOKEN}}'
    resources:
    - name: api-applications
      path: /api/applications
      operations:
      - name: listapplications
        method: GET
        description: Get applications
        inputParameters:
        - name: types
          in: query
          type: string
          description: An array of application types to filter applications.
        - name: excludeRoleId
          in: query
          type: string
        - name: excludeOrganizationId
          in: query
          type: string
        - name: isThirdParty
          in: query
          type: string
        - name: page
          in: query
          type: integer
          description: Page number (starts from 1).
        - name: page_size
          in: query
          type: integer
          description: Entries per page.
        - name: search_params
          in: query
          type: object
          description: Search query parameters.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: createapplication
        method: POST
        description: Create an application
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: api-applications-id
      path: /api/applications/{id}
      operations:
      - name: getapplication
        method: GET
        description: Get application
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: updateapplication
        method: PATCH
        description: Update application
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: deleteapplication
        method: DELETE
        description: Delete application
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: api-applications-applicationid-custom-data
      path: /api/applications/{applicationId}/custom-data
      operations:
      - name: updateapplicationcustomdata
        method: PATCH
        description: Update application custom data
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: api-applications-applicationid-roles
      path: /api/applications/{applicationId}/roles
      operations:
      - name: listapplicationroles
        method: GET
        description: Get application API resource roles
        inputParameters:
        - name: page
          in: query
          type: integer
          description: Page number (starts from 1).
        - name: page_size
          in: query
          type: integer
          description: Entries per page.
        - name: search_params
          in: query
          type: object
          description: Search query parameters.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: assignapplicationroles
        method: POST
        description: Assign API resource roles to application
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: replaceapplicationroles
        method: PUT
        description: Update API resource roles for application
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: api-applications-applicationid-roles-roleid
      path: /api/applications/{applicationId}/roles/{roleId}
      operations:
      - name: deleteapplicationrole
        method: DELETE
        description: Remove a API resource role from application
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: api-applications-id-protected-app-metadata-custo
      path: /api/applications/{id}/protected-app-metadata/custom-domains
      operations:
      - name: listapplicationprotectedappmetadatacustomdomains
        method: GET
        description: Get application custom domains.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: createapplicationprotectedappmetadatacustomdomai
        method: POST
        description: Add a custom domain to the application.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: api-applications-id-protected-app-metadata-custo
      path: /api/applications/{id}/protected-app-metadata/custom-domains/{domain}
      operations:
      - name: deleteapplicationprotectedappmetadatacustomdomai
        method: DELETE
        description: Remove custom domain.
        inputParameters:
        - name: domain
          in: path
          type: string
          required: true
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: api-applications-id-organizations
      path: /api/applications/{id}/organizations
      operations:
      - name: listapplicationorganizations
        method: GET
        description: Get application organizations
        inputParameters:
        - name: page
          in: query
          type: integer
          description: Page number (starts from 1).
        - name: page_size
          in: query
          type: integer
          description: Entries per page.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: api-applications-id-legacy-secret
      path: /api/applications/{id}/legacy-secret
      operations:
      - name: deleteapplicationlegacysecret
        method: DELETE
        description: Delete application legacy secret
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: api-applications-id-secrets
      path: /api/applications/{id}/secrets
      operations:
      - name: listapplicationsecrets
        method: GET
        description: Get application secrets
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: createapplicationsecret
        method: POST
        description: Add application secret
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: api-applications-id-secrets-name
      path: /api/applications/{id}/secrets/{name}
      operations:
      - name: deleteapplicationsecret
        method: DELETE
        description: Delete application secret
        inputParameters:
        - name: name
          in: path
          type: string
          required: true
          description: The name of the secret.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: updateapplicationsecret
        method: PATCH
        description: Update application secret
        inputParameters:
        - name: name
          in: path
          type: string
          required: true
          description: The name of the secret.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: api-applications-applicationid-user-consent-scop
      path: /api/applications/{applicationId}/user-consent-scopes
      operations:
      - name: createapplicationuserconsentscope
        method: POST
        description: Assign user consent scopes to application.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: listapplicationuserconsentscopes
        method: GET
        description: List all the user consent scopes of an application.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: api-applications-applicationid-user-consent-scop
      path: /api/applications/{applicationId}/user-consent-scopes/{scopeType}/{scopeId}
      operations:
      - name: deleteapplicationuserconsentscope
        method: DELETE
        description: Remove user consent scope from application.
