Docs

Identity Provider API Reference

This section covers all endpoints related to identity provider.

List Scopes

List all available OAuth2 scopes with descriptions. This endpoint is public and can be used for documentation or scope selection UIs.

GET/idp/scopes

API

Code Examples

curl -X GET "https://api.chutes.ai/idp/scopes"
  -H "Content-Type: application/json"

Request Configuration

Authorization

API Key or Bearer Token

Endpoint:

Responses

Status Code	Description
200	Successful Response

Get a nonce for CLI-based hotkey signature login.

GET/idp/cli_login/nonce

API

Code Examples

curl -X GET "https://api.chutes.ai/idp/cli_login/nonce"
  -H "Content-Type: application/json"

Request Configuration

Authorization

API Key or Bearer Token

Endpoint:

Responses

Status Code	Description
200	Successful Response

CLI login endpoint for hotkey signature authentication.

GET/idp/cli_login

API

Code Examples

curl -X GET "https://api.chutes.ai/idp/cli_login"
  -H "Content-Type: application/json"

Request Configuration

Authorization

API Key or Bearer Token

Endpoint:

Parameters

Parameter	Type	Required
hotkey	string	Yes
signature	string	Yes
nonce	string	Yes

Responses

Status Code	Description
200	Successful Response
422	Validation Error

List Apps

List OAuth applications.

By default, returns apps owned by the current user, public apps, and apps shared with the user. Set include_public=false to exclude public apps. Set include_shared=false to exclude apps shared with the user. Use search to filter by name or description.

GET/idp/apps

API

Code Examples

curl -X GET "https://api.chutes.ai/idp/apps"
  -H "Content-Type: application/json"

Request Configuration

Authorization

API Key or Bearer Token

Endpoint:

Parameters

Parameter	Type	Required
include_public	boolean \| null	No
include_shared	boolean \| null	No
search	string \| null	No
page	integer \| null	No
limit	integer \| null	No
user_id	string \| null	No
X-Chutes-Hotkey	string \| null	No
X-Chutes-Signature	string \| null	No
X-Chutes-Nonce	string \| null	No
Authorization	string \| null	No

Responses

Status Code	Description
200	Successful Response
422	Validation Error

Authentication

This endpoint requires authentication.

Create App

Create a new OAuth application.

POST/idp/apps

API

Code Examples

curl -X POST "https://api.chutes.ai/idp/apps"
  -H "Content-Type: application/json"
  -d '{}'

Request Configuration

Authorization

API Key or Bearer Token

Request Body

name*string

descriptionstring | null

redirect_uris*array

homepage_urlstring | null

logo_urlstring | null

publicboolean

refresh_token_lifetime_daysinteger | null

allowed_scopesarray | null

Endpoint:

Parameters

Parameter	Type	Required
X-Chutes-Hotkey	string \| null	No
X-Chutes-Signature	string \| null	No
X-Chutes-Nonce	string \| null	No
Authorization	string \| null	No

Request Body

Field	Type	Required
name	string	Yes
description	string \| null	No
redirect_uris	string	Yes
homepage_url	string \| null	No
logo_url	string \| null	No
public	boolean	No
refresh_token_lifetime_days	integer \| null	No
allowed_scopes	string \| null	No

Responses

Status Code	Description
200	Successful Response
422	Validation Error

Authentication

This endpoint requires authentication.

Get App

Get details of an OAuth application.

GET/idp/apps/{app_id}

API

Code Examples

curl -X GET "https://api.chutes.ai/idp/apps/{app_id}"
  -H "Content-Type: application/json"

Request Configuration

Authorization

API Key or Bearer Token

Endpoint:

Parameters

Parameter	Type	Required
app_id	string	Yes
X-Chutes-Hotkey	string \| null	No
X-Chutes-Signature	string \| null	No
X-Chutes-Nonce	string \| null	No
Authorization	string \| null	No

Responses

Status Code	Description
200	Successful Response
422	Validation Error

Authentication

This endpoint requires authentication.

Update App

Update an OAuth application.

PATCH/idp/apps/{app_id}

API

Code Examples

curl -X PATCH "https://api.chutes.ai/idp/apps/{app_id}"
  -H "Content-Type: application/json"
  -d '{}'

Request Configuration

Authorization

API Key or Bearer Token

Request Body

namestring | null

descriptionstring | null

redirect_urisarray | null

homepage_urlstring | null

logo_urlstring | null

activeboolean | null

publicboolean | null

refresh_token_lifetime_daysinteger | null

allowed_scopesarray | null

Endpoint:

Parameters

Parameter	Type	Required
app_id	string	Yes
X-Chutes-Hotkey	string \| null	No
X-Chutes-Signature	string \| null	No
X-Chutes-Nonce	string \| null	No
Authorization	string \| null	No

Request Body

Field	Type	Required
name	string \| null	No
description	string \| null	No
redirect_uris	string \| null	No
homepage_url	string \| null	No
logo_url	string \| null	No
active	boolean \| null	No
public	boolean \| null	No
refresh_token_lifetime_days	integer \| null	No
allowed_scopes	string \| null	No

Responses

Status Code	Description
200	Successful Response
422	Validation Error

Authentication

This endpoint requires authentication.

