stytch-api

name	stytch-api
description	Stytch API skill. Use when working with Stytch for connected_apps, b2b, users. Covers 184 endpoints.
version	1.0.0
generator	lapsh

Stytch API

API version: 1.0.0

Auth

Bearer basic

Base URL

https://api.stytch.com

Setup

1. Set Authorization header with your Bearer token
2. GET /v1/sessions -- verify access
3. POST /v1/connected_apps/clients/search -- create first search

Endpoints

184 endpoints across 21 groups. See references/api-spec.lap for full details.

connected_apps

Method	Path	Description
GET	/v1/connected_apps/clients/{client_id}	Get
PUT	/v1/connected_apps/clients/{client_id}	Update
DELETE	/v1/connected_apps/clients/{client_id}	Delete
POST	/v1/connected_apps/clients/search	Search
POST	/v1/connected_apps/clients	Create
POST	/v1/connected_apps/clients/{client_id}/secrets/rotate/start	Rotatestart
POST	/v1/connected_apps/clients/{client_id}/secrets/rotate/cancel	Rotatecancel
POST	/v1/connected_apps/clients/{client_id}/secrets/rotate	Rotate

b2b

Method	Path	Description
PUT	/v1/b2b/scim/{organization_id}/connection/{connection_id}	Update
DELETE	/v1/b2b/scim/{organization_id}/connection/{connection_id}	Delete
GET	/v1/b2b/scim/{organization_id}/connection/{connection_id}	Getgroups
POST	/v1/b2b/scim/{organization_id}/connection/{connection_id}/rotate/start	Rotatestart
POST	/v1/b2b/scim/{organization_id}/connection/{connection_id}/rotate/complete	Rotatecomplete
POST	/v1/b2b/scim/{organization_id}/connection/{connection_id}/rotate/cancel	Rotatecancel
POST	/v1/b2b/scim/{organization_id}/connection	Create
GET	/v1/b2b/scim/{organization_id}/connection	Get
POST	/v1/b2b/organizations	Create
GET	/v1/b2b/organizations/{organization_id}	Get
PUT	/v1/b2b/organizations/{organization_id}	Update
DELETE	/v1/b2b/organizations/{organization_id}	Delete
POST	/v1/b2b/organizations/search	Search
GET	/v1/b2b/organizations/{organization_id}/metrics	Metrics
GET	/v1/b2b/organizations/{organization_id}/connected_apps	Connectedapps
GET	/v1/b2b/organizations/{organization_id}/connected_apps/{connected_app_id}	Getconnectedapp
DELETE	/v1/b2b/organizations/{organization_id}/external_id	Deleteexternalid
PUT	/v1/b2b/organizations/{organization_id}/members/{member_id}	Update
DELETE	/v1/b2b/organizations/{organization_id}/members/{member_id}	Delete
PUT	/v1/b2b/organizations/{organization_id}/members/{member_id}/reactivate	Reactivate
DELETE	/v1/b2b/organizations/{organization_id}/members/mfa_phone_numbers/{member_id}	Deletemfaphonenumber

users

Method	Path	Description
POST	/v1/users	Create
GET	/v1/users/{user_id}	Get
PUT	/v1/users/{user_id}	Update
DELETE	/v1/users/{user_id}	Delete
POST	/v1/users/search	Search
PUT	/v1/users/{user_id}/exchange_primary_factor	Exchangeprimaryfactor
DELETE	/v1/users/emails/{email_id}	Deleteemail
DELETE	/v1/users/phone_numbers/{phone_id}	Deletephonenumber
DELETE	/v1/users/webauthn_registrations/{webauthn_registration_id}	Deletewebauthnregistration
DELETE	/v1/users/biometric_registrations/{biometric_registration_id}	Deletebiometricregistration
DELETE	/v1/users/totps/{totp_id}	Deletetotp
DELETE	/v1/users/crypto_wallets/{crypto_wallet_id}	Deletecryptowallet
DELETE	/v1/users/passwords/{password_id}	Deletepassword
DELETE	/v1/users/oauth/{oauth_user_registration_id}	Deleteoauthregistration
DELETE	/v1/users/{user_id}/external_id	Deleteexternalid
GET	/v1/users/{user_id}/connected_apps	Connectedapps
POST	/v1/users/{user_id}/connected_apps/{connected_app_id}/revoke	Revoke