        inputParameters:
        - name: scopeType
          in: path
          type: string
          required: true
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: api-applications-applicationid-sign-in-experienc
      path: /api/applications/{applicationId}/sign-in-experience
      operations:
      - name: replaceapplicationsigninexperience
        method: PUT
        description: Update application level sign-in experience
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: getapplicationsigninexperience
        method: GET
        description: Get the application level sign-in experience
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: api-applications-id-users-userid-consent-organiz
      path: /api/applications/{id}/users/{userId}/consent-organizations
      operations:
      - name: listapplicationuserconsentorganizations
        method: GET
        description: List all the user consented organizations of a application.
        inputParameters:
        - name: page
          in: query
          type: integer
          description: Page number (starts from 1).
        - name: page_size
          in: query
          type: integer
          description: Entries per page.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: replaceapplicationuserconsentorganizations
        method: PUT
        description: Grant a list of organization access of a user for a application.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: createapplicationuserconsentorganization
        method: POST
        description: Grant a list of organization access of a user for a application.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: api-applications-id-users-userid-consent-organiz
      path: /api/applications/{id}/users/{userId}/consent-organizations/{organizationId}
      operations:
      - name: deleteapplicationuserconsentorganization
        method: DELETE
        description: Revoke a user's access to an organization for a application.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: api-configs-admin-console
      path: /api/configs/admin-console
      operations:
      - name: getadminconsoleconfig
        method: GET
        description: Get admin console config
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: updateadminconsoleconfig
        method: PATCH
        description: Update admin console config
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: api-configs-oidc-session
      path: /api/configs/oidc/session
      operations:
      - name: getoidcsessionconfig
        method: GET
        description: Get OIDC session config
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: updateoidcsessionconfig
        method: PATCH
        description: Update OIDC session config
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: api-configs-oidc-keytype
      path: /api/configs/oidc/{keyType}
      operations:
      - name: getoidckeys
        method: GET
        description: Get OIDC keys
        inputParameters:
        - name: keyType
          in: path
          type: string
          required: true
          description: Private keys are used to sign OIDC JWTs. Cookie keys are used to sign OIDC cookies. For clients, they
            do not need to know private keys to verify OIDC JWTs; they
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: api-configs-oidc-keytype-keyid
      path: /api/configs/oidc/{keyType}/{keyId}
      operations:
      - name: deleteoidckey
        method: DELETE
        description: Delete OIDC key
        inputParameters:
        - name: keyType
          in: path
          type: string
          required: true
          description: Private keys are used to sign OIDC JWTs. Cookie keys are used to sign OIDC cookies. For clients, they
            do not need to know private keys to verify OIDC JWTs; they
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: api-configs-oidc-keytype-rotate
      path: /api/configs/oidc/{keyType}/rotate
      operations:
      - name: rotateoidckeys
        method: POST
        description: Rotate OIDC keys
        inputParameters:
        - name: keyType
          in: path
          type: string
          required: true
          description: Private keys are used to sign OIDC JWTs. Cookie keys are used to sign OIDC cookies. For clients, they
            do not need to know private keys to verify OIDC JWTs; they
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: api-configs-jwt-customizer-tokentypepath
      path: /api/configs/jwt-customizer/{tokenTypePath}
      operations:
      - name: upsertjwtcustomizer
        method: PUT
        description: Create or update JWT customizer
        inputParameters:
        - name: tokenTypePath
          in: path
          type: string
          required: true
          description: The token type to create a JWT customizer for.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: updatejwtcustomizer
        method: PATCH
        description: Update JWT customizer
        inputParameters:
        - name: tokenTypePath
          in: path
          type: string
          required: true
          description: The token type to update a JWT customizer for.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: getjwtcustomizer
        method: GET
        description: Get JWT customizer
        inputParameters:
        - name: tokenTypePath
          in: path
          type: string
          required: true
          description: The token type to get the JWT customizer for.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: deletejwtcustomizer
        method: DELETE
        description: Delete JWT customizer
        inputParameters:
        - name: tokenTypePath
          in: path