Delete App

Delete an OAuth application.

DELETE/idp/apps/{app_id}

API

Code Examples

curl -X DELETE "https://api.chutes.ai/idp/apps/{app_id}"
  -H "Content-Type: application/json"

Request Configuration

Authorization

API Key or Bearer Token

Endpoint:

Parameters

Parameter	Type	Required
app_id	string	Yes
X-Chutes-Hotkey	string \| null	No
X-Chutes-Signature	string \| null	No
X-Chutes-Nonce	string \| null	No
Authorization	string \| null	No

Responses

Status Code	Description
200	Successful Response
422	Validation Error

Authentication

This endpoint requires authentication.

Regenerate App Secret

Regenerate the client secret for an OAuth application.

POST/idp/apps/{app_id}/regenerate-secret

API

Code Examples

curl -X POST "https://api.chutes.ai/idp/apps/{app_id}/regenerate-secret"
  -H "Content-Type: application/json"

Request Configuration

Authorization

API Key or Bearer Token

Endpoint:

Parameters

Parameter	Type	Required
app_id	string	Yes
X-Chutes-Hotkey	string \| null	No
X-Chutes-Signature	string \| null	No
X-Chutes-Nonce	string \| null	No
Authorization	string \| null	No

Responses

Status Code	Description
200	Successful Response
422	Validation Error

Authentication

This endpoint requires authentication.

Share an OAuth application with another user.

POST/idp/apps/{app_id}/share

API

Code Examples

curl -X POST "https://api.chutes.ai/idp/apps/{app_id}/share"
  -H "Content-Type: application/json"
  -d '{}'

Request Configuration

Authorization

API Key or Bearer Token

Request Body

app_id_or_name*string

user_id_or_name*string

Endpoint:

Parameters

Parameter	Type	Required
app_id	string	Yes
X-Chutes-Hotkey	string \| null	No
X-Chutes-Signature	string \| null	No
X-Chutes-Nonce	string \| null	No
Authorization	string \| null	No

Request Body

Field	Type	Required	Description
app_id_or_name	string	Yes
user_id_or_name	string	Yes

Responses

Status Code	Description
200	Successful Response
422	Validation Error

Authentication

This endpoint requires authentication.

Unshare App

Remove sharing of an OAuth application with a user.

DELETE/idp/apps/{app_id}/share/{user_id}

API

Code Examples

curl -X DELETE "https://api.chutes.ai/idp/apps/{app_id}/share/{user_id}"
  -H "Content-Type: application/json"

Request Configuration

Authorization

API Key or Bearer Token

Endpoint:

Parameters

Parameter	Type	Required
app_id	string	Yes
user_id	string	Yes
X-Chutes-Hotkey	string \| null	No
X-Chutes-Signature	string \| null	No
X-Chutes-Nonce	string \| null	No
Authorization	string \| null	No

Responses

Status Code	Description
200	Successful Response
422	Validation Error

Authentication

This endpoint requires authentication.

List App Shares

List users an OAuth application is shared with.

GET/idp/apps/{app_id}/shares

API

Code Examples

curl -X GET "https://api.chutes.ai/idp/apps/{app_id}/shares"
  -H "Content-Type: application/json"

Request Configuration

Authorization

API Key or Bearer Token

Endpoint:

Parameters

Parameter	Type	Required
app_id	string	Yes
X-Chutes-Hotkey	string \| null	No
X-Chutes-Signature	string \| null	No
X-Chutes-Nonce	string \| null	No
Authorization	string \| null	No

Responses

Status Code	Description
200	Successful Response
422	Validation Error

Authentication

This endpoint requires authentication.

List Authorizations

List apps the current user has authorized.

GET/idp/authorizations

API

Code Examples

curl -X GET "https://api.chutes.ai/idp/authorizations"
  -H "Content-Type: application/json"

Request Configuration

Authorization

API Key or Bearer Token

Endpoint:

Parameters

Parameter	Type	Required
page	integer \| null	No
limit	integer \| null	No
X-Chutes-Hotkey	string \| null	No
X-Chutes-Signature	string \| null	No
X-Chutes-Nonce	string \| null	No
Authorization	string \| null	No

Responses

Status Code	Description
200	Successful Response
422	Validation Error

Authentication

This endpoint requires authentication.

Revoke App Authorization

Revoke authorization for an app.

DELETE/idp/authorizations/{app_id}

API

Code Examples

curl -X DELETE "https://api.chutes.ai/idp/authorizations/{app_id}"
  -H "Content-Type: application/json"

Request Configuration

Authorization

API Key or Bearer Token

Endpoint:

Parameters

Parameter	Type	Required
app_id	string	Yes
X-Chutes-Hotkey	string \| null	No
X-Chutes-Signature	string \| null	No
X-Chutes-Nonce	string \| null	No
Authorization	string \| null	No

Responses

Status Code	Description
200	Successful Response
422	Validation Error

Authentication

This endpoint requires authentication.

