Auth0
API integration

list_all_auth_0_users

List or search Auth0 users with optional Lucene query syntax filtering. Returns: created_at. Max 100 per page; can only page through the first 1000 records.

get_single_auth_0_user_by_id

Get a single Auth0 user by id. Returns: user_id, email, email_verified, username, phone_number, phone_verified, created_at, updated_at, identities, app_metadata, user_metadata, picture, name, nickname, multifactor, multifactor_last_modified, last_ip, last_login, last_password_reset, logins_count, blocked, given_name, family_name. Required: id.

delete_a_auth_0_user_by_id

Delete an Auth0 user by id. This action cannot be undone. Returns an empty 204 response on success. Required: id.

auth_0_users_attach_permission

Assign permissions to an Auth0 user by user id. Returns a 201 response with no body on success. Required: user_id, permissions.

auth_0_users_bulk_delete

Remove permissions from an Auth0 user by user id. Returns an empty 204 response on success. Required: user_id, permissions.

create_a_auth_0_user

Create a new Auth0 user for a database or passwordless connection. Returns: user_id, email, email_verified, username, phone_number, phone_verified, created_at, updated_at, identities, app_metadata, user_metadata, picture, name, nickname, multifactor, multifactor_last_modified, last_ip, last_login, last_password_reset, logins_count, blocked, given_name, family_name. Required: connection.

auth_0_users_list_logs

List log events for a specific Auth0 user. Returns: type. Required: user_id. Max 100 logs per request; up to 1,000 results paginated.

auth_0_users_list_permissions

List permissions assigned directly to an Auth0 user from direct assignments and directly assigned roles. Returns each permission with permission_name, description, resource_server_identifier, and resource_server_name. Required: user_id.

update_a_auth_0_user_by_id

Update an Auth0 user by id. Returns the updated user's user_metadata and app_metadata. Required: id. Metadata fields are merged at the first level; all other updatable fields are replaced. Attributes can be unset by passing null.

list_all_auth_0_roles

List user roles created in an Auth0 tenant. Returns: id, name, description, type. The list excludes standard tenant roles such as Admin or Support Access. owner_id is required when type is "organization".

get_single_auth_0_role_by_id

Get a single Auth0 user role by id. Returns: id, name, description, type, owner_id. Required: id.

auth_0_roles_attach_permission

Associate one or more permissions with an Auth0 role by providing the resource server identifier and permission name for each permission. Returns an empty 201 response on success. Required: role_id, permissions.

auth_0_roles_bulk_delete

Remove one or more permissions from an Auth0 role by providing the resource server identifier and permission name for each permission. Returns an empty 200 response on success. Required: role_id, permissions.

create_a_auth_0_role

Create a new user role for Role-Based Access Control in Auth0. Returns: id, name, description, type, owner_id. Required: name. New roles are not associated with any permissions by default.

delete_a_auth_0_role_by_id

Delete a specific Auth0 user role by id. Once deleted, the role is removed from any user who was previously assigned that role; this action cannot be undone. Returns an empty 200 response on success. Required: id.

auth_0_roles_list_permissions

List permissions granted by a specific Auth0 role. Returns: description. Required: role_id.

update_a_auth_0_role_by_id

Update an Auth0 user role by id, modifying its name and description. Returns the updated role object including id, name, and description. Required: id.

list_all_auth_0_organizations

List all Auth0 organizations in your tenant. Returns: id, name, created_at, updated_at. Checkpoint pagination is required for retrieving more than 1000 organizations. Max 100 per page.

get_single_auth_0_organization_by_id

Get a single Auth0 organization by id. Returns: id, name, display_name, branding, metadata, token_quota, third_party_client_access, is_app_entitlement_active, client, created_at. Required: id.

auth_0_organizations_attach_member

Add one or more existing users as members of an Auth0 organization. Users must already exist in the tenant before they can be attached. Returns an empty 204 response on success. Required: organization_id, members.

auth_0_organizations_bulk_delete

Remove one or more members from an Auth0 organization by supplying their user IDs. Returns an empty 204 response on success. Required: organization_id, members.

create_a_auth_0_organization

Create a new Organization in Auth0. Returns: id, name, display_name, branding, metadata, token_quota, third_party_client_access, is_app_entitlement_active, client, enabled_connections, created_at. Required: name. Organization names must be unique within the tenant.

delete_a_auth_0_organization_by_id

Delete an Auth0 organization by id. Members are automatically disassociated from the organization but are not deleted from the tenant. This action cannot be undone. Returns an empty 204 response on success. Required: id.

update_a_auth_0_organization_by_id

Update an Auth0 organization's details such as name, display name, branding options, and metadata. Returns: id, name, display_name, branding, metadata, token_quota, third_party_client_access, is_app_entitlement_active, client, created_at. Required: id.

list_all_auth_0_user_roles

List all roles directly assigned to a user in Auth0. Returns: id, aud, scopes, iat, jti. Required: user_id. Returns only direct role assignments; for group-based assignments use the effective-roles endpoint.

list_all_auth_0_user_organizations

List Auth0 organizations that a specific user is a member of. Returns: id, aud, scopes, iat, jti. Required: user_id.

list_all_auth_0_organization_members

List members who belong to an Auth0 organization. Returns: user_id, roles. Required: organization_id. Checkpoint pagination is required for organizations with more than 1000 members; the endpoint is subject to eventual consistency.

list_all_auth_0_device_credentials

List device credentials in Auth0, optionally filtered by user, client, or credential type. Returns: id, type, user_id, client_id. The type filter accepts public_key, refresh_token, or rotating_refresh_token, and defaults to refresh_token when paging is requested.

create_a_auth_0_action_deploy

Deploy an Auth0 action to create a new immutable version. If the action is bound to a trigger, the new version executes immediately. Returns: id, action_id, code, dependencies, deployed, runtime, secrets, status, number, errors, action, built_at, created_at, updated_at, supported_triggers, modules, attributes. Required: action_id.

create_a_auth_0_action_test

Test an Auth0 action before deployment by supplying a payload to verify it behaves as expected. Returns a 200 response confirming the test action version was successfully created. Required: action_id.

get_single_auth_0_action_version_by_id

Get a specific immutable version of an Auth0 action by id. An action version is created whenever an action is deployed and cannot be modified once created. Returns: id, action_id, code, dependencies, deployed, runtime, secrets, status, number, errors, action, built_at, created_at, updated_at, supported_triggers, modules. Required: action_id, id.

list_all_auth_0_action_versions

List all versions of an Auth0 action. Each version is created whenever an action is deployed and is immutable once created. Returns: total, page, per_page, versions. Required: action_id.

auth_0_actions_actions

List Auth0 actions with optional filtering by trigger type, action name, deployment state, and installation source. Returns: total, page, per_page, actions.

create_a_auth_0_action

Create a new Auth0 action. The action must be deployed and bound to a trigger before it will be executed as part of a flow. Returns: id, name, supported_triggers, all_changes_deployed, created_at, updated_at, code, dependencies, runtime, secrets, deployed_version, installed_integration_id, integration, status, built_at, deploy, modules, configuration. Required: name, supported_triggers.

delete_a_auth_0_action_by_id

Delete an Auth0 action by id. The action must be unbound from all triggers before it can be deleted, unless the force parameter detaches bindings automatically. Returns an empty 204 response on success. Required: id.

get_single_auth_0_action_by_id

Get an action. Returns: id, name, supported_triggers, all_changes_deployed, created_at, updated_at, code, dependencies. Required: id.

auth_0_actions_modules

List all Auth0 Actions Modules. Returns: modules, total, page, per_page.

auth_0_actions_triggers

List Auth0 action triggers — the extensibility points to which actions can be bound. Returns: triggers.

update_a_auth_0_action_by_id

Update an existing Auth0 action by id. If the action is currently bound to a trigger, changes will not affect any user flows until the action is deployed. Returns: id, name, supported_triggers, all_changes_deployed, created_at, updated_at, code, dependencies, runtime, secrets, deployed_version, installed_integration_id, integration, status, built_at, deploy, modules, deployed. Required: id.

get_single_auth_0_actions_execution_by_id

Get a specific Auth0 action execution by id. Returns: id, trigger_id, status, results, created_at, updated_at. Required: id. Executions are only stored for 10 days after creation.

create_a_auth_0_actions_module

Create a new Actions Module in Auth0 for reusable code across actions. Returns: id, name, code, dependencies, secrets, actions_using_module_total, all_changes_published, latest_version_number, created_at, updated_at, latest_version, configuration. Required: name, code.

delete_a_auth_0_actions_module_by_id

Delete a specific Auth0 Actions Module by id. The deletion will fail if the module is still in use by any actions. Returns an empty 204 response on success. Required: id.

get_single_auth_0_actions_module_by_id

Get a specific Auth0 Actions Module by its unique identifier. Returns: id, name, code, dependencies, secrets, actions_using_module_total, all_changes_published, latest_version_number, created_at, updated_at, latest_version. Required: id.

update_a_auth_0_actions_module_by_id

Update properties of an existing Auth0 Actions Module, such as code, dependencies, or secrets. Returns: id, name, code, dependencies, secrets, actions_using_module_total, all_changes_published, latest_version_number, created_at, updated_at, latest_version. Required: id.

create_a_auth_0_agent

Create an agent in Auth0. Returns: agent_id, name, created_at, updated_at, external_agent_id, metadata, id.

delete_a_auth_0_agent_by_id

Delete an Auth0 agent by id. Returns an empty 204 response on success. Required: id.

get_single_auth_0_agent_by_id

Get a single Auth0 agent by id. Returns: agent_id, name, created_at, updated_at, external_agent_id, metadata, id. Required: id.

list_all_auth_0_agents

List agents in Auth0. Returns: agents, next. Max 100 per page.

update_a_auth_0_agent_by_id

Update an Auth0 agent by id. Returns: agent_id, name, created_at, updated_at, external_agent_id, metadata, id. Required: id.

auth_0_attack_protection_bot_detections_bulk_update

Update the Bot Detection configuration of your Auth0 tenant. Returns the updated bot detection settings object including its attributes (configuration fields defined in Auth0's OpenAPI schema).

list_all_auth_0_attack_protection_bot_detections

Get the Bot Detection configuration of your Auth0 tenant. Returns the bot detection settings object including its attributes (configuration fields defined in Auth0's OpenAPI schema).

attack_protection_breached_password_detections_bulk_update

Update the Breached Password Detection settings configuration for your Auth0 tenant. Returns the updated Breached Password Detection settings configuration object. The request body and response field-level details are defined in the Auth0 Management API OpenAPI schema but are not enumerated in the integration's crawled documentation.

list_all_auth_0_attack_protection_breached_password_detections

Get the Breached Password Detection settings configuration for your Auth0 tenant. Returns the Breached Password Detection settings configuration object. The response field-level details are defined in the Auth0 Management API OpenAPI schema but are not enumerated in the integration's crawled documentation.

auth_0_attack_protection_brute_force_protections_bulk_update

Update the Brute-force Protection configuration of your Auth0 tenant, including whether protection is enabled, which shields to trigger, the counting mode, max attempts, and IP allowlist. Returns: enabled, shields, allowlist, mode, max_attempts. All body fields are optional; only provided fields are updated.

list_all_auth_0_attack_protection_brute_force_protections

Get Brute-force settings. Returns: enabled, shields, allowlist, mode, max_attempts.

auth_0_attack_protection_captchas_bulk_update

Update the CAPTCHA configuration for your Auth0 tenant via partial PATCH. Only provided fields are updated. Returns the updated CAPTCHA configuration object with schema-specific fields defined in the upstream Auth0 API.

list_all_auth_0_attack_protection_captchas

Get the CAPTCHA attack protection configuration for an Auth0 tenant. Returns the CAPTCHA configuration object with schema-specific fields defined in the upstream Auth0 API.