          type: string
          required: true
          description: The token type path to delete the JWT customizer for.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: api-configs-jwt-customizer
      path: /api/configs/jwt-customizer
      operations:
      - name: listjwtcustomizers
        method: GET
        description: Get all JWT customizers
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: api-configs-jwt-customizer-test
      path: /api/configs/jwt-customizer/test
      operations:
      - name: testjwtcustomizer
        method: POST
        description: Test JWT customizer
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: api-configs-id-token
      path: /api/configs/id-token
      operations:
      - name: getidtokenconfig
        method: GET
        description: Get ID token claims configuration
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: upsertidtokenconfig
        method: PUT
        description: Upsert ID token claims configuration
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: api-connectors
      path: /api/connectors
      operations:
      - name: createconnector
        method: POST
        description: Create connector
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: listconnectors
        method: GET
        description: Get connectors
        inputParameters:
        - name: target
          in: query
          type: string
          description: Filter connectors by target.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: api-connectors-id
      path: /api/connectors/{id}
      operations:
      - name: getconnector
        method: GET
        description: Get connector
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: updateconnector
        method: PATCH
        description: Update connector
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: deleteconnector
        method: DELETE
        description: Delete connector
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: api-connectors-factoryid-test
      path: /api/connectors/{factoryId}/test
      operations:
      - name: createconnectortest
        method: POST
        description: Test passwordless connector
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: api-connectors-connectorid-authorization-uri
      path: /api/connectors/{connectorId}/authorization-uri
      operations:
      - name: createconnectorauthorizationuri
        method: POST
        description: Get connector's authorization URI
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: api-connector-factories
      path: /api/connector-factories
      operations:
      - name: listconnectorfactories
        method: GET
        description: Get connector factories
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: api-connector-factories-id
      path: /api/connector-factories/{id}
      operations:
      - name: getconnectorfactory
        method: GET
        description: Get connector factory
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: api-resources
      path: /api/resources
      operations:
      - name: listresources
        method: GET
        description: Get API resources
        inputParameters:
        - name: includeScopes
          in: query
          type: string
          description: If it's provided with a truthy value (`true`, `1`, `yes`), the scopes of each resource will be included
            in the response.
        - name: page
          in: query
          type: integer
          description: Page number (starts from 1).
        - name: page_size
          in: query
          type: integer
          description: Entries per page.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: createresource
        method: POST
        description: Create an API resource
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: api-resources-id
      path: /api/resources/{id}
      operations:
      - name: getresource
        method: GET
        description: Get API resource
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: updateresource
        method: PATCH
        description: Update API resource
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: deleteresource
        method: DELETE
        description: Delete API resource
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: api-resources-id-is-default
      path: /api/resources/{id}/is-default
      operations:
      - name: updateresourceisdefault
        method: PATCH
        description: Set API resource as default
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: api-resources-resourceid-scopes
      path: /api/resources/{resourceId}/scopes
      operations:
      - name: listresourcescopes
        method: GET
        description: Get API resource scopes
        inputParameters:
        - name: page
          in: query
          type: integer
          description: Page number (starts from 1).
        - name: page_size
          in: query
          type: integer
          description: Entries per page.
        - name: search_params
          in: query
          type: object
          description: Search query parameters.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: createresourcescope
        method: POST
        description: Create API resource scope
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
  exposes:
  - type: rest
    port: 8080
    namespace: logto-rest
    description: REST adapter for Logto API references.
    resources:
    - path: /api/applications
      name: listapplications
      operations:
      - method: GET
        name: listapplications
        description: Get applications
        call: logto.listapplications
        outputParameters:
        - type: object
          mapping: $.