Authorize Get

OAuth2 Authorization Endpoint. Displays login page if not authenticated, consent page if authenticated. Checks for existing chutes-session-token cookie for SSO.

GET/idp/authorize

API

Code Examples

curl -X GET "https://api.chutes.ai/idp/authorize"
  -H "Content-Type: application/json"

Request Configuration

Authorization

API Key or Bearer Token

Endpoint:

Parameters

Parameter	Type	Required
response_type	string	Yes
client_id	string	Yes
redirect_uri	string	Yes
scope	string \| null	No
state	string \| null	No
code_challenge	string \| null	No
code_challenge_method	string \| null	No

Responses

Status Code	Description
200	Successful Response
422	Validation Error

Handle login form submission.

POST/idp/login

API

Code Examples

curl -X POST "https://api.chutes.ai/idp/login"
  -H "Content-Type: application/json"

Request Configuration

Authorization

API Key or Bearer Token

Endpoint:

Responses

Status Code	Description
200	Successful Response
422	Validation Error

Show authorization consent page.

GET/idp/authorize/consent

API

Code Examples

curl -X GET "https://api.chutes.ai/idp/authorize/consent"
  -H "Content-Type: application/json"

Request Configuration

Authorization

API Key or Bearer Token

Endpoint:

Parameters

Parameter	Type	Required	Description
session_id	string	Yes

Responses

Status Code	Description
200	Successful Response
422	Validation Error

Handle authorization consent form submission.

POST/idp/authorize/consent

API

Code Examples

curl -X POST "https://api.chutes.ai/idp/authorize/consent"
  -H "Content-Type: application/json"

Request Configuration

Authorization

API Key or Bearer Token

Endpoint:

Parameters

Parameter	Type	Required	Description
session_id	string	Yes

Responses

Status Code	Description
200	Successful Response
422	Validation Error

Token Endpoint

OAuth2 Token Endpoint.

POST/idp/token

API

Code Examples

curl -X POST "https://api.chutes.ai/idp/token"
  -H "Content-Type: application/json"

Request Configuration

Authorization

API Key or Bearer Token

Endpoint:

Responses

Status Code	Description
200	Successful Response
422	Validation Error

Revoke Token Endpoint

OAuth2 Token Revocation Endpoint (RFC 7009).

POST/idp/token/revoke

API

Code Examples

curl -X POST "https://api.chutes.ai/idp/token/revoke"
  -H "Content-Type: application/json"

Request Configuration

Authorization

API Key or Bearer Token

Endpoint:

Responses

Status Code	Description
200	Successful Response
422	Validation Error

Userinfo Endpoint

OpenID Connect UserInfo Endpoint.

GET/idp/userinfo

API

Code Examples

curl -X GET "https://api.chutes.ai/idp/userinfo"
  -H "Content-Type: application/json"

Request Configuration

Authorization

API Key or Bearer Token

Endpoint:

Responses

Status Code	Description
200	Successful Response

Introspect Token

OAuth2 Token Introspection Endpoint (RFC 7662).

Token format includes embedded token_id for O(1) lookup, so client auth is optional.

Allows clients to check if a token is still valid and get metadata about it. Useful for determining if a user needs to re-authenticate.

Returns: - active: Whether the token is currently valid - exp: Expiration timestamp (Unix epoch) - iat: Issued at timestamp - scope: Space-separated list of scopes - client_id: The client that the token was issued to - username: The user's username - sub: The user's ID

POST/idp/token/introspect

API

Code Examples

curl -X POST "https://api.chutes.ai/idp/token/introspect"
  -H "Content-Type: application/json"

Request Configuration

Authorization

API Key or Bearer Token

Endpoint:

Responses

Status Code	Description
200	Successful Response
422	Validation Error

Identity Provider API Reference

List Scopes

Authorization

Responses

Get Cli Login Nonce

Authorization

Responses

Cli Login

Authorization

Parameters (3)

Parameters

Responses

List Apps

Authorization

Parameters (10)

Parameters

Responses

Authentication

Create App

Authorization

Parameters (4)

Request Body

Parameters

Request Body

Responses

Authentication

Get App

Authorization

Parameters (5)

Parameters

Responses

Authentication

Update App

Authorization

Parameters (5)

Request Body

Parameters

Request Body

Responses

Authentication

Delete App

Authorization

Parameters (5)

Parameters

Responses

Authentication

Regenerate App Secret

Authorization

Parameters (5)

Parameters

Responses

Authentication

Share App

Authorization

Parameters (5)

Request Body

Parameters

Request Body

Responses

Authentication

Unshare App

Authorization

Parameters (6)

Parameters

Responses

Authentication

List App Shares

Authorization

Parameters (5)

Parameters

Responses

Authentication

List Authorizations

Authorization

Parameters (6)

Parameters

Responses

Authentication

Revoke App Authorization

Authorization