auth_0_attack_protection_phone_provider_protections_bulk_update

Update the phone provider protection (exponential backoff) configuration for an Auth0 tenant. Returns: type.

list_all_auth_0_attack_protection_phone_provider_protections

Get the phone provider protection (exponential backoff) configuration for an Auth0 tenant. Returns: type.

auth_0_attack_protection_suspicious_ip_throttlings_bulk_update

Update Suspicious IP Throttling settings. Returns: enabled, shields, allowlist, stage.

list_all_auth_0_attack_protection_suspicious_ip_throttlings

Get Suspicious IP Throttling settings. Returns: enabled, shields, allowlist, stage.

delete_a_auth_0_blocks_ip_by_id

Remove a block imposed by Auth0 Suspicious IP Throttling for a given IP address. Returns an empty 204 response on success. Required: id (the IP address to unblock).

get_single_auth_0_blocks_ip_by_id

Check whether a specific IP address is currently blocked by Auth0 Suspicious IP Throttling. Returns a 200 status if the IP is blocked, or 404 if not currently blocked. Required: id (the IP address to check).

auth_0_brandings_bulk_update

Update Auth0 branding settings for the tenant. Returns the updated branding settings object defined by the Auth0 Management API UpdateBrandingResponseContent schema.

list_all_auth_0_brandings

Get Auth0 branding settings for the tenant. Returns the branding settings object whose fields are defined by the GetBrandingResponseContent schema in the Auth0 Management API.

list_all_auth_0_module_actions

List all Auth0 actions that use a specific Actions Module, showing which deployed action versions reference the module. Returns the list of actions using the module. Required: module_id.

create_a_auth_0_module_rollback

Rollback an Auth0 Actions Module draft to a previously created version, copying the code, dependencies, and secrets from that version into the current draft. Returns: id, name, code, dependencies, secrets, actions_using_module_total, all_changes_published, latest_version_number, created_at, updated_at, latest_version. Required: module_id, module_version_id. Returns 409 if the specified version is…

create_a_auth_0_module_version

Create a new immutable version of an Auth0 Actions Module from the current draft, publishing it for reference by actions while preserving the draft for continued development. Returns: id, module_id, version_number, code, secrets, dependencies, created_at, updated_at. Required: module_id. Returns 409 if no draft is available; 412 if the maximum number of module versions has been reached.

get_single_auth_0_module_version_by_id

Get a specific immutable version of an Auth0 Actions Module by its version ID. Returns: id, module_id, version_number, code, secrets, dependencies, created_at, updated_at. Required: module_id, id.

list_all_auth_0_module_versions

List all published versions of a specific Auth0 Actions Module. Returns: versions, total, page, per_page. Required: module_id.

create_a_auth_0_phone_provider

Create a phone provider in Auth0 for phone messaging. The credentials object requires different properties depending on the provider specified by name. Returns: id, tenant, name, channel, disabled, configuration, created_at, updated_at, credentials. Required: name, credentials.

delete_a_auth_0_phone_provider_by_id

Delete a phone provider in Auth0 by id. Returns an empty 204 response on success. Required: id.

get_single_auth_0_phone_provider_by_id

Get a phone provider in Auth0 by id. Returns: id, tenant, name, channel, disabled, configuration, created_at, updated_at, credentials. Required: id.

list_all_auth_0_phone_providers

List phone messaging providers configured for an Auth0 tenant. Returns: providers. Filter by enabled or disabled providers using the disabled query parameter.

update_a_auth_0_phone_provider_by_id

Update a phone messaging provider in Auth0 by id. The credentials object requires different properties depending on the provider specified by name. Returns: id, tenant, name, channel, disabled, configuration, created_at, updated_at, credentials. Required: id.

auth_0_trigger_bindings_bulk_update

Update all actions bound to an Auth0 trigger; the order provided determines execution order. Returns the updated bindings array, where each binding includes action_id, display_name, trigger_id, created_at, and updated_at. Required: trigger_id, bindings.

list_all_auth_0_trigger_bindings

List the actions bound to a trigger in Auth0, returned in execution order for the associated flow. Returns a paginated list of trigger bindings where each binding includes id, trigger_id, display_name, action, created_at, and updated_at. Required: trigger_id.

create_a_auth_0_version_deploy

Deploy (roll back to) a previous version of an Auth0 action, creating a new deployed version identical to the specified one. If the action is bound to a trigger, the new version executes immediately. Returns the created action version including id, created_at, and updated_at. Required: action_id, version_id.

create_a_auth_0_branding_theme

Create a new branding theme in Auth0. Returns the created theme including id, borders, colors, fonts, page_background, and widget configuration. A 409 is returned if a theme already exists.

delete_a_auth_0_branding_theme_by_id

Delete an Auth0 branding theme by id. Returns an empty 204 response on success. Required: id.

get_single_auth_0_branding_theme_by_id

Get a specific Auth0 branding theme by id. Returns the theme including id, borders, colors, fonts, page_background, and widget configuration. Required: id.

update_a_auth_0_branding_theme_by_id

Update an Auth0 branding theme by id. Returns the updated theme including id, borders, colors, fonts, page_background, and widget configuration. Required: id.

list_all_auth_0_branding_themes_default

Get the default branding theme in Auth0. Returns the theme attributes object with color, border, font, and page background settings. No required parameters.

create_a_auth_0_cimd_preview

Preview and validate a Client ID Metadata Document in Auth0 without creating a client, useful for testing metadata URIs before CIMD registration. Returns: client_id, errors, validation, mapped_fields, attributes. Required: external_client_id.

create_a_auth_0_cimd_register

Register or update a CIMD client in Auth0 via a Client ID Metadata Document URI. Fetches and validates the metadata, maps CIMD fields to Auth0 client configuration, and creates or rotates credentials from the JWKS. Returns: client_id, mapped_fields, validation. Required: external_client_id. Idempotent — uses external_client_id as the unique identifier for upsert.

list_all_auth_0_client_connections

List enabled connections for a specific Auth0 client (application) using checkpoint pagination. Returns: connections, next. Required: client_id. Max 100 results per page.

auth_0_client_credentials_bulk_delete

Delete an Auth0 client credential. Returns an empty 204 response on success. Required: client_id, credential_id.

auth_0_client_credentials_bulk_update

Update an Auth0 client credential. Returns the updated credential including id, credential_type, name, created_at, and updated_at. Required: client_id, credential_id.

create_a_auth_0_client_credential

Create a client credential for an Auth0 application for Private Key JWT, mTLS, or JWT-secured Authorization requests. Returns the created credential including id, credential_type, name, created_at, and updated_at. Required: client_id, credential_type. The credential is created but not enabled until the corresponding client properties are set.

get_single_auth_0_client_credential_by_id

Get a single Auth0 client credential by id. Returns the credential including id, credential_type, name, created_at, and updated_at. Required: client_id, id.

list_all_auth_0_client_credentials

List all client credentials for an Auth0 application. Returns each credential with id, credential_type, name, created_at, and updated_at. Required: client_id.

list_all_auth_0_client_grant_organizations

List organizations associated with a specific Auth0 client grant using checkpoint pagination. Returns: id, name. Required: client_grant_id.

create_a_auth_0_client_grant

Create a client grant in Auth0 for a machine-to-machine application, linking a client to an API audience with specified scopes. Returns: id, client_id, audience, scope, organization_usage, allow_any_organization, default_for, is_system, subject_type, authorization_details_types, allow_all_scopes. Required: audience.

delete_a_auth_0_client_grant_by_id

Delete an Auth0 client grant by id. Returns an empty 204 response on success. Required: id.

get_single_auth_0_client_grant_by_id

Get a single Auth0 client grant by id, including the scopes associated with the application/API pair. Returns: id, client_id, audience, scope, organization_usage, allow_any_organization, default_for, is_system, subject_type, authorization_details_types, allow_all_scopes. Required: id.

list_all_auth_0_client_grants

List Auth0 client grants, including the scopes associated with each application/API pair. Returns per grant: id, client_id, audience, scope, allow_any_organization, subject_type, default_for. Filterable by audience, client_id, allow_any_organization, subject_type, and default_for. The default_for and client_id filters are mutually exclusive.

update_a_auth_0_client_grant_by_id

Update an Auth0 client grant by id, such as modifying the granted scopes. Returns: id, client_id, audience, scope, organization_usage, allow_any_organization, default_for, is_system, subject_type, authorization_details_types, allow_all_scopes. Required: id.

create_a_auth_0_client_rotate_secret

Rotate the client secret for an Auth0 client. Returns the updated client object including client_secret (not base64 encoded), client_id, name, app_type, and other configuration fields. Required: client_id. Cannot be used with clients configured with Private Key JWT authentication.

create_a_auth_0_client

Create a new client (application or SSO integration) in Auth0. Returns the created client including client_id, name, app_type, description, callbacks, and grant_types. Required: name. The client_authentication_methods and token_endpoint_auth_method properties are mutually exclusive.

delete_a_auth_0_client_by_id

Delete an Auth0 client and related configuration (rules, connections, etc) by id. Returns an empty 204 response on success. Required: id.

get_single_auth_0_client_by_id

Get a single Auth0 client by id. Returns the full client object including client_id, name, app_type, description, callbacks, allowed_origins, grant_types, and token_endpoint_auth_method. Required: id.

list_all_auth_0_clients

List Auth0 clients (applications and SSO integrations) with optional filters and field projection. Returns: name, description, updated_at. Max 100 per page.

auth_0_clients_search

Search Auth0 clients using SCIM or Lucene filter syntax with low-latency, eventually consistent results. Returns a list of clients (each with client_id, name, app_type, description, callbacks, grant_types) and a next cursor for pagination. Supports up to 5 filter operations per query; results may not reflect recent updates immediately. Max 100 per page.

update_a_auth_0_client_by_id

Update an Auth0 client's settings by id. Returns the updated client object including client_id, name, app_type, callbacks, grant_types, jwt_configuration, and token_endpoint_auth_method. Required: id. The client_authentication_methods and token_endpoint_auth_method properties are mutually exclusive; jwt_configuration.alg must be RS256 when using client_authentication_methods.

create_a_auth_0_connection_profile

Create a connection profile in Auth0. Returns: id, name, organization, connection_name_prefix_template, enabled_features, connection_config, strategy_overrides, created_at, updated_at. Required: name.

delete_a_auth_0_connection_profile_by_id

Delete a connection profile in Auth0 by id. Returns an empty 204 response on success. Required: id.

get_single_auth_0_connection_profile_by_id

Get a single connection profile in Auth0 by id. Returns: id, name, organization, connection_name_prefix_template, enabled_features, connection_config, strategy_overrides, created_at, updated_at. Required: id.

list_all_auth_0_connection_profiles

List connection profiles in Auth0 with checkpoint pagination. Returns each profile's id, name, created_at, and updated_at. Max 10 per page.

update_a_auth_0_connection_profile_by_id

Update a connection profile in Auth0 by id. Returns: id, name, organization, connection_name_prefix_template, enabled_features, connection_config, strategy_overrides, created_at, updated_at. Required: id.

get_single_auth_0_connection_profiles_template_by_id

Get a single Auth0 connection profile template by id. Returns: id, display_name, template. Required: id.

list_all_auth_0_connection_profiles_templates

List Auth0 connection profile templates. Returns each template's id.

create_a_auth_0_connection

Create a new Auth0 connection with a specified name and identity provider strategy. Returns: name, display_name, options, id, strategy, realms, enabled_clients, is_domain_connection, show_as_button, metadata, authentication, connected_accounts, cross_app_access_requesting_app, cross_app_access_resource_app. Required: name, strategy. Creating a connection with the same name as a recently deleted…

get_single_auth_0_connection_by_id

Get a specific Auth0 connection by id, including options for identity provider configuration. Returns: name, display_name, options, id, strategy, realms, enabled_clients, is_domain_connection, show_as_button, metadata, authentication, connected_accounts, cross_app_access_requesting_app, cross_app_access_resource_app. Required: id.