sessions

Method	Path	Description
GET	/v1/sessions	Get
POST	/v1/sessions/authenticate	Authenticate
POST	/v1/sessions/revoke	Revoke
POST	/v1/sessions/migrate	Migrate
POST	/v1/sessions/exchange_access_token	Exchangeaccesstoken
GET	/v1/sessions/jwks/{project_id}	Getjwks
POST	/v1/sessions/attest	Attest

rbac

Method	Path	Description
GET	/v1/rbac/policy	Policy

crypto_wallets

Method	Path	Description
POST	/v1/crypto_wallets/authenticate/start	Authenticatestart
POST	/v1/crypto_wallets/authenticate	Authenticate

debug

Method	Path	Description
GET	/v1/debug/whoami	Whoami

fingerprint

Method	Path	Description
POST	/v1/fingerprint/lookup	Lookup

rules

Method	Path	Description
POST	/v1/rules/set	Set
POST	/v1/rules/list	List

verdict_reasons

Method	Path	Description
POST	/v1/verdict_reasons/override	Override
POST	/v1/verdict_reasons/list	List

email

Method	Path	Description
POST	/v1/email/risk	Risk

idp

Method	Path	Description
POST	/v1/idp/oauth/authorize/start	Authorizestart
POST	/v1/idp/oauth/authorize	Authorize

impersonation

Method	Path	Description
POST	/v1/impersonation/authenticate	Authenticate

m2m

Method	Path	Description
GET	/v1/m2m/clients/{client_id}	Get
PUT	/v1/m2m/clients/{client_id}	Update
DELETE	/v1/m2m/clients/{client_id}	Delete
POST	/v1/m2m/clients/search	Search
POST	/v1/m2m/clients	Create
POST	/v1/m2m/clients/{client_id}/secrets/rotate/start	Rotatestart
POST	/v1/m2m/clients/{client_id}/secrets/rotate/cancel	Rotatecancel
POST	/v1/m2m/clients/{client_id}/secrets/rotate	Rotate

magic_links

Method	Path	Description
POST	/v1/magic_links/authenticate	Authenticate
POST	/v1/magic_links	Create
POST	/v1/magic_links/email/send	Send
POST	/v1/magic_links/email/login_or_create	Loginorcreate
POST	/v1/magic_links/email/invite	Invite
POST	/v1/magic_links/email/revoke_invite	Revokeinvite

passwords

Method	Path	Description
POST	/v1/passwords	Create
POST	/v1/passwords/authenticate	Authenticate
POST	/v1/passwords/strength_check	Strengthcheck
POST	/v1/passwords/migrate	Migrate
POST	/v1/passwords/email/reset/start	Resetstart
POST	/v1/passwords/email/reset	Reset
POST	/v1/passwords/existing_password/reset	Reset
POST	/v1/passwords/session/reset	Reset

oauth

Method	Path	Description
POST	/v1/oauth/attach	Attach
POST	/v1/oauth/authenticate	Authenticate

otps

Method	Path	Description
POST	/v1/otps/authenticate	Authenticate
POST	/v1/otps/sms/send	Send
POST	/v1/otps/sms/login_or_create	Loginorcreate
POST	/v1/otps/whatsapp/send	Send
POST	/v1/otps/whatsapp/login_or_create	Loginorcreate
POST	/v1/otps/email/send	Send
POST	/v1/otps/email/login_or_create	Loginorcreate

projects

Method	Path	Description
GET	/v1/projects/metrics	Metrics

totps

Method	Path	Description
POST	/v1/totps	Create
POST	/v1/totps/authenticate	Authenticate
POST	/v1/totps/recovery_codes	Recoverycodes
POST	/v1/totps/recover	Recover

webauthn

Method	Path	Description
POST	/v1/webauthn/register/start	Registerstart
POST	/v1/webauthn/register	Register
POST	/v1/webauthn/authenticate/start	Authenticatestart
POST	/v1/webauthn/authenticate	Authenticate
PUT	/v1/webauthn/{webauthn_registration_id}	Update
GET	/v1/webauthn/credentials/{user_id}/{domain}	Listcredentials

