stytch-api — quality + safety report
In the Skillier index (lap__stytch-com-stytch) · scanned 2026-06-03 · engine: builtin+triage
A
Quality
90/100
Safety
✓ Clean — no heuristic safety flags surfaced.
Heuristic flags from the builtin scanner, which is known to over-flag (it trips on legitimate env-reading integrations, security skills, and library .eval calls). This is NOT an authoritative malicious verdict — re-scan with SkillSpector for the authoritative result. Run the authoritative scan →
📇 This skill is in the Skillier index (curated · deduped · quality-filtered). Install Skillier to route & load it into your AI client.
Quality notes
Skill is large (~6604 tokens)
→ Tighten to the essential procedure; move long reference material to linked files.
No example
→ Add at least one worked example (input → expected action/output).
About this skill
Stytch API skill. Use when working with Stytch for connected apps, b2b, users. Covers 184 endpoints.
📄 Read the SKILL.md
---
name: stytch-api
description: "Stytch API skill. Use when working with Stytch for connected_apps, b2b, users. Covers 184 endpoints."
version: 1.0.0
generator: lapsh
---
# Stytch API
API version: 1.0.0
## Auth
Bearer basic
## Base URL
https://api.stytch.com
## Setup
1. Set Authorization header with your Bearer token
2. GET /v1/sessions -- verify access
3. POST /v1/connected_apps/clients/search -- create first search
## Endpoints
184 endpoints across 21 groups. See references/api-spec.lap for full details.
### connected_apps
| Method | Path | Description |
|--------|------|-------------|
| GET | /v1/connected_apps/clients/{client_id} | Get |
| PUT | /v1/connected_apps/clients/{client_id} | Update |
| DELETE | /v1/connected_apps/clients/{client_id} | Delete |
| POST | /v1/connected_apps/clients/search | Search |
| POST | /v1/connected_apps/clients | Create |
| POST | /v1/connected_apps/clients/{client_id}/secrets/rotate/start | Rotatestart |
| POST | /v1/connected_apps/clients/{client_id}/secrets/rotate/cancel | Rotatecancel |
| POST | /v1/connected_apps/clients/{client_id}/secrets/rotate | Rotate |
### b2b
| Method | Path | Description |
|--------|------|-------------|
| PUT | /v1/b2b/scim/{organization_id}/connection/{connection_id} | Update |
| DELETE | /v1/b2b/scim/{organization_id}/connection/{connection_id} | Delete |
| GET | /v1/b2b/scim/{organization_id}/connection/{connection_id} | Getgroups |
| POST | /v1/b2b/scim/{organization_id}/connection/{connection_id}/rotate/start | Rotatestart |
| POST | /v1/b2b/scim/{organization_id}/connection/{connection_id}/rotate/complete | Rotatecomplete |
| POST | /v1/b2b/scim/{organization_id}/connection/{connection_id}/rotate/cancel | Rotatecancel |
| POST | /v1/b2b/scim/{organization_id}/connection | Create |
| GET | /v1/b2b/scim/{organization_id}/connection | Get |
| POST | /v1/b2b/organizations | Create |
| GET | /v1/b2b/organizations/{organization_id} | Get |
| PUT | /v1/b2b/organizations/{organization_id} | Update |
| DELETE | /v1/b2b/organizations/{organization_id} | Delete |
| POST | /v1/b2b/organizations/search | Search |
| GET | /v1/b2b/organizations/{organization_id}/metrics | Metrics |
| GET | /v1/b2b/organizations/{organization_id}/connected_apps | Connectedapps |
| GET | /v1/b2b/organizations/{organization_id}/connected_apps/{connected_app_id} | Getconnectedapp |
| DELETE | /v1/b2b/organizations/{organization_id}/external_id | Deleteexternalid |
| PUT | /v1/b2b/organizations/{organization_id}/members/{member_id} | Update |