list_all_auth_0_connections

List all Auth0 connections in your tenant, optionally filtered by strategy or name. Returns: id, name. Checkpoint pagination must be used to retrieve more than 1000 connections.

update_a_auth_0_connection_by_id

Update an Auth0 connection by id, including option properties for identity provider configuration. Returns: name, display_name, options, id, strategy, realms, enabled_clients, is_domain_connection, show_as_button, metadata, authentication, connected_accounts, cross_app_access_requesting_app, cross_app_access_resource_app. Required: id. If the options parameter is provided, the entire options…

delete_a_auth_0_connection_by_id

Delete an Auth0 connection by id. Returns an empty 204 response on success. Required: id. This action cannot be undone; deletion may be asynchronous (202) for connections with many users.

auth_0_phone_templates_bulk_update

Update Auth0 Guardian phone enrollment and verification message templates for your tenant. Returns: enrollment_message, verification_message. Required: enrollment_message, verification_message. A subscription is required to use this endpoint.

create_a_auth_0_phone_template

Create a phone notification template in Auth0. Returns the created phone template object including its id and attributes. Returns 409 if a phone template is already configured for the tenant.

delete_a_auth_0_phone_template_by_id

Delete an Auth0 phone notification template by id. Returns an empty 204 response on success. Required: id.

get_single_auth_0_phone_template_by_id

Get a single Auth0 phone notification template by id. Returns: id, channel, customizable, tenant, content, type, disabled. Required: id.

list_all_auth_0_phone_templates

List Auth0 phone notification templates, optionally filtered by enabled/disabled state. Returns: templates.

update_a_auth_0_phone_template_by_id

Update a phone notification template in Auth0. Returns the updated template including its id and disabled status. Required: id.

auth_0_phone_templates_update_reset

Reset an Auth0 phone notification template's values to their defaults by template_id. Returns: id, channel, customizable, tenant, content, type, disabled, created_at, updated_at. Required: template_id.

list_all_auth_0_phone_templates_phone

List MFA enrollment and verification phone templates for phone-type factors in your Auth0 tenant. Returns: enrollment_message, verification_message.

create_a_auth_0_provider_try

Send a test phone notification for a configured Auth0 branding phone provider. Returns a 202 Accepted response indicating the notification was sent. Required: provider_id, to.

create_a_auth_0_template_try

Send a test phone notification for a configured Auth0 phone notification template. Returns a 202 Accepted response confirming the test notification was sent. Required: template_id, to.

auth_0_templates_universal_logins_bulk_delete

Delete the Auth0 Universal Login branding template. Returns an empty 204 response on success.

auth_0_templates_universal_logins_bulk_update

Update or create the Auth0 Universal Login branding template with Liquid HTML. The template must include auth0:head and auth0:widget tags; max payload 102400 characters. Returns an empty response on success (201 if created, 204 if updated). Required: template.

list_all_auth_0_templates_universal_logins

Get the Auth0 Universal Login branding template. Returns: template (the Liquid HTML content for the login experience).

auth_0_connection_clients_bulk_update

Update enabled Auth0 clients for a connection by submitting an array of client_id and status pairs to enable or disable the connection per client. Returns an empty 204 response on success. Required: connection_id, body (each item requires client_id and status).

list_all_auth_0_connection_clients

List all Auth0 clients that have a specific connection enabled, using checkpoint pagination. Returns: clients, next. Required: connection_id.

auth_0_connection_directory_provisionings_bulk_delete

Delete the directory provisioning configuration for an Auth0 connection. Returns an empty 204 response on success. Required: connection_id.

auth_0_connection_directory_provisionings_bulk_update

Update the directory provisioning configuration for an Auth0 connection. Returns the updated directory provisioning configuration object. Required: connection_id.

create_a_auth_0_connection_directory_provisioning

Create a directory provisioning configuration for an Auth0 connection. Returns the created directory provisioning configuration object. Required: connection_id. Returns 409 if directory provisioning is already enabled on the connection.

list_all_auth_0_connection_directory_provisionings

Retrieve the directory provisioning configuration for an Auth0 connection. Returns the directory provisioning configuration object. Required: connection_id.

create_a_auth_0_connection_key

Provision initial connection keys for an Auth0 Okta or OIDC connection, enabling zero-downtime transitions to Private Key JWT authentication. Returns the created connection key object including id and attributes. Required: connection_id. Returns 409 if keys have already been created for the connection.

list_all_auth_0_connection_keys

List connection keys for an Auth0 connection using the Okta or OIDC strategy. Returns an array of connection key objects representing the cryptographic keys used for Private Key JWT authentication. Required: connection_id.

auth_0_connection_scim_configurations_bulk_delete

Delete an Auth0 connection's SCIM configuration by connection_id. Returns an empty 204 response on success. Required: connection_id.

auth_0_connection_scim_configurations_bulk_update

Update an Auth0 connection's SCIM configuration by connection_id. Returns: connection_id, connection_name, strategy, tenant_name, user_id_attribute, mapping, created_at, updated_on. Required: connection_id.

create_a_auth_0_connection_scim_configuration

Create a SCIM configuration for an Auth0 connection. Returns: connection_id, connection_name, strategy, tenant_name, user_id_attribute, mapping, created_at, updated_on. Required: connection_id. SCIM cannot be enabled when the Azure AD common endpoint is used.

list_all_auth_0_connection_scim_configurations

Get an Auth0 connection's SCIM configuration. Returns: connection_id, connection_name, strategy, tenant_name, user_id_attribute, mapping, created_at, updated_on. Required: connection_id.

list_all_auth_0_connection_status

Check the online status of an AD/LDAP connection in Auth0 by connection_id. Returns an empty 200 response when the connection is online; a 404 is returned when the connection is not found or not connected to any node. Required: connection_id.

auth_0_connection_users_bulk_delete

Delete a specific Auth0 connection user identified by email. Only Database Connections are supported, and you cannot delete all users from a connection in a single call. Returns an empty 204 response on success. Required: connection_id, email.

list_all_auth_0_connections_directory_provisionings

List directory provisioning configurations for an Auth0 tenant. Returns the tenant's directory provisioning configurations. Max 100 results per page (defaults to 50).

list_all_auth_0_connections_scim_configurations

List SCIM configurations for an Auth0 tenant. Returns: scim_configurations, next. Max 100 results per page; uses checkpoint-based pagination.

create_a_auth_0_custom_domain_test

Run the test process on an Auth0 custom domain to check its configuration. Returns the custom domain test result. Required: custom_domain_id. Returns 409 if the custom domain is not ready.

auth_0_custom_domains_bulk_update

Set the default custom domain for the Auth0 tenant. Returns the updated default domain including id, domain, type, status, and tls_policy. Required: domain.

create_a_auth_0_custom_domain

Create a new custom domain in Auth0. The domain must be verified before it accepts requests. Returns: custom_domain_id, domain, primary, is_default, status, type, verification, custom_client_ip_header, tls_policy, domain_metadata, certificate, relying_party_identifier, id. Required: domain, type.

delete_a_auth_0_custom_domain_by_id

Delete a custom domain in Auth0 by id and stop serving requests for it. The default custom domain cannot be deleted until another domain is set as default. Returns an empty 204 response on success. Required: id.

get_single_auth_0_custom_domain_by_id

Get a single custom domain configuration and status in Auth0 by id. Returns: custom_domain_id, domain, primary, is_default, status, type, origin_domain_name, verification, custom_client_ip_header, tls_policy, domain_metadata, certificate, relying_party_identifier, id. Required: id.

list_all_auth_0_custom_domains

List custom domain configurations in Auth0. Returns: id, type. Supports Lucene query syntax filtering and field selection.

update_a_auth_0_custom_domain_by_id

Update a custom domain in Auth0 by modifying custom_client_ip_header or tls_policy. Returns: custom_domain_id, domain, primary, is_default, status, type, verification, custom_client_ip_header, tls_policy, domain_metadata, certificate, relying_party_identifier. Required: id. The compatible TLS policy is no longer supported; custom_client_ip_header cannot be set on auth0_managed domains and…

auth_0_custom_domains_verify

Verify an Auth0 custom domain by triggering the ownership verification process. Returns: custom_domain_id, domain, primary, status, type, cname_api_key, origin_domain_name, verification, custom_client_ip_header, tls_policy, domain_metadata, certificate, id, relying_party_identifier. Required: custom_domain_id. May take up to 10 minutes before the domain accepts requests; cname_api_key is included…

list_all_auth_0_custom_domains_default

Get the default custom domain configured for an Auth0 tenant. Returns: custom_domain_id, domain, status, type, custom_client_ip_header, tls_policy.

create_a_auth_0_device_credential

Create a device public key credential in Auth0 to manage refresh token rotation for a given user. Returns: id, type. Required: device_name, type, value, device_id.

delete_a_auth_0_device_credential_by_id

Delete a device credential in Auth0 by id. Returns an empty 204 response on success. Required: id.

list_all_auth_0_directory_provisioning_default_mappings

Get the default directory provisioning attribute mapping for an Auth0 connection. Returns the default mapping object with fields defined by the upstream schema GetDirectoryProvisioningDefaultMappingResponseContent. Required: connection_id.

create_a_auth_0_directory_provisioning_synchronization

Trigger an on-demand directory provisioning synchronization for an Auth0 connection. Returns: connection_id, synchronization_id, status. Required: connection_id. A connection that was synchronized in the last 30 minutes cannot be synchronized again, and a 409 is returned if a synchronization is already in progress.

auth_0_directory_provisioning_synchronized_groups_bulk_delete

Delete synchronized group selections from an Auth0 connection directory provisioning configuration. Returns an empty 204 response on success. Required: connection_id, groups.

auth_0_directory_provisioning_synchronized_groups_bulk_update

Create or replace synchronized group selections for an Auth0 connection directory provisioning configuration. Returns an empty 204 response on success. Required: connection_id, groups.

create_a_auth_0_directory_provisioning_synchronized_group

Add synchronized group selections to an Auth0 connection directory provisioning configuration. Returns an empty 204 response on success. Required: connection_id, groups.

list_all_auth_0_directory_provisioning_synchronized_groups

List synchronized groups for an Auth0 connection directory provisioning configuration. Returns: groups, next. Required: connection_id.

auth_0_email_templates_bulk_update

Replace an Auth0 email template by template name using a PUT operation. Returns: template, body, from, resultUrl, subject, syntax, urlLifetimeInSeconds, includeEmailInRedirect, enabled, resultUri. Required: template_name, template.

create_a_auth_0_email_template

Create a new Auth0 email template for a pre-defined template name. Returns: template, body, from, resultUrl, subject, syntax, urlLifetimeInSeconds, includeEmailInRedirect, enabled, resultUri. Required: template. Returns 409 if the template already exists.

list_all_auth_0_email_templates

Get an Auth0 email template by its pre-defined template name. Returns: template, body, from, resultUrl, subject, syntax, urlLifetimeInSeconds, includeEmailInRedirect, enabled, resultUri. Required: template_name. Valid template names include verify_email, verify_email_by_code, reset_email, welcome_email, blocked_account, enrollment_email, mfa_oob_code, user_invitation, and others.

auth_0_email_templates_partial_update

Partially update an Auth0 email template by id (template name). Returns: template, body, from, resultUrl, subject, syntax, urlLifetimeInSeconds, includeEmailInRedirect, enabled, resultUri. Required: id.

auth_0_emails_providers_bulk_delete

Delete the email provider in Auth0. Returns an empty 204 response on success.