Common Questions

Match user requests to endpoints in references/api-spec.lap. Key patterns:

• "Get client details?" -> GET /v1/connected_apps/clients/{client_id}
• "Update a client?" -> PUT /v1/connected_apps/clients/{client_id}
• "Delete a client?" -> DELETE /v1/connected_apps/clients/{client_id}
• "Create a search?" -> POST /v1/connected_apps/clients/search
• "Create a client?" -> POST /v1/connected_apps/clients
• "Create a start?" -> POST /v1/connected_apps/clients/{client_id}/secrets/rotate/start
• "Create a cancel?" -> POST /v1/connected_apps/clients/{client_id}/secrets/rotate/cancel
• "Create a rotate?" -> POST /v1/connected_apps/clients/{client_id}/secrets/rotate
• "Update a connection?" -> PUT /v1/b2b/scim/{organization_id}/connection/{connection_id}
• "Delete a connection?" -> DELETE /v1/b2b/scim/{organization_id}/connection/{connection_id}
• "Get connection details?" -> GET /v1/b2b/scim/{organization_id}/connection/{connection_id}
• "Create a start?" -> POST /v1/b2b/scim/{organization_id}/connection/{connection_id}/rotate/start
• "Create a complete?" -> POST /v1/b2b/scim/{organization_id}/connection/{connection_id}/rotate/complete
• "Create a cancel?" -> POST /v1/b2b/scim/{organization_id}/connection/{connection_id}/rotate/cancel
• "Create a connection?" -> POST /v1/b2b/scim/{organization_id}/connection
• "List all connection?" -> GET /v1/b2b/scim/{organization_id}/connection
• "Create a organization?" -> POST /v1/b2b/organizations
• "Get organization details?" -> GET /v1/b2b/organizations/{organization_id}
• "Update a organization?" -> PUT /v1/b2b/organizations/{organization_id}
• "Delete a organization?" -> DELETE /v1/b2b/organizations/{organization_id}
• "Create a search?" -> POST /v1/b2b/organizations/search
• "List all metrics?" -> GET /v1/b2b/organizations/{organization_id}/metrics
• "List all connected_apps?" -> GET /v1/b2b/organizations/{organization_id}/connected_apps
• "Get connected_app details?" -> GET /v1/b2b/organizations/{organization_id}/connected_apps/{connected_app_id}
• "Update a member?" -> PUT /v1/b2b/organizations/{organization_id}/members/{member_id}
• "Delete a member?" -> DELETE /v1/b2b/organizations/{organization_id}/members/{member_id}
• "Delete a mfa_phone_number?" -> DELETE /v1/b2b/organizations/{organization_id}/members/mfa_phone_numbers/{member_id}
• "Create a search?" -> POST /v1/b2b/organizations/members/search
• "Delete a password?" -> DELETE /v1/b2b/organizations/{organization_id}/members/passwords/{member_password_id}
• "Get dangerously_get details?" -> GET /v1/b2b/organizations/members/dangerously_get/{member_id}
• "List all oidc_providers?" -> GET /v1/b2b/organizations/{organization_id}/members/{member_id}/oidc_providers

Response Tips

• Check response schemas in references/api-spec.lap for field details
• List endpoints may support pagination; check for limit, offset, or cursor params
• Create/update endpoints typically return the created/updated object

References

• Full spec: See references/api-spec.lap for complete endpoint details, parameter tables, and response schemas

Generated from the official API spec by LAP