⌘ K
OpenAPI

GET STARTED

Lucion Identity documentation

Build secure authentication, authorization, organizations, and identity experiences with Lucion Identity.

MACHINE-READABLE CONTRACT

OpenAPI 3.1

Use the JSON contract for tooling or download the YAML representation for review and generation workflows.

View JSON Download JSON Download YAML
Get started

Register an application, choose the correct credential, and make a safe first request.

API reference

Browse every public route in the v6.6.6 OpenAPI contract.

OAuth + OIDC

Implement authorization code + PKCE and validate OIDC metadata correctly.

ChatGPT + Codex

Connect the remote MCP server and authorize narrowly scoped API-key creation.

Passkeys / WebAuthn

Understand the registration, authentication, and step-up ceremonies.

Organizations

Use tenant-bound memberships, roles, policies, applications, and approvals.

SCIM

Provision organization users within Lucion's supported SCIM boundary.

Webhooks

Create signed, replay-resistant outbound subscriptions.

Lyra delegation

Evaluate scope-bound delegated authorization without assuming action execution.

Security

Review origin, CSRF, credential, tenant, and replay boundaries.

Changelog

Track contract and documentation changes by release.

Quickstart

  1. Register an application from the authenticated Developer surface and record its client ID. Confidential client secrets are shown once.
  2. Configure HTTPS redirect URIs (localhost HTTP is permitted only for explicitly registered local development).
  3. Use Authorization Code + PKCE for an interactive application, or a one-time displayed API key for a server-to-server profile integration.
  4. Validate the returned token's issuer, audience, expiry, and scopes before calling Lucion APIs.
  5. Use the live readiness and OpenAPI endpoints to confirm the deployment contract before moving to production.
First request
curl https://identity.lucionglobal.com/api/health
curl https://identity.lucionglobal.com/api/openapi.json