auth_0_emails_providers_bulk_update

Update the email provider configuration in Auth0. Returns the updated provider object including name, enabled, credentials, default_from_address, and settings. The credentials object requires different properties depending on the provider name.

create_a_auth_0_emails_provider

Configure a new email provider in Auth0. Returns the created provider object including name, enabled, credentials, default_from_address, and settings. Required: name, credentials. The credentials object requires different properties depending on the provider name.

list_all_auth_0_emails_providers

Get the email provider configuration in Auth0. Returns: name, enabled, default_from_address, credentials, settings. Use the fields and include_fields query parameters to control which fields are included or excluded from the result.

create_a_auth_0_event_stream

Create an Auth0 event stream that delivers tenant events to a webhook, AWS EventBridge, or Auth0 Action destination. Returns: id, status, name, subscriptions, created_at, updated_at, destination. Required: name, subscriptions, and destination.

get_single_auth_0_event_stream_by_id

Get a single Auth0 event stream by id. Returns: id, status, name, subscriptions, created_at, updated_at, destination. Required: id.

list_all_auth_0_event_streams

List Auth0 event streams with cursor-based pagination. Returns each stream's id, status, name, subscriptions, created_at, updated_at, and destination with type-specific configuration.

delete_a_auth_0_event_stream_by_id

Delete an Auth0 event stream by id. Returns an empty 204 response on success. Required: id.

update_a_auth_0_event_stream_by_id

Update an Auth0 event stream by id, such as its name or status. Returns: id, status, name, subscriptions, created_at, updated_at, destination. Required: id.

create_a_auth_0_keys_rotate

Rotate connection keys for an Auth0 Okta or OIDC connection strategy. Returns the rotated keys response including its attributes. Required: connection_id. Only supported on connections configured to use JWT Client Authentication.

list_all_auth_0_scim_configuration_default_mappings

Get an Auth0 connection's default SCIM mapping by connection id. Returns the connection's default SCIM mapping object. Required: connection_id.

auth_0_scim_configuration_tokens_bulk_delete

Delete a specific SCIM token for an Auth0 connection by connection_id and token_id. Returns an empty 204 response on success. Required: connection_id, token_id.

create_a_auth_0_scim_configuration_token

Create a SCIM token for an Auth0 connection's SCIM client. Returns: token_id, token, scopes, created_at, valid_until, aud, iat, jti. Required: connection_id. A maximum of 2 tokens may be issued per connection.

list_all_auth_0_scim_configuration_tokens

List all SCIM tokens for an Auth0 connection. Returns each token's aud, scopes, iat, and jti. Required: connection_id.

get_single_auth_0_event_stream_delivery_by_id

Get the delivery history for a specific event in an Auth0 event stream. Returns: id, event_stream_id, status, event_type, attempts, event, configuration. Required: event_stream_id, id.

list_all_auth_0_event_stream_deliveries

List delivery history for an Auth0 event stream. Returns: deliveries, next. Required: event_stream_id. Max 100 per page.

create_a_auth_0_event_stream_redeliver

Redeliver failed events for an Auth0 event stream by submitting a bulk redelivery request. Returns a 202 Accepted response confirming the redelivery request was accepted. Required: event_stream_id.

update_a_auth_0_event_stream_redeliver_by_id

Redeliver a single failed event by its event ID for an Auth0 event stream. Returns an empty 202 response on success. Required: event_stream_id, id.

create_a_auth_0_event_stream_test

Send a test event to an Auth0 event stream to verify the stream is correctly configured and delivering events. Returns a 202 Accepted acknowledgment that the test event was submitted for processing. Required: event_stream_id, event_type.

list_all_auth_0_events

Subscribe to Auth0 events via Server-Sent Events (SSE), receiving a continuous stream of real-time tenant events. Returns a stream of SSE events, each containing type (event type, e.g., user.created), data (event-type-specific payload), and id (cursor token for resuming the stream).

update_a_auth_0_experiment_status_by_id

Transition an Auth0 experiment to a new status through its lifecycle (draft→active, active→paused, paused→active, active/paused→completed). Activation runs full readiness validation. Returns: id, name, description, feature_flag_id, authentication_flow, allocation_strategy, assignment_config, status, is_valid, allocations, started_at, ended_at, created_at, updated_at. Required: experiment_id,…

create_a_auth_0_experiment_validate

Validate an Auth0 experiment to check whether it is ready to be activated. Returns: is_valid, errors. Read-only; no state is modified. Required: experiment_id.

create_a_auth_0_experimentation_experiment

Create a new experiment for A/B testing in Auth0's Experiment Center with traffic allocations. Returns the created experiment including its id, name, status, feature_flag_id, allocations, and assignment_config. Required: name, feature_flag_id, authentication_flow, allocation_strategy, assignment_config, allocations. Experiments may have at most 20 allocations.

delete_a_auth_0_experimentation_experiment_by_id

Delete an Auth0 experiment and its allocations by id. Active experiments cannot be deleted; pause or complete the experiment first. Idempotent — Returns an empty 204 response on success. Returns an empty 204 response on success. Required: id.

get_single_auth_0_experimentation_experiment_by_id

Get a single Auth0 experiment with its allocations by id. Returns: id, name, description, feature_flag_id, authentication_flow, allocation_strategy, assignment_config, status, is_valid, allocations, started_at, ended_at, created_at, updated_at. Required: id.

list_all_auth_0_experimentation_experiments

List experiments for the Auth0 tenant with optional filters by status, authentication flow, and feature flag. Returns each experiment's id, name, status, feature_flag_id, allocations, and assignment_config. Max 50 per page.

update_a_auth_0_experimentation_experiment_by_id

Partially update an Auth0 experiment by id. Only provided fields are updated; providing allocations replaces the entire allocations set. Returns the updated experiment including its id, name, status, allocations, and assignment_config. Required: id. Allocations cannot be modified while the experiment is active.

create_a_auth_0_experimentation_feature_flag

Create a new Auth0 experimentation feature flag for use in experiments. Returns: id, name, description, type, status, created_at, updated_at. Required: name, parameters.

delete_a_auth_0_experimentation_feature_flag_by_id

Delete an Auth0 experimentation feature flag by id. Returns an empty 204 response on success. Idempotent: returns 204 even if the flag does not exist. Required: id.

get_single_auth_0_experimentation_feature_flag_by_id

Get a single Auth0 experimentation feature flag by id. Returns: id, name, description, type, status, created_at, updated_at. Required: id.

list_all_auth_0_experimentation_feature_flags

List Auth0 experimentation feature flags with optional type and status filters. Returns: feature_flags, next. Max 50 per page.

update_a_auth_0_experimentation_feature_flag_by_id

Partially update an Auth0 experimentation feature flag by id; only provided fields are updated. Returns: id, name, description, type, status, created_at, updated_at. Required: id.

create_a_auth_0_experimentation_segment

Create a new segment for the Auth0 Experiment Center with rule-based membership criteria for use in experiments. Returns: id, name, description, type, rules, created_at, updated_at. Required: name, rules.

delete_a_auth_0_experimentation_segment_by_id

Delete an Auth0 experimentation segment by id. Idempotent — Returns an empty 204 response on success. Returns an empty 204 response on success. Required: id.

get_single_auth_0_experimentation_segment_by_id

Get a single Auth0 experimentation segment by id. Returns: id, name, description, type, rules, created_at, updated_at. Required: id.

list_all_auth_0_experimentation_segments

List experimentation segments for the Auth0 tenant with optional type filtering. Returns: segments, next. Max 50 per page.

update_a_auth_0_experimentation_segment_by_id

Partially update an Auth0 experimentation segment by id. Only provided fields are updated; sending rules replaces the entire rules array. Returns: id, name, description, type, rules, created_at, updated_at. Required: id.

update_a_auth_0_feature_flag_status_by_id

Transition an Auth0 feature flag to a new lifecycle status. Returns: id, name, description, type, status, created_at, updated_at. Required: feature_flag_id, status. Allowed transitions: draft → active, draft → archived, active → archived; at least 2 variations required to activate.

auth_0_feature_flag_variations_bulk_delete

Delete a variation from an Auth0 feature flag by ID. Returns an empty 204 response on success. Cannot delete the last remaining variation or a variation in use by non-archived allocations. Required: feature_flag_id, vid.

auth_0_feature_flag_variations_bulk_update

Partially update an Auth0 feature flag variation by ID; only provided fields are updated. Returns: id, feature_flag_id, name, description, overrides, created_at, updated_at. Required: feature_flag_id, vid.

create_a_auth_0_feature_flag_variation

Create a new variation with parameter overrides for an Auth0 feature flag. Returns: id, feature_flag_id, name, description, overrides, created_at, updated_at. Required: feature_flag_id, name. Variation names must be unique within the feature flag.

list_all_auth_0_feature_flag_variations

List all variations for an Auth0 feature flag. Returns: variations. Required: feature_flag_id.

list_all_auth_0_feature_flag_variations_feature_flags

Get a single Auth0 feature flag variation by its variation ID within a specific feature flag. Returns: id, feature_flag_id, name, description, overrides, created_at, updated_at. Required: feature_flag_id, vid.

auth_0_flow_executions_bulk_delete

Delete an Auth0 flow execution by flow_id and execution_id. Returns an empty 204 response on success. Required: flow_id, execution_id.

get_single_auth_0_flow_execution_by_id

Get a single Auth0 flow execution by id. Returns the execution object including its id, flow_id, created_at, and updated_at. Required: flow_id, id.

list_all_auth_0_flow_executions

List Auth0 flow executions for a specific flow. Returns execution records including id, created_at, and updated_at. Required: flow_id.

create_a_auth_0_flow

Create a new flow in Auth0. Returns: id, name, actions, created_at, updated_at, executed_at. Required: name.

delete_a_auth_0_flow_by_id

Delete a flow in Auth0 by id. Returns an empty 204 response on success. Required: id.

get_single_auth_0_flow_by_id

Get a single flow in Auth0 by id. Returns: id, name, actions, created_at, updated_at, executed_at. Required: id.

list_all_auth_0_flows

List flows in Auth0 with optional filtering by synchronous flag and hydration. Returns: id, name, created_at, updated_at.

update_a_auth_0_flow_by_id

Update a flow in Auth0 by id. Returns: id, name, actions, created_at, updated_at, executed_at. Required: id.

create_a_auth_0_form

Create a new form in Auth0. Returns: id, name, messages, languages, translations, nodes, start, ending, style, created_at, updated_at, embedded_at, submitted_at. Required: name.

delete_a_auth_0_form_by_id

Delete an Auth0 form by id. Returns an empty 204 response on success. Required: id.

get_single_auth_0_form_by_id

Get a single Auth0 form by id. Returns: id, name, messages, languages, translations, nodes, start, ending, style, created_at, updated_at, embedded_at, submitted_at, flow_count. Required: id.

list_all_auth_0_forms

List Auth0 forms. Returns: id, name, created_at, updated_at.

update_a_auth_0_form_by_id

Update an Auth0 form by id. Returns: id, name, messages, languages, translations, nodes, start, ending, style, created_at, updated_at, embedded_at, submitted_at. Required: id.

list_all_auth_0_grants

List Auth0 grants associated with your account, filterable by user, client, or audience. Returns: id. Max 100 per page.

auth_0_grants_bulk_delete

Delete all grants for a specific user in Auth0 by user_id. Returns an empty 204 response on success. Required: user_id.

delete_a_auth_0_grant_by_id

Delete a single Auth0 grant by id. Returns an empty 204 response on success. Required: id.

create_a_auth_0_vault_connection

Create a Flows Vault connection in Auth0. Returns the created connection including id, name, app_id, setup, created_at, and updated_at. Required: name, app_id, setup.

