auth-block

Gets an AI agent its own 23blocks Bearer token through the Agent Identity (AID) protocol and an Ed25519 keypair. Use when an agent needs BLOCKS_AUTH_TOKEN and has no human-provided token.

Auth Block API keys: create, rotate, revoke, scopes, usage. Use for API key lifecycle; for M2M tokens see 23blocks-auth-service-tokens-api.

Auth Block security audit logs: list, get, query by user, action or resource. Use when investigating who did what.

Auth Block guest users: create, update, convert to registered, re-authenticate. Use for guest checkout or try-before-signup flows.

Auth Block identity registration: register, list, get. Use when a user must be registered in the auth block.

Auth Block organization invitations: create, send, resend, accept, decline, cancel. Use for invite workflows.

Auth Block magic links: create, validate, send, OTP-verify, logs; single-step JWT or two-step OTP. Use for passwordless links.

Auth Block MFA: TOTP setup, enable, disable, verify TOTP or backup codes, status. Use for MFA enrollment and checks.

Auth Block OAuth/SSO: configure Google, GitHub and other providers, authorization URLs, callbacks, SSO. Use for social login or SSO setup.

Auth Block OpenID Connect: discovery, authorize, token, userinfo, JWKS; company or app level. Use when integrating 23blocks as an OIDC provider.

Auth Block organization members: list, add, remove, change roles, transfer ownership. Use for who belongs to an organization.

Auth Block organizations: CRUD, settings, billing, stats. Use for the organization itself; members are 23blocks-auth-org-members-api.

Auth Block password reset by 6-digit OTP, no redirects. Use for an app's forgot-password flow.

Auth Block passwordless sign-in and sign-up with a 6-digit email OTP, returning a full JWT. Use for password-free login.

Auth Block permissions: define, grant, revoke, check access, list by resource type. Use for fine-grained access control.

Auth Block roles: CRUD, attach or detach permissions, list a role's users. Use for role-based access control.

Auth Block admin RSA keys: rotate, certificates, OIDC toggle, JWKS preview. Use when rotating signing keys. Admin only.

Auth Block machine-to-machine service tokens: create, list, revoke, regenerate, scopes, expiry. Use for server or agent credentials.

Auth Block sign-in and sign-out, token validation, MFA at login. Use to log a user in or out.

Auth Block teams: CRUD, members, member roles. Use for access-control teams; org-chart teams are 23blocks-company-teams-api.

Auth Block tenant context: switch a user between companies, revoke, audit. Use when one user works across several tenants.

Auth Block token introspection (RFC 7662): whether a token is active, plus its metadata. Use to check a token server-side.

Auth Block OAuth 2.0 tokens: refresh, revoke one, revoke all for a user or device. Use when a token expires or must be killed.

Auth Block user profile data: personal info, social links, preferences. Use for profile fields; accounts are 23blocks-auth-users-api.

Auth Block user accounts: CRUD, search, me, change or reset password, verify email, activate. Use for account management.