Retrieve API details with the given ID.
Bearer authentication header of the form Bearer <token>, where <token> is your auth token.
ID or audience of the resource server to retrieve.
Whether specified fields are to be included (true) or excluded (false).
Resource server successfully retrieved.
ID of the API (resource server).
Friendly name for this resource server. Can not contain < or > characters.
Whether this is an Auth0 system API (true) or a custom API (false).
Unique identifier for the API used as the audience parameter on authorization calls. Can not be changed once set.
List of permissions (scopes) that this API uses.
Algorithm used to sign JWTs. Can be HS256 (default) or RS256. PS256 available via addon.
HS256, RS256, RS512, PS256 Secret used to sign tokens when using symmetric algorithms (HS256).
16Whether refresh tokens can be issued for this API (true) or not (false).
Whether to skip user consent for applications flagged as first party (true) or not (false).
Expiration value (in seconds) for access tokens issued for this API from the token endpoint.
Expiration value (in seconds) for access tokens issued for this API via Implicit or Hybrid Flows. Cannot be greater than the token_lifetime value.
Whether authorization polices are enforced (true) or unenforced (false).
Dialect of access tokens that should be issued. access_token is a JWT containing standard Auth0 claims; rfc9068_profile is a JWT conforming to the IETF JWT Access Token Profile. access_token_authz and rfc9068_profile_authz additionally include RBAC permissions claims.
access_token, access_token_authz, rfc9068_profile, rfc9068_profile_authz transactional-authorization-with-mfa, null Proof-of-Possession configuration for access tokens
Defines application access permission for a resource server
The client ID of the client that this resource server is linked to