delete_a_auth_0_vault_connection_by_id

Delete a Flows Vault connection by id in Auth0. Returns an empty 204 response on success. Required: id.

get_single_auth_0_vault_connection_by_id

Get a single Flows Vault connection by id in Auth0. Returns id, name, app_id, setup, created_at, and updated_at. Required: id.

list_all_auth_0_vault_connections

List Flows Vault connections in Auth0. Returns each connection with id, name, app_id, setup, created_at, and updated_at. Optional: include_totals.

update_a_auth_0_vault_connection_by_id

Update a Flows Vault connection by id in Auth0. Returns the updated connection including id, name, app_id, setup, created_at, and updated_at. Required: id.

auth_0_duo_settings_bulk_update

Set the Auth0 Guardian DUO factor settings, including the DUO account configuration and other properties specific to this factor. Returns the updated DUO settings.

list_all_auth_0_duo_settings

Get the Auth0 Guardian DUO factor settings for multi-factor authentication. Returns the DUO account and factor configuration.

auth_0_duo_settings_partial_update

Partially update the DUO multi-factor authentication factor configuration in Auth0 via a PATCH request. Returns the updated DUO settings object reflecting the current account and factor configuration. No required parameters; send only the fields you wish to change in the request body.

create_a_auth_0_enrollments_ticket

Create an Auth0 Guardian MFA enrollment ticket for a given user, optionally sending the ticket via email and specifying which factor to enroll with. Returns the created enrollment ticket. Required: user_id.

auth_0_group_roles_bulk_delete

Remove one or more roles from an Auth0 group by unassigning the specified role IDs. Returns an empty 204 response on success. Required: group_id, roles.

auth_0_group_roles_bulk_delete_organizations

Remove one or more roles from a group within an Auth0 organization context by unassigning the specified role IDs. Returns an empty 204 response on success. Required: organization_id, group_id, roles.

create_a_auth_0_group_role

Assign one or more roles to a specified Auth0 group. Returns an empty 204 response on success. Required: group_id, roles.

list_all_auth_0_group_roles

List the roles assigned to an Auth0 group. Returns the roles array (each role containing id, name, description, type, and owner_id) and a next checkpoint for pagination. Required: group_id.

create_a_auth_0_group_roles_group

Assign one or more roles to a group in an Auth0 organization context. Returns an empty 204 response on success. Required: organization_id, group_id, roles.

list_all_auth_0_group_roles_groups

List the roles assigned to a group in the context of an Auth0 organization. Returns: roles, next. Required: organization_id, group_id.

delete_a_auth_0_group_by_id

Delete an Auth0 group by its ID. Returns an empty 204 response on success. Required: id.

get_single_auth_0_group_by_id

Get a single Auth0 group by its ID. Returns: id, name, external_id, connection_id, tenant_name, created_at, updated_at. Required: id.

list_all_auth_0_groups

List all groups in your Auth0 tenant. Returns: id, name, connection_id, external_id, created_at, updated_at. Filter by connection_id, name, external_id, or search by name or external ID.

auth_0_groups_list_members

List all users that are members of a specific Auth0 group. Returns: members, next. Required: group_id.

delete_a_auth_0_guardian_enrollment_by_id

Delete an Auth0 Guardian MFA enrollment by id. Removes a multi-factor authentication enrollment from a user's account, allowing re-enrollment. Returns an empty 204 response on success. Required: id.

get_single_auth_0_guardian_enrollment_by_id

Get a specific Auth0 Guardian MFA enrollment by id. Retrieves details such as status and type for a multi-factor authentication enrollment registered to a user account. Returns: id, status, name, identifier, phone_number, enrolled_at, last_auth, type. Required: id.

auth_0_guardian_factors_bulk_update

Update the enabled or disabled status of a specific multi-factor authentication factor in Auth0. Returns: enabled, name. Required: name.

list_all_auth_0_guardian_factors

List all multi-factor authentication factors associated with your Auth0 tenant. Returns: enabled, trial_expired, name, settings.

auth_0_guardian_policies_bulk_update

Set the multi-factor authentication (MFA) policies for your Auth0 tenant by providing an array of policy name strings. Returns the updated array of enabled policy names. Required: an array of policy names (all-applications or confidence-score). The confidence-score policy requires the Adaptive MFA add-on (Enterprise plan).

list_all_auth_0_guardian_policies

List the multi-factor authentication (MFA) policies configured for your Auth0 tenant. Returns an array of policy name strings: all-applications (prompts MFA for all logins) and confidence-score (prompts MFA only for low-confidence logins).

create_a_auth_0_hook

Create a new hook in Auth0. Returns the created hook object including id, name, status, created_at, updated_at, and destination. Required: name, script, triggerId.

get_single_auth_0_hook_by_id

Get a single Auth0 hook by id. Returns the hook object including id, name, status, created_at, and updated_at. Required: id.

list_all_auth_0_hooks

List all Auth0 hooks, optionally filtered by enabled status and triggerId. Returns hook records with id, name, status, created_at, and updated_at.

update_a_auth_0_hook_by_id

Update an existing Auth0 hook by id. Returns the updated hook object including id, name, status, created_at, and updated_at. Required: id.

delete_a_auth_0_hook_by_id

Delete a hook in Auth0 by id. Returns an empty 204 response on success. Required: id.

auth_0_phone_message_types_bulk_update

Replace the list of phone-type MFA factors (sms and voice) that are enabled for your Auth0 tenant. Returns: message_types. Required: message_types.

list_all_auth_0_phone_message_types

List the phone-type MFA factors (sms and voice) that are enabled for your Auth0 tenant. Returns: message_types.

auth_0_phone_selected_providers_bulk_update

Update the Auth0 multi-factor authentication phone provider for your tenant. Returns: provider. Required: provider.

list_all_auth_0_phone_selected_providers

Retrieve the Auth0 multi-factor authentication phone provider configured for your tenant. Returns: provider.

auth_0_providers_apns_bulk_update

Overwrite all configuration details of the Auth0 APNS push notification provider for MFA. Returns the updated APNS configuration object. The PKCS #12 certificate file must be valid with a non-expired certificate matching the environment and no deprecated encryption algorithms.

list_all_auth_0_providers_apns

Get the Auth0 APNS push notification provider configuration for MFA. Returns the APNS configuration object; field-level properties are defined by GetGuardianFactorsProviderApnsResponseContent in the Auth0 Management API OpenAPI specification and could not be resolved from the discovered source.

auth_0_providers_apns_partial_update

Partially update the Auth0 APNS push notification provider configuration for MFA. Returns the updated APNS configuration object. The PKCS #12 certificate file must be valid with a non-expired certificate matching the environment and no deprecated encryption algorithms.

auth_0_providers_fcms_bulk_update

Overwrite all Firebase Cloud Messaging (FCM) push notification provider configuration for MFA in Auth0. Returns the updated FCM configuration. The request body replaces the entire FCM configuration for your tenant.

auth_0_providers_fcms_partial_update

Modify Firebase Cloud Messaging (FCM) push notification provider configuration details for MFA in Auth0. Returns the updated FCM configuration. Only the fields provided in the request body are changed; omitted fields retain their existing values.

auth_0_providers_fcmv_1_s_bulk_update

Overwrite the Auth0 FCMV1 push notification provider configuration for your tenant, replacing all existing settings. Returns the updated FCMV1 configuration object.

auth_0_providers_fcmv_1_s_partial_update

Partially update the Auth0 FCMV1 push notification provider configuration for your tenant, modifying only the supplied fields. Returns the updated FCMV1 configuration object.

auth_0_providers_sns_bulk_update

Configure (overwrite) the AWS SNS push notification provider configuration for MFA in Auth0. Returns the updated SNS configuration object. Subscription required.

list_all_auth_0_providers_sns

Get the AWS SNS push notification provider configuration enabled for MFA in Auth0. Returns the SNS configuration object with provider settings.

auth_0_providers_sns_partial_update

Partially update the AWS SNS push notification provider configuration for MFA in Auth0. Returns: aws_access_key_id, aws_secret_access_key, aws_region, sns_apns_platform_application_arn, sns_gcm_platform_application_arn, sns_platform_application_arn. All request body fields are optional — only the fields you include are updated.

auth_0_providers_twilios_bulk_update

Update the Auth0 Twilio SMS provider configuration for MFA. Returns: from, messaging_service_sid, auth_token, sid. Deprecated — use the Update Twilio phone configuration endpoint instead.

auth_0_providers_twilios_bulk_update_phone

Update the Auth0 Twilio phone provider configuration for MFA. Returns: from, messaging_service_sid, auth_token, sid.

list_all_auth_0_providers_twilios

Get the Auth0 Twilio SMS provider configuration for MFA. Returns the Twilio provider configuration object. Deprecated — use the phone Twilio configuration endpoint instead.

list_all_auth_0_providers_twilios_twilio

Get the Twilio phone provider configuration for MFA in Auth0. Returns the Twilio phone provider configuration details that have been set up in your tenant. No required parameters.

auth_0_push_notification_selected_providers_bulk_update

Set the selected push notification provider for MFA push notifications in Auth0. Returns: provider. Required: provider.

list_all_auth_0_push_notification_selected_providers

Get the currently selected push notification provider for MFA push notifications in Auth0. Returns: provider. No required parameters.

auth_0_sms_selected_providers_bulk_update

Update the Auth0 MFA SMS provider configuration for the tenant. This endpoint has been deprecated; use the Update phone configuration endpoint instead. Returns: provider. Required: provider.

list_all_auth_0_sms_selected_providers

Get the Auth0 MFA SMS provider configuration for the tenant. This endpoint has been deprecated; use the Retrieve phone configuration endpoint instead. Returns: provider.

auth_0_sms_templates_bulk_update

Update SMS enrollment and verification templates for your Auth0 tenant. Returns: enrollment_message, verification_message. Required: enrollment_message, verification_message. This endpoint has been deprecated; use the phone templates endpoint instead.

list_all_auth_0_sms_templates

Retrieve SMS enrollment and verification templates configured for your Auth0 tenant. Returns: enrollment_message, verification_message. This endpoint has been deprecated; use the phone templates endpoint instead.

create_a_auth_0_encryption_rekey

Perform a rekeying operation on the Auth0 encryption key hierarchy. Returns an empty 204 response on success.

auth_0_hook_secrets_bulk_delete

Delete one or more existing secrets from an Auth0 hook. Accepts an array of secret names to remove. Returns an empty 204 response on success. Required: hook_id.

auth_0_hook_secrets_bulk_update

Update one or more existing secrets for an Auth0 hook. Accepts an object of key-value pairs where each key is the name of an existing secret and each value is the new secret value. Returns a 201 response with no body on success. Required: hook_id.

create_a_auth_0_hook_secret

Add one or more secrets to an existing Auth0 hook. Accepts an object of key-value pairs where each key is a secret name and each value is the secret value. A hook can have a maximum of 20 secrets. Returns a 201 response with no body on success. Required: hook_id.

list_all_auth_0_hook_secrets

List all secrets for an Auth0 hook by its ID. Returns the hook's secrets as a key-value map of secret names to their values. Required: hook_id.

get_single_auth_0_job_by_id

Get an Auth0 job by id, useful to check its status. Returns: status, type, created_at, id, connection_id, location, percentage_done, time_left_seconds, format, status_details, summary. Required: id.

list_all_auth_0_jobs

List error details for a failed Auth0 job. Returns job-type-specific error detail records whose shape varies by job type. Required: job_id.

create_a_auth_0_jobs_users_export

Create a long-running job to export all Auth0 users to a file. Returns the created export job object. This is an asynchronous job; use the job id with the Get Job endpoint to check status.

