Skip to main content
The Grantex Auth Service exposes a REST API covering agent registration, authorization flows, token management, audit logging, policy enforcement, anomaly detection, compliance exports, SCIM provisioning, SSO, and billing.

​
Base URLs

EnvironmentURL
Productionhttps://grantex-auth-dd4mtrt2gq-uc.a.run.app
Localhttp://localhost:3001

​
Authentication

Most endpoints require a Bearer token in the Authorization header. This is your developer API key, obtained via POST /v1/signup. 
curl -H "Authorization: Bearer YOUR_API_KEY" \
  https://grantex-auth-dd4mtrt2gq-uc.a.run.app/v1/agents
SCIM 2.0 user endpoints use a separate SCIM Bearer token, created via POST /v1/scim/tokens. Public endpoints (health, JWKS, consent UI, SSO flow) require no authentication.

​
Rate Limits

EndpointLimit
Global default100 requests/minute
POST /v1/authorize10 requests/minute
POST /v1/token20 requests/minute
POST /v1/token/refresh20 requests/minute
GET /.well-known/jwks.jsonNot rate-limited

​
OpenAPI Spec

The full OpenAPI 3.1 specification is available at openapi.yaml. You can import it into Swagger Editor, Postman, or any OpenAPI-compatible tool.