Zoiko ID

Explore the
complete
Zoiko iD API.

Find every documented request, response, authentication, and error contract for the identity, authority, evidence and policy APIs. Each endpoint is versioned, status-controlled, and source-governed.

Browse APIsOpenAPI spec
Enterprise identity infrastructure

What you'll find here

Complete, versioned, source-governed API documentation. Every endpoint includes authentication requirements, authorization models, request/response schemas, error handling, rate limits, and tested examples.

Endpoint Catalog

All REST, gRPC, webhook endpoints with method, path, and version

Auth & Authorization

OAuth 2.0, OIDC, mTLS, JWT requirements per endpoint

Schemas & Examples

Request/response payloads with tested, synthetic examples

Error Codes

HTTP status codes and what they mean. Recovery guidance.

Find what you need

Filter by method
Filter by category
Filter by status

API families

Authentication & Federation

Authentication & Federation

OAuth 2.0, OIDC, SAML, mTLS. Issue credentials, verify identity, manage sessions.

View endpoints
Credentials & Verification

Credentials & Verification

Create, revoke, check credentials. Manage certificate lifecycle. Verify revocation status.

View endpoints
Delegated Authority

Delegated Authority

Create mandates, check scope, evaluate policy. Bind identity to bounded authority.

View endpoints
Service & Agent Identity

Service & Agent Identity

Enroll services, issue agent credentials. Manage non-human principals and AI agents.

View endpoints
Signals & Events

Signals & Events

Stream credential, mandate, policy change events. Subscribe to real- time updates.

View events
Evidence & Audit

Evidence & Audit

Query audit trail, export compliance evidence, search by actor, time range, action.

View endpoints

Rate limits and pagination

Rate limits

All requests are rate-limited per API key. Tier determines your quota.

Standard tier1,000 requests per minute
Pro tier10,000 requests per minute
Enterprise tierCustom limits. Contact sales.
Rate limits graphic

Pagination

List endpoints return paginated results using cursor- based pagination.

limitMax results per page (default 50, max 1000)
cursorOpaque string for next page. Included in response.

Security and authentication

TLS 1.3

All endpoints use TLS 1.3 Encryption. No unencrypted traffic.

Bearer tokens

Use OAuth 2.0 bearer tokens. Include in Authorization header.

mTLS optional

Service-to-service? Use mutual TLS for extra security.

CORS enabled

Browser-safe. CORS headers on approved origins.

Alert

Never expose secrets

Never paste API keys, tokens, or credentials into public forms, logs, or screenshots. Rotate immediately if exposed.

Versioning and deprecation

v1

Stable

Production ready. No breaking changes. Safe to use.

beta

Beta

Testing phase. May change. Feedback welcome.

deprecated

Deprecated

Will be removed. Migrate to new version now.

Our versioning policy

  • Stable (v1, v2, ...): No breaking changes. Backward compatible. Safe for production.
  • Beta: Features may change. Use for testing, not production. Feedback helps us improve.
  • Deprecated: Exists for 12 months after deprecation date. Migrate to new version before sunset date.
  • Sunset: Removed entirely. Old version stops responding. No further support.

Breaking changes: Published in a changelog at least 90 days in advance. Subscribe to our changelog feed for notification.

Ready to integrate?

Choose a quickstart, explore endpoints above, or download the OpenAPI specification. Our SDKs handle authentication and error handling for you.

Start a quickstartDownload OpenAPI