create_a_auth_0_jobs_users_import

Create a bulk user-import job in Auth0 by uploading a formatted users file into a database connection. Returns: status, type, created_at, id, connection_id, external_id. Required: users, connection_id. Max payload 512000 bytes; email_verified defaults to false for added or updated emails unless set to true in the imported data.

create_a_auth_0_jobs_verification_email

Send an email address verification email to a specified user in Auth0. Returns: status, type, created_at, id. Required: user_id. The verification email template's Status toggle must be enabled for the email to be sent.

auth_0_keys_custom_signings_bulk_delete

Delete all custom signing keys for the Auth0 tenant, removing the entire JWKS representation. Returns an empty 204 response on success.

auth_0_keys_custom_signings_bulk_update

Create or replace all custom signing keys for the Auth0 tenant by uploading a JWKS (JSON Web Key Set). Returns: keys. Required: keys.

list_all_auth_0_keys_custom_signings

Get the entire JWKS (JSON Web Key Set) representation of the Auth0 tenant's custom signing keys. Returns the JWKS object as returned by the upstream API; the integration's source documentation does not enumerate individual key fields.

auth_0_keys_encryptions_bulk_delete

Delete an Auth0 encryption key by its key ID. Deleting a customer-provided encryption key reverts the tenant to the native encryption key. Returns an empty 204 response on success. Required: kid.

create_a_auth_0_keys_encryption

Create a new, pre-activated Auth0 encryption key without the key material. Returns: kid, type, state, created_at, updated_at, parent_kid, public_key. Required: type.

list_all_auth_0_keys_encryptions

List all encryption keys associated with your Auth0 tenant. Returns: kid, type, created_at, updated_at.

create_a_auth_0_keys_encryptions_encryption

Import wrapped key material and activate an Auth0 encryption key by its key ID. Returns the imported encryption key including its kid, type, and state. Required: kid, wrappedKey.

list_all_auth_0_keys_encryptions_encryption

Get a specific Auth0 encryption key by its key ID. Returns the encryption key object including its kid. Required: kid.

create_a_auth_0_keys_network_acl

Create a new Network ACL key in Auth0 used to verify HTTP Message Signatures on Network ACL rules. Returns: id, created_at, updated_at, configuration.

list_all_auth_0_keys_signings

List all application signing keys associated with your Auth0 tenant. Returns: kid, cert, pkcs7, current, next, previous, current_since, current_until, fingerprint, thumbprint, revoked, revoked_at.

auth_0_keys_signings_update_revoke

Revoke an application signing key by its key id in Auth0. Returns: cert, kid. Required: kid.

list_all_auth_0_keys_signings_signing

Get a single Auth0 application signing key by its key id (kid). Returns the signing key object including its kid. Required: kid.

create_a_auth_0_log_stream

Create a log stream in Auth0. The `type` field determines which properties are required inside the `sink` object. Returns: id, name, type, status, sink. Required: name, type, sink. A 409 is returned if the maximum number of log streams for the account has been reached.

delete_a_auth_0_log_stream_by_id

Delete an Auth0 log stream by id. Returns an empty 204 response on success. Required: id.

get_single_auth_0_log_stream_by_id

Get a single Auth0 log stream by id, including its configuration and status. Returns: id, name, type, status, sink. Required: id.

list_all_auth_0_log_streams

List all Auth0 log streams with their configuration and status. Returns: id, name, type, status, sink.

update_a_auth_0_log_stream_by_id

Update an Auth0 log stream by id. Supports updating name, status, or sink properties. For eventbridge and eventgrid types, updating the sink is not permitted. Returns: id, name, type, status, sink. Required: id.

get_single_auth_0_log_by_id

Get a single Auth0 log event by id. Returns the log event including its log_id, date, type, description, client_name, connection, user_id, user_name, client_id, and ip. Required: id.

list_all_auth_0_logs

List Auth0 log events matching search criteria, or all events if no criteria given. Returns log events including log_id, date, type, description, client_name, connection, user_id, user_name, client_id, and ip. When using the from checkpoint parameter, only from and take are honored and date ordering is not guaranteed. Max 100 per page; pagination limited to 1,000 search results.

create_a_auth_0_network_acl

Create a new access control list in Auth0. Returns a 201 response on success with no response body. Required: description, active, rule.

delete_a_auth_0_network_acl_by_id

Delete an existing access control list in Auth0 by id. Returns an empty 204 response on success. Required: id.

get_single_auth_0_network_acl_by_id

Get a specific access control list entry in Auth0 by id. Returns: id, description, active, priority, rule, created_at, updated_at. Required: id.

list_all_auth_0_network_acls

List all access control list entries for a tenant in Auth0. Returns: id, description, active, priority, rule, created_at, updated_at.

auth_0_network_acls_partial_update

Partially update an existing access control list in Auth0 by id. Returns: id, description, active, priority, rule, created_at, updated_at. Required: id.

update_a_auth_0_network_acl_by_id

Update an existing Auth0 network access control list by id. Returns the updated ACL including id, description, active, priority, and rule with action and scope. Required: id.

auth_0_organization_client_grants_bulk_delete

Remove a client grant association from an Auth0 organization. Returns an empty 204 response on success. Required: organization_id, grant_id.

create_a_auth_0_organization_client_grant

Associate a client grant with an Auth0 organization. Returns: id, client_id, audience, scope, organization_usage, allow_any_organization. Required: organization_id, grant_id. A maximum of 100 client grants can be associated with a single organization.

list_all_auth_0_organization_client_grants

List client grants associated with an Auth0 organization, optionally filtered by audience, client_id, or grant_ids. Returns: id. Required: organization_id. Max 10 grant_ids per request.

auth_0_organization_clients_bulk_delete

Remove one or more client associations from an Auth0 organization. Returns an empty 204 response on success. Required: organization_id, clients.

create_a_auth_0_organization_client

Associate one or more clients with an Auth0 organization. Returns: client_id, use_for_member_access, client. Required: organization_id, clients.

list_all_auth_0_organization_clients

List all client associations for an Auth0 organization using checkpoint pagination. Returns: clients, next. Required: organization_id.

auth_0_organization_clients_bulk_update

Update an organization client association in Auth0. Returns the updated association including client_id. Required: organization_id, client_id.

get_single_auth_0_organization_client_by_id

Get a specific organization client association in Auth0. Returns the association including client_id. Required: id.

list_all_auth_0_organizations_names

Get a single Auth0 organization by name. Returns: id, name, display_name, branding, metadata, token_quota, third_party_client_access, is_app_entitlement_active, client, created_at. Required: name. The name must be between 1 and 50 characters.

create_a_auth_0_signing_rotate

Rotate the application signing key of your Auth0 tenant, generating a new key for signing tokens. Returns a 201 success response confirming the key was rotated.

create_a_auth_0_wrapping_key

Create the public wrapping key for an Auth0 encryption key, used to wrap your own key material for BYOK import. Returns the wrapping key response object. Required: kid. The encryption key must already exist without key material before calling this endpoint.

list_all_auth_0_discovery_domains_names

Get an Auth0 organization discovery domain by domain name. Returns: id, domain, status, use_for_organization_discovery, verification_txt, verification_host. Required: organization_id, discovery_domain. Subject to eventual consistency; newly created or modified domains may not appear immediately.

list_all_auth_0_member_effective_roles

List organization member effective roles. Returns: roles, next. Required: organization_id, user_id.

list_all_auth_0_member_roles

List roles assigned to an Auth0 organization member, returning only direct role assignments for the specified organization. Returns: id, name, description. Required: organization_id, user_id.

create_a_auth_0_member_role

Assign one or more roles to an Auth0 organization member to determine their access for a specific organization. Returns an empty 204 response on success. Required: organization_id, user_id, roles.

auth_0_member_roles_bulk_delete

Remove one or more roles from an Auth0 organization member within the context of a specific organization. Returns an empty 204 response on success. Required: organization_id, user_id, roles.

list_all_auth_0_organization_connections

List all connections associated with an Auth0 organization, including both enabled and disabled connections. Returns: name. Required: organization_id. Optionally filter by enabled status with is_enabled.

create_a_auth_0_organization_connection

Add a connection to an Auth0 organization. Returns: organization_connection_name, assign_membership_on_login, show_as_button, is_signup_enabled, organization_access_level, is_enabled, connection_id, connection, name, strategy. Required: organization_id, connection_id.

get_single_auth_0_organization_connection_by_id

Get a specific connection associated with an Auth0 organization. Returns: organization_connection_name, assign_membership_on_login, show_as_button, is_signup_enabled, organization_access_level, is_enabled, connection_id, connection, name, strategy. Required: id.

auth_0_organization_connections_bulk_update

Update a connection for an Auth0 organization. Returns: organization_connection_name, assign_membership_on_login, show_as_button, is_signup_enabled, organization_access_level, is_enabled, connection_id, connection, name, strategy. Required: organization_id, connection_id.

auth_0_organization_connections_bulk_delete

Delete a connection from an Auth0 organization by organization and connection id. Returns an empty 204 response on success. Required: organization_id, connection_id.

list_all_auth_0_organization_discovery_domains

List all Auth0 organization discovery domains for a given organization. Returns a list of domains with domain_id, domain, status, use_for_organization_discovery. Subject to eventual consistency; newly created or modified domains may not appear immediately. Required: organization_id.

create_a_auth_0_organization_discovery_domain

Create a new discovery domain for an Auth0 organization. Returns: id, domain, status, use_for_organization_discovery, verification_txt, verification_host, domain_id. A 409 conflict is returned if the domain is already registered to the organization. Required: organization_id, domain.

get_single_auth_0_organization_discovery_domain_by_id

Get a single Auth0 organization discovery domain by id. Returns: id, domain, status, use_for_organization_discovery, verification_txt, verification_host, domain_id. Subject to eventual consistency. Required: id.

auth_0_organization_discovery_domains_bulk_update

Update an Auth0 organization discovery domain's verification status and/or organization discovery usage. The status field must be either pending or verified. Returns: id, domain, status, use_for_organization_discovery, verification_txt, verification_host, domain_id. Required: organization_id, discovery_domain_id.

auth_0_organization_discovery_domains_bulk_delete

Delete an Auth0 organization discovery domain. This action cannot be undone. Returns an empty 204 response on success. Required: organization_id, discovery_domain_id.

list_all_auth_0_organization_enabled_connections

List connections enabled for an Auth0 organization. Returns: name. Required: organization_id.

create_a_auth_0_organization_enabled_connection

Enable a specific connection for an Auth0 organization. Returns: connection_id, assign_membership_on_login, show_as_button, is_signup_enabled, connection, name, strategy. Required: organization_id, connection_id. The connection must already exist within the tenant.

get_single_auth_0_organization_enabled_connection_by_id

Get a specific enabled connection for an Auth0 organization. Returns: connection_id, assign_membership_on_login, show_as_button, is_signup_enabled, connection, name, strategy. Required: id.

auth_0_organization_enabled_connections_bulk_update

Update an enabled connection for an Auth0 organization, such as toggling assign_membership_on_login. Returns: connection_id, assign_membership_on_login, show_as_button, is_signup_enabled, connection, name, strategy. Required: organization_id, connection_id.

auth_0_organization_enabled_connections_bulk_delete

Disable a specific connection for an Auth0 organization. Returns an empty 204 response on success. Required: organization_id, connection_id. This action does not remove the connection from the tenant.

list_all_auth_0_organization_groups

List the groups assigned to a specific Auth0 organization. Returns each group's id, name, connection_id, and external_id. Required: organization_id.

list_all_auth_0_organization_invitations

List invitations sent to users for a specific Auth0 organization, including inviter and invitee details, invitation URLs, and creation/expiration dates. Returns: id, created_at. Required: organization_id.

