Retrieve details of all APIs associated with your tenant.
Bearer authentication header of the form Bearer <token>, where <token> is your auth token.
An optional filter on the resource server identifier. Must be URL encoded and may be specified multiple times (max 10).
e.g. ../resource-servers?identifiers=id1&identifiers=id2
1Page index of the results to return. First page is 0.
x >= 0Number of results per page.
1 <= x <= 100Return results inside an object that contains the total result count (true) or as a direct array of results (false, default).
Whether specified fields are to be included (true) or excluded (false).
Resource servers successfully retrieved.
ID of the API (resource server).
Friendly name for this resource server. Can not contain < or > characters.
Whether this is an Auth0 system API (true) or a custom API (false).
Unique identifier for the API used as the audience parameter on authorization calls. Can not be changed once set.
List of permissions (scopes) that this API uses.
Algorithm used to sign JWTs. Can be HS256 (default) or RS256. PS256 available via addon.
HS256, RS256, RS512, PS256 Secret used to sign tokens when using symmetric algorithms (HS256).
16Whether refresh tokens can be issued for this API (true) or not (false).
Whether to skip user consent for applications flagged as first party (true) or not (false).
Expiration value (in seconds) for access tokens issued for this API from the token endpoint.
Expiration value (in seconds) for access tokens issued for this API via Implicit or Hybrid Flows. Cannot be greater than the token_lifetime value.
Whether authorization polices are enforced (true) or unenforced (false).
Dialect of access tokens that should be issued. access_token is a JWT containing standard Auth0 claims; rfc9068_profile is a JWT conforming to the IETF JWT Access Token Profile. access_token_authz and rfc9068_profile_authz additionally include RBAC permissions claims.
access_token, access_token_authz, rfc9068_profile, rfc9068_profile_authz transactional-authorization-with-mfa, null Proof-of-Possession configuration for access tokens
Defines application access permission for a resource server
The client ID of the client that this resource server is linked to