FAQ

Is AuthSpoke an IAM product?#

No. AuthSpoke is the Enterprise AI Control Plane. It complements your existing IAM (Okta, Entra, SailPoint) — those govern people; AuthSpoke governs the autonomous AI acting on their behalf.

Do I need to send a tenant id?#

Not for your own data. The bearer token carries your tenant context, and tenant-scoped endpoints derive the tenant from it. Only the cross-tenant Provider API takes an explicit tenantId.

Why did I get a 403?#

A 403 has three flavors — branch on the body: no error field means a bad token; capability_not_licensed means a SKU isn't enabled; provider_admin_required means a provider-only route. See Errors.

Why can't I see Users / Applications / SSO?#

Those require the Identity Foundation capability. New tenants are AI-first by default and don't have it enabled. See Capability SKUs.

How do I compute risk/trust myself?#

You don't — AuthSpoke computes them server-side and returns them ready to render. See Risk & Trust.

Where's the OpenAPI spec?#

Download it here. The entire API Reference is generated from it.

Are there SDKs?#

SDKs (Java, Python, Go, TypeScript, C#) and a CLI are on the roadmap — see SDKs and CLI. Until then, the API is straightforward to call directly or generate a client from the spec.

How do I report an issue or get help?#

Open the console or contact your AuthSpoke representative.