create_a_auth_0_organization_invitation

Create a user invitation for an Auth0 organization; the invitee receives an email to join. Returns: id, organization_id, inviter, invitee, invitation_url, created_at, expires_at, client_id, connection_id, app_metadata, user_metadata, roles, ticket_id. Required: organization_id, inviter, invitee, client_id.

get_single_auth_0_organization_invitation_by_id

Get a specific Auth0 organization invitation by id. Returns: id, organization_id, inviter, invitee, invitation_url, created_at, expires_at, client_id, connection_id, app_metadata, user_metadata, roles, ticket_id. Required: id.

auth_0_organization_invitations_bulk_delete

Delete an invitation from an Auth0 organization. Returns an empty 204 response on success. Required: organization_id, invitation_id.

list_all_auth_0_organization_roles

List members directly assigned to a specific role within an Auth0 organization. Returns: user_id, email, name, nickname, created_at, updated_at, bearerAuth. Required: organization_id, role_id. Only direct role assignments are returned; group-based assignments are excluded.

list_all_auth_0_prompt_custom_texts

Get custom text for a specific Auth0 prompt and language. Returns a dictionary of custom text key-value pairs where each key is a text identifier and each value is the corresponding customized string. Required: prompt, language.

auth_0_prompt_custom_texts_bulk_update

Set custom text for a specific Auth0 prompt and language; existing texts are overwritten. Returns an empty 200 response on success. Required: prompt, language, and a request body of custom text key-value pairs.

list_all_auth_0_prompt_partials

Get template partials for an Auth0 prompt. Returns a map of partial names to their template content strings. Required: prompt.

auth_0_prompt_partials_bulk_update

Set template partials for an Auth0 prompt, replacing any existing partials. Returns an empty 200 response on success. Required: prompt.

list_all_auth_0_prompts

Get Auth0 prompt settings for the tenant's Universal Login configuration. Returns the prompt settings object including Identifier First Authentication and WebAuthn with Device Biometrics for MFA configuration details.

auth_0_prompts_bulk_update

Update Auth0 prompt settings for the tenant's Universal Login configuration. Returns the updated prompt settings object including Identifier First Authentication and WebAuthn with Device Biometrics for MFA configuration details.

list_all_auth_0_prompts_renderings

List Auth0 prompt rendering setting configurations for all screens, with optional filtering by prompt, screen, and rendering_mode. Returns: prompt, screen, rendering_mode. Max 100 per page.

auth_0_prompts_renderings_bulk_update

Update render settings for multiple Auth0 prompt screens in a single bulk operation. Returns: configs. Required: configs.

list_all_auth_0_rate_limit_policies

List rate limit policies in Auth0, optionally filtered by resource, consumer, and consumer_selector. Returns: rate_limit_policies, next.

create_a_auth_0_rate_limit_policy

Create a new rate limit policy in Auth0. Returns: id, resource, consumer, consumer_selector, configuration, created_at, updated_at. Required: resource, consumer, consumer_selector, configuration. A 409 is returned if a policy with the same resource, consumer, and consumer_selector already exists.

get_single_auth_0_rate_limit_policy_by_id

Get a single rate limit policy in Auth0 by id. Returns: id, resource, consumer, consumer_selector, configuration, created_at, updated_at. Required: id.

update_a_auth_0_rate_limit_policy_by_id

Update the configuration of a rate limit policy in Auth0 by id. Returns: id, resource, consumer, consumer_selector, configuration, created_at, updated_at. Required: id.

delete_a_auth_0_rate_limit_policy_by_id

Delete a rate limit policy in Auth0 by id. Returns an empty 204 response on success. Required: id.

list_all_auth_0_refresh_tokens

List refresh tokens for a specific Auth0 user, with optional filtering by client ID. Results are sorted by credential_id ascending. Returns: refresh_tokens, next. Required: user_id.

delete_a_auth_0_refresh_token_by_id

Delete an Auth0 refresh token by id. Returns an empty 202 response on success. Required: id.

get_single_auth_0_refresh_token_by_id

Get a single Auth0 refresh token by id. Returns: id, user_id, created_at, idle_expires_at, expires_at, device, client_id, session_id, rotating, resource_servers, refresh_token_metadata, last_exchanged_at, credential_id. Required: id.

update_a_auth_0_refresh_token_by_id

Update an Auth0 refresh token by id. Returns: id, user_id, created_at, idle_expires_at, expires_at, device, client_id, session_id, rotating, resource_servers, refresh_token_metadata, last_exchanged_at, credential_id. Required: id.

list_all_auth_0_renderings

Get render settings for a specific Auth0 Universal Login screen identified by prompt and screen name. Returns: tenant, prompt, screen, rendering_mode, context_configuration, default_head_tags_disabled, use_page_template, head_tags, filters. Required: prompt, screen.

auth_0_renderings_bulk_update

Update Auth0 ACUL render settings for a specific Universal Login screen identified by prompt and screen name. Returns: rendering_mode, context_configuration, default_head_tags_disabled, use_page_template, head_tags, filters. Required: prompt, screen. A paid subscription is required to use Advanced Customizations.

list_all_auth_0_role_groups

List the Auth0 groups assigned to a specific role. Returns group records with id, name, external_id, connection_id, created_at, and updated_at. Required: role_id.

create_a_auth_0_role_group

Assign one or more Auth0 groups to a role. Returns an empty 204 response on success. Required: role_id, groups.

auth_0_role_groups_bulk_delete

Remove one or more Auth0 groups from a role. Returns an empty 204 response on success. Required: role_id, groups.

list_all_auth_0_role_groups_roles

List the groups assigned to a role within an Auth0 organization. Returns group objects with id, name, and external_id. Required: organization_id, role_id.

list_all_auth_0_sources_groups

List the groups that grant a specific Auth0 user a given role. Returns: groups, next. Required: user_id, role_id.

list_all_auth_0_sources_groups_sources

List the groups that grant an Auth0 organization member a specific role, including roles inherited through group membership. Returns: groups, next. Required: organization_id, user_id, role_id.

create_a_auth_0_refresh_tokens_revoke

Revoke refresh tokens in bulk in Auth0 by ID list, user, user+client, or user+client+audience. Returns an empty 202 response on success. Invalid parameter combinations result in a 400 error.

create_a_auth_0_resource_server

Create a new API resource server in Auth0. Returns the created resource server including its id and identifier. Required: identifier.

delete_a_auth_0_resource_server_by_id

Delete an Auth0 resource server (API) by id. Returns an empty 204 response on success. Required: id.

get_single_auth_0_resource_server_by_id

Get a single Auth0 resource server (API) by id or audience. Returns: id, name, is_system, identifier, scopes, signing_alg, signing_secret, allow_offline_access, allow_online_access, allow_online_access_with_ephemeral_sessions, skip_consent_for_verifiable_first_party_clients, token_lifetime, token_lifetime_for_web, enforce_policies, token_dialect, token_encryption, consent_policy,…

list_all_auth_0_resource_servers

List all APIs (resource servers) associated with your Auth0 tenant, optionally filtered by identifiers (max 10). Returns: id.

update_a_auth_0_resource_server_by_id

Update an existing Auth0 resource server (API) by id. Returns: id, name, is_system, identifier, scopes, signing_alg, signing_secret, allow_offline_access, allow_online_access, allow_online_access_with_ephemeral_sessions, skip_consent_for_verifiable_first_party_clients, token_lifetime, token_lifetime_for_web, enforce_policies, token_dialect, token_encryption, consent_policy, authorization_details,…

auth_0_risk_assessments_settings_bulk_update

Update the tenant-level risk assessment settings in Auth0. Returns: enabled. Accepts an enabled flag in the request body to toggle risk assessments on or off.

list_all_auth_0_risk_assessments_settings

Get the tenant-level risk assessment settings in Auth0. Returns: enabled.

create_a_auth_0_role_user

Assign one or more users to an existing Auth0 role by providing their user IDs. Returns an empty 200 response on success. Required: role_id, users. New roles cannot be created through this action.

list_all_auth_0_role_users

List users directly assigned to a specific Auth0 role. Returns: name, created_at, updated_at. Required: role_id. Returns only users with direct role assignments; for group-based assignments use the role groups endpoint.

create_a_auth_0_rule

Create a new rule in Auth0. Returns the created rule including its id, name, script, enabled, order, and stage. Required: name, script. Changing the stage from the default `login_success` can alter the rule's function signature.

delete_a_auth_0_rule_by_id

Delete an Auth0 rule by id. Returns an empty 204 response on success. Required: id.

get_single_auth_0_rule_by_id

Get a single Auth0 rule by id. Returns the rule including its id, name, script, enabled, order, and stage. Required: id.

list_all_auth_0_rules

List Auth0 rules with optional filtering by enabled status and field selection. Returns each rule's id, name, script, enabled, order, stage, and timestamps. Max 100 per page.

update_a_auth_0_rule_by_id

Update an existing Auth0 rule by id. Returns the updated rule including its id, name, script, enabled, order, and stage. Required: id.

delete_a_auth_0_rules_config_by_id

Delete an Auth0 rules config variable identified by its key. Returns an empty 204 response on success. Required: id.

list_all_auth_0_rules_configs

List Auth0 rules config variable keys. For security, config variable values cannot be retrieved outside rule execution. Returns: key.

update_a_auth_0_rules_config_by_id

Set an Auth0 rules config variable. Returns: key, value. Required: id (the config key, max 127 characters) and a value in the request body.

auth_0_self_service_profile_custom_texts_bulk_update

Update custom text for an Auth0 self-service profile by language and Self-Service Enterprise Configuration flow page. Accepts a body containing custom text key-value pairs and returns the updated map of page-specific custom text key-value pairs. Required: self_service_profile_id, language, page, and a request body with custom text key-value pairs.

list_all_auth_0_self_service_profile_custom_texts

Get custom text for an Auth0 self-service profile by language and Self-Service Enterprise Configuration flow page. Returns a map of page-specific custom text key-value pairs whose keys depend on the requested page. Required: self_service_profile_id, language, page.

create_a_auth_0_self_service_profile_sso_ticket

Create an Auth0 SSO access ticket to initiate the Self-Service Enterprise Configuration flow for a self-service profile. Returns the created access ticket object. Required: self_service_profile_id.

auth_0_self_service_profile_sso_tickets_revoke

Revoke an Auth0 Self-Service Enterprise Configuration SSO access ticket, invalidating associated sessions so the ticket can no longer initiate a configuration session. Returns an empty 202 Accepted response on success. Required: profile_id, sso_ticket_id.

create_a_auth_0_self_service_profile

Create a self-service profile in Auth0. Returns: id, name, description, user_attributes, created_at, updated_at, branding, allowed_strategies, user_attribute_profile_id. Required: name. A 409 is returned if no more profiles can be created for the tenant.

delete_a_auth_0_self_service_profile_by_id

Delete a self-service profile by id in Auth0. Returns an empty 204 response on success. Required: id.

get_single_auth_0_self_service_profile_by_id

Get a self-service profile by id in Auth0. Returns: id, name, description, user_attributes, created_at, updated_at, branding, allowed_strategies, user_attribute_profile_id. Required: id.

list_all_auth_0_self_service_profiles

List self-service profiles in Auth0. Returns: id, name. Max 100 per page.

update_a_auth_0_self_service_profile_by_id

Update a self-service profile by id in Auth0. Returns: id, name, description, user_attributes, created_at, updated_at, branding, allowed_strategies, user_attribute_profile_id. Required: id.

delete_a_auth_0_session_by_id

Delete an Auth0 session by id. Returns an empty 202 response on success. Required: id.

get_single_auth_0_session_by_id

Get a single Auth0 session by id. Returns: id, user_id, created_at, updated_at, authenticated_at, idle_expires_at, expires_at, last_interacted_at, device, clients, authentication, cookie, session_metadata, actor. Required: id.