    - path: /api/applications
      name: createapplication
      operations:
      - method: POST
        name: createapplication
        description: Create an application
        call: logto.createapplication
        outputParameters:
        - type: object
          mapping: $.
    - path: /api/applications/{id}
      name: getapplication
      operations:
      - method: GET
        name: getapplication
        description: Get application
        call: logto.getapplication
        outputParameters:
        - type: object
          mapping: $.
    - path: /api/applications/{id}
      name: updateapplication
      operations:
      - method: PATCH
        name: updateapplication
        description: Update application
        call: logto.updateapplication
        outputParameters:
        - type: object
          mapping: $.
    - path: /api/applications/{id}
      name: deleteapplication
      operations:
      - method: DELETE
        name: deleteapplication
        description: Delete application
        call: logto.deleteapplication
        outputParameters:
        - type: object
          mapping: $.
    - path: /api/applications/{applicationId}/custom-data
      name: updateapplicationcustomdata
      operations:
      - method: PATCH
        name: updateapplicationcustomdata
        description: Update application custom data
        call: logto.updateapplicationcustomdata
        outputParameters:
        - type: object
          mapping: $.
    - path: /api/applications/{applicationId}/roles
      name: listapplicationroles
      operations:
      - method: GET
        name: listapplicationroles
        description: Get application API resource roles
        call: logto.listapplicationroles
        outputParameters:
        - type: object
          mapping: $.
    - path: /api/applications/{applicationId}/roles
      name: assignapplicationroles
      operations:
      - method: POST
        name: assignapplicationroles
        description: Assign API resource roles to application
        call: logto.assignapplicationroles
        outputParameters:
        - type: object
          mapping: $.
    - path: /api/applications/{applicationId}/roles
      name: replaceapplicationroles
      operations:
      - method: PUT
        name: replaceapplicationroles
        description: Update API resource roles for application
        call: logto.replaceapplicationroles
        outputParameters:
        - type: object
          mapping: $.
    - path: /api/applications/{applicationId}/roles/{roleId}
      name: deleteapplicationrole
      operations:
      - method: DELETE
        name: deleteapplicationrole
        description: Remove a API resource role from application
        call: logto.deleteapplicationrole
        outputParameters:
        - type: object
          mapping: $.
    - path: /api/applications/{id}/protected-app-metadata/custom-domains
      name: listapplicationprotectedappmetadatacustomdomains
      operations:
      - method: GET
        name: listapplicationprotectedappmetadatacustomdomains
        description: Get application custom domains.
        call: logto.listapplicationprotectedappmetadatacustomdomains
        outputParameters:
        - type: object
          mapping: $.
    - path: /api/applications/{id}/protected-app-metadata/custom-domains
      name: createapplicationprotectedappmetadatacustomdomai
      operations:
      - method: POST
        name: createapplicationprotectedappmetadatacustomdomai
        description: Add a custom domain to the application.
        call: logto.createapplicationprotectedappmetadatacustomdomai
        outputParameters:
        - type: object
          mapping: $.
    - path: /api/applications/{id}/protected-app-metadata/custom-domains/{domain}
      name: deleteapplicationprotectedappmetadatacustomdomai
      operations:
      - method: DELETE
        name: deleteapplicationprotectedappmetadatacustomdomai
        description: Remove custom domain.
        call: logto.deleteapplicationprotectedappmetadatacustomdomai
        with:
          domain: rest.domain
        outputParameters:
        - type: object
          mapping: $.
    - path: /api/applications/{id}/organizations
      name: listapplicationorganizations
      operations:
      - method: GET
        name: listapplicationorganizations
        description: Get application organizations
        call: logto.listapplicationorganizations
        outputParameters:
        - type: object
          mapping: $.