auth_0_sessions_revoke

Revoke an Auth0 session by session_id, invalidating the session and all associated refresh tokens. Returns an empty 202 response on success. Required: session_id.

update_a_auth_0_session_by_id

Update an Auth0 session by id. Returns: id, user_id, created_at, updated_at, authenticated_at, idle_expires_at, expires_at, last_interacted_at, device, clients, authentication, cookie, session_metadata, actor. Required: id.

auth_0_settings_new_devices_bulk_update

Update the new device assessor risk assessment settings in Auth0. Returns: remember_for.

list_all_auth_0_settings_new_devices

Get the new device assessor risk assessment settings in Auth0. Returns: remember_for.

list_all_auth_0_stats_active_users

Get the count of active users in Auth0 who logged in during the last 30 days. Returns the count as an integer.

list_all_auth_0_stats_dailies

List daily Auth0 tenant stats showing logins, signups, and breached-password detections per day within an optional date range. Returns: date, logins, signups, leaked_passwords, updated_at, created_at. Breached-password detections require a subscription. Both from and to are optional (YYYYMMDD format).

auth_0_supplemental_signals_bulk_update

Update the supplemental signals configuration for an Auth0 tenant. Returns the updated configuration including akamai_enabled.

list_all_auth_0_supplemental_signals

Get the supplemental signals configuration for an Auth0 tenant. Returns: akamai_enabled.

auth_0_tenants_settings_bulk_update

Update Auth0 tenant settings. Returns the updated tenant settings object.

list_all_auth_0_tenants_settings

Get Auth0 tenant settings. Returns the tenant settings object. Optionally include or exclude specific fields from the result.

create_a_auth_0_tickets_email_verification

Create an email verification ticket in Auth0 for a given user, producing a generated URL that the user can consume to verify their email address. Returns: ticket. Required: user_id.

create_a_auth_0_tickets_password_change

Create a password change ticket for a given Auth0 user, producing a generated URL the user can consume to start a reset password flow. Returns: ticket. Required: user_id. This endpoint does not verify the user's identity — ensure your application verifies identity before calling.

create_a_auth_0_risk_assessments_clear

Clear risk assessment assessors for a specific user in Auth0. Returns an empty 204 response on success. Required: user_id, connection, assessors.

list_all_auth_0_sources_effective_roles

List the Auth0 roles that grant a user a given permission, including roles assigned directly to the user and those inherited through group memberships. Returns: roles, next. Required: user_id, resource_server_identifier, permission_name.

create_a_auth_0_token_exchange_profile

Create a new Token Exchange Profile in Auth0. Returns the created profile including id, name, subject_token_type, action_id, type, created_at, and updated_at. Required: name, subject_token_type, action_id, type.

delete_a_auth_0_token_exchange_profile_by_id

Delete a Token Exchange Profile in Auth0 by id. Returns an empty 204 response on success. Required: id.

get_single_auth_0_token_exchange_profile_by_id

Get a single Token Exchange Profile in Auth0 by id. Returns the profile including id, name, subject_token_type, action_id, type, created_at, and updated_at. Required: id.

list_all_auth_0_token_exchange_profiles

List all Token Exchange Profiles in your Auth0 tenant with checkpoint pagination. Returns the token_exchange_profiles array (each item includes id, name, subject_token_type, action_id, type, created_at, updated_at) and a next cursor for pagination. Max 100 per page.

update_a_auth_0_token_exchange_profile_by_id

Update an existing Token Exchange Profile in Auth0 by id. Returns the updated profile including id, name, subject_token_type, action_id, type, created_at, and updated_at. Required: id.

create_a_auth_0_user_attribute_profile

Create a user attribute profile in Auth0 with a name and a map of user attributes. Returns: id, name, user_id, user_attributes, created_at, updated_at. Required: name, user_attributes.

delete_a_auth_0_user_attribute_profile_by_id

Delete a user attribute profile in Auth0 by id. Returns an empty 204 response on success. Required: id.

get_single_auth_0_user_attribute_profile_by_id

Get a single user attribute profile in Auth0 by id. Returns: id, name, user_id, user_attributes, created_at, updated_at. Required: id.

list_all_auth_0_user_attribute_profiles

List user attribute profiles in Auth0. Returns: next, user_attribute_profiles.

update_a_auth_0_user_attribute_profile_by_id

Update a user attribute profile in Auth0 by id, modifying fields such as name, user_id, and user_attributes. Returns: id, name, user_id, user_attributes, created_at, updated_at. Required: id.

get_single_auth_0_user_attribute_profiles_template_by_id

Get a single Auth0 User Attribute Profile Template by id. Returns: id, display_name, template. Required: id. This endpoint is in Early Access.

list_all_auth_0_user_attribute_profiles_templates

List Auth0 User Attribute Profile Templates. Returns a collection of templates, each including id. This endpoint is in Early Access.

auth_0_user_authentication_methods_bulk_delete

Delete all authentication methods (enrolled MFA factors) for an Auth0 user. This action cannot be undone and is not permitted when the user has registered at least 1 passkey. Returns an empty 204 response on success. Required: user_id.

auth_0_user_authentication_methods_bulk_update

Replace all authentication methods for an Auth0 user with the supplied values. Methods passed overwrite the user's existing settings rather than iterating on them. Returns an array of authentication method objects including id, type, and created_at. Required: user_id. Not permitted when the user has registered at least 1 passkey.

create_a_auth_0_user_authentication_method

Create an authentication method for a given Auth0 user. Methods created via this endpoint are auto confirmed and should already have verification completed. Returns: id, type, name, totp_secret, phone_number, email, authentication_methods, preferred_authentication_method, key_id, public_key, aaguid, relying_party_identifier, credential_device_type, credential_backed_up, identity_user_id,…

delete_a_auth_0_user_authentication_method_by_id

Delete a specific authentication method from an Auth0 user. Returns an empty 204 response on success. Required: id.

get_single_auth_0_user_authentication_method_by_id

Get an authentication method by ID. Returns: id, type, confirmed, name, authentication_methods, preferred_authentication_method, link_id, phone_number. Required: id.

list_all_auth_0_user_authentication_methods

List authentication methods associated with a specified Auth0 user. Returns: id. Required: user_id.

update_a_auth_0_user_authentication_method_by_id

Update a specific authentication method for an Auth0 user. Returns: id, type, name, totp_secret, phone_number, email, authentication_methods, preferred_authentication_method, key_id, public_key, aaguid, relying_party_identifier, confirmed, created_at. Required: id.

auth_0_user_authenticators_bulk_delete

Delete all authenticators registered to an Auth0 user, including OTP, email, phone, and push-notification types. This action cannot be undone. Returns an empty 204 response on success. Required: user_id.

auth_0_user_blocks_bulk_delete

Remove all Brute-force Protection blocks for a user by identifier (username, phone number, or email) in Auth0. Returns an empty 204 response on success. Required: identifier.

delete_a_auth_0_user_block_by_id

Remove all Brute-force Protection blocks for a user by user id in Auth0. Returns an empty 204 response on success. Required: id.

get_single_auth_0_user_block_by_id

Get a user's Brute-force Protection blocks by user id in Auth0. Returns a list of blocked IP addresses for the user. Required: id.

list_all_auth_0_user_blocks

List Brute-force Protection blocks for a user by identifier (username, phone number, or email) in Auth0. Returns a list of blocked IP addresses for the user. Required: identifier.

list_all_auth_0_user_connected_accounts

List all connected accounts associated with an Auth0 user using checkpoint pagination. Returns: connected_accounts, next. Required: user_id. Results default to 10 per page with a maximum of 20.

list_all_auth_0_user_effective_permissions

List the effective permissions assigned to an Auth0 user directly, through roles, or through group memberships. Returns: permissions, next. Required: user_id, resource_server_identifier.

list_all_auth_0_user_effective_roles

List effective roles for an Auth0 user, including roles assigned directly and through group memberships. Returns: roles, next. Required: user_id.

list_all_auth_0_user_enrollments

List multi-factor authentication (MFA) enrollments that a specific Auth0 user has confirmed. Returns an array of enrollment objects, each containing an id, status, and type. Required: user_id.

list_all_auth_0_user_groups

Get user's groups. Required: user_id.

auth_0_user_identities_bulk_delete

Unlink a specific identity from an Auth0 user account, removing it from the user's identities array and creating a standalone profile for the secondary account. Returns the identity response for the unlinked account. Required: user_id, provider.

create_a_auth_0_user_identity

Link a secondary user account to a primary Auth0 user account, forming a primary-secondary relationship. Returns an array of the primary account's identity objects. Required: user_id. The body accepts either link_with (JWT) or provider plus user_id with optional connection_id.

auth_0_user_multifactors_bulk_delete

Delete a user's multi-factor provider in Auth0, forcing the user to manually reconfigure it. Returns an empty 204 response on success. Required: user_id, provider. Supported provider values: duo, google-authenticator.

auth_0_user_multifactors_invalidate_remember_browser

Invalidate all remembered browsers across all multi-factor authentication factors for a user in Auth0. Returns an empty 204 response on success. Required: user_id.

create_a_auth_0_user_recovery_code_regeneration

Regenerate a new MFA recovery code for an Auth0 user, replacing the existing one. The response confirms the new recovery code was successfully generated. Required: user_id.

auth_0_user_refresh_tokens_bulk_delete

Delete all refresh tokens for an Auth0 user. Returns an empty 202 response on success. Required: user_id.

list_all_auth_0_user_refresh_tokens

List refresh tokens for an Auth0 user. Returns each token's aud, scopes, iat, and jti. Required: user_id.

create_a_auth_0_user_revoke_accese

Revoke selected access resources such as sessions and refresh tokens from a user in Auth0. Returns an empty 202 response on success. Required: user_id.

auth_0_user_roles_bulk_delete

Remove one or more existing roles from an Auth0 user. Returns an empty 204 response on success. Required: user_id, roles. This action removes roles in the context of the whole tenant, not a specific Organization.

create_a_auth_0_user_role

Assign one or more existing roles to an Auth0 user. Returns an empty 204 response on success. Required: user_id, roles. New roles cannot be created through this action; only pre-existing role IDs may be assigned.

auth_0_user_sessions_bulk_delete

Delete all sessions for a user in Auth0. Returns an empty 202 response on success. Required: user_id.

list_all_auth_0_user_sessions

List sessions for a specific Auth0 user. Returns: sessions, next. Required: user_id. Max 100 results per page.

list_all_auth_0_users_by_emails

Search Auth0 users by email address. Returns: user_id, email, email_verified, username, phone_number, phone_verified, created_at, updated_at, identities, app_metadata, user_metadata, picture, name, nickname, multifactor, multifactor_last_modified, last_ip, last_login, last_password_reset, logins_count, blocked, given_name, family_name. Required: email. The search is case-sensitive; Auth0 stores…

list_all_auth_0_verification_templates

List verifiable credential verification templates in Auth0. Returns: next, templates. Max 100 per page.

create_a_auth_0_verification_template

Create a verifiable credential verification template in Auth0. Returns the created template including id, name, type, dialect, presentation, well_known_trusted_issuers, created_at, and updated_at. Required: name, type, dialect, presentation, well_known_trusted_issuers.

get_single_auth_0_verification_template_by_id

Get a single verifiable credential verification template in Auth0 by id. Returns: id, name, type, dialect, presentation, custom_certificate_authority, well_known_trusted_issuers, created_at, updated_at. Required: id.

update_a_auth_0_verification_template_by_id

Update a verifiable credential verification template in Auth0 by id. Returns the updated template including id, name, type, dialect, presentation, well_known_trusted_issuers, created_at, and updated_at. Required: id.

delete_a_auth_0_verification_template_by_id

Delete a verifiable credential verification template in Auth0 by id. Returns an empty 204 response on success. Required: id.