    - path: /api/applications/{id}/legacy-secret
      name: deleteapplicationlegacysecret
      operations:
      - method: DELETE
        name: deleteapplicationlegacysecret
        description: Delete application legacy secret
        call: logto.deleteapplicationlegacysecret
        outputParameters:
        - type: object
          mapping: $.
    - path: /api/applications/{id}/secrets
      name: listapplicationsecrets
      operations:
      - method: GET
        name: listapplicationsecrets
        description: Get application secrets
        call: logto.listapplicationsecrets
        outputParameters:
        - type: object
          mapping: $.
    - path: /api/applications/{id}/secrets
      name: createapplicationsecret
      operations:
      - method: POST
        name: createapplicationsecret
        description: Add application secret
        call: logto.createapplicationsecret
        outputParameters:
        - type: object
          mapping: $.
    - path: /api/applications/{id}/secrets/{name}
      name: deleteapplicationsecret
      operations:
      - method: DELETE
        name: deleteapplicationsecret
        description: Delete application secret
        call: logto.deleteapplicationsecret
        with:
          name: rest.name
        outputParameters:
        - type: object
          mapping: $.
    - path: /api/applications/{id}/secrets/{name}
      name: updateapplicationsecret
      operations:
      - method: PATCH
        name: updateapplicationsecret
        description: Update application secret
        call: logto.updateapplicationsecret
        with:
          name: rest.name
        outputParameters:
        - type: object
          mapping: $.
    - path: /api/applications/{applicationId}/user-consent-scopes
      name: createapplicationuserconsentscope
      operations:
      - method: POST
        name: createapplicationuserconsentscope
        description: Assign user consent scopes to application.
        call: logto.createapplicationuserconsentscope
        outputParameters:
        - type: object
          mapping: $.
    - path: /api/applications/{applicationId}/user-consent-scopes
      name: listapplicationuserconsentscopes
      operations:
      - method: GET
        name: listapplicationuserconsentscopes
        description: List all the user consent scopes of an application.
        call: logto.listapplicationuserconsentscopes
        outputParameters:
        - type: object
          mapping: $.
    - path: /api/applications/{applicationId}/user-consent-scopes/{scopeType}/{scopeId}
      name: deleteapplicationuserconsentscope
      operations:
      - method: DELETE
        name: deleteapplicationuserconsentscope
        description: Remove user consent scope from application.
        call: logto.deleteapplicationuserconsentscope
        with:
          scopeType: rest.scopeType
        outputParameters:
        - type: object
          mapping: $.
    - path: /api/applications/{applicationId}/sign-in-experience
      name: replaceapplicationsigninexperience
      operations:
      - method: PUT
        name: replaceapplicationsigninexperience
        description: Update application level sign-in experience
        call: logto.replaceapplicationsigninexperience
        outputParameters:
        - type: object
          mapping: $.
    - path: /api/applications/{applicationId}/sign-in-experience
      name: getapplicationsigninexperience
      operations:
      - method: GET
        name: getapplicationsigninexperience
        description: Get the application level sign-in experience
        call: logto.getapplicationsigninexperience
        outputParameters:
        - type: object
          mapping: $.
    - path: /api/applications/{id}/users/{userId}/consent-organizations
      name: listapplicationuserconsentorganizations
      operations:
      - method: GET
        name: listapplicationuserconsentorganizations
        description: List all the user consented organizations of a application.
        call: logto.listapplicationuserconsentorganizations
        outputParameters:
        - type: object
          mapping: $.
    - path: /api/applications/{id}/users/{userId}/consent-organizations
      name: replaceapplicationuserconsentorganizations
      operations:
      - method: PUT
        name: replaceapplicationuserconsentorganizations
        description: Grant a list of organization access of a user for a application.
        call: logto.replaceapplicationuserconsentorganizations
        outputParameters:
        - type: object
         

# --- truncated at 32 KB (64 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/logto/refs/heads/main/capabilities/logto-capability.yaml