| DELETE | /v1/b2b/organizations/{organization_id}/members/{member_id} | Delete |
| PUT | /v1/b2b/organizations/{organization_id}/members/{member_id}/reactivate | Reactivate |
| DELETE | /v1/b2b/organizations/{organization_id}/members/mfa_phone_numbers/{member_id} | Deletemfaphonenumber |
| DELETE | /v1/b2b/organizations/{organization_id}/members/{member_id}/totp | Deletetotp |
| POST | /v1/b2b/organizations/members/search | Search |
| DELETE | /v1/b2b/organizations/{organization_id}/members/passwords/{member_password_id} | Deletepassword |
| GET | /v1/b2b/organizations/members/dangerously_get/{member_id} | Dangerouslyget |
| GET | /v1/b2b/organizations/{organization_id}/members/{member_id}/oidc_providers | Oidcproviders |
| POST | /v1/b2b/organizations/{organization_id}/members/{member_id}/unlink_retired_email | Unlinkretiredemail |
| POST | /v1/b2b/organizations/{organization_id}/members/{member_id}/start_email_update | Startemailupdate |
| GET | /v1/b2b/organizations/{organization_id}/members/{member_id}/connected_apps | Getconnectedapps |
| DELETE | /v1/b2b/organizations/{organization_id}/members/{member_id}/external_id | Deleteexternalid |
| POST | /v1/b2b/organizations/{organization_id}/members | Create |
| GET | /v1/b2b/organizations/{organization_id}/member | Get |
| GET | /v1/b2b/organizations/{organization_id}/members/{member_id}/oauth_providers/google | Google |
| GET | /v1/b2b/organizations/{organization_id}/members/{member_id}/oauth_providers/microsoft | Microsoft |
| GET | /v1/b2b/organizations/{organization_id}/members/{member_id}/oauth_providers/slack | Slack |
| GET | /v1/b2b/organizations/{organization_id}/members/{member_id}/oauth_providers/hubspot | Hubspot |
| GET | /v1/b2b/organizations/{organization_id}/members/{member_id}/oauth_providers/github | Github |
| POST | /v1/b2b/organizations/{organization_id}/members/{member_id}/connected_apps/{connected_app_id}/revoke | Revoke |
| POST | /v1/b2b/idp/oauth/authorize/start | Authorizestart |
| POST | /v1/b2b/idp/oauth/authorize | Authorize |
| GET | /v1/b2b/sessions | Get |
| POST | /v1/b2b/sessions/authenticate | Authenticate |
| POST | /v1/b2b/sessions/revoke | Revoke |
| POST | /v1/b2b/sessions/exchange | Exchange |
| POST | /v1/b2b/sessions/exchange_access_token | Exchangeaccesstoken |
| POST | /v1/b2b/sessions/attest | Attest |
| POST | /v1/b2b/sessions/migrate | Migrate |
| GET | /v1/b2b/sessions/jwks/{project_id} | Getjwks |
| POST | /v1/b2b/impersonation/authenticate | Authenticate |
| GET | /v1/b2b/rbac/policy | Policy |
| GET | /v1/b2b/rbac/organizations/{organization_id} | Getorgpolicy |
| PUT | /v1/b2b/rbac/organizations/{organization_id} | Setorgpolicy |
| POST | /v1/b2b/recovery_codes/recover | Recover |
| GET | /v1/b2b/recovery_codes/{organization_id}/{member_id} | Get |
| POST | /v1/b2b/recovery_codes/rotate | Rotate |
| POST | /v1/b2b/totp | Create |
| POST | /v1/b2b/totp/authenticate | Authenticate |
| POST | /v1/b2b/totp/migrate | Migrate |
| POST | /v1/b2b/discovery/intermediate_sessions/exchange | Exchange |
| POST | /v1/b2b/discovery/organizations/create | Create |
| POST | /v1/b2b/discovery/organizations | List |
| POST | /v1/b2b/magic_links/authenticate | Authenticate |
| POST | /v1/b2b/magic_links/email/login_or_signup | Loginorsignup |
| POST | /v1/b2b/magic_links/email/invite | Invite |
| POST | /v1/b2b/magic_links/email/discovery/send | Send |
| POST | /v1/b2b/magic_links/discovery/authenticate | Authenticate |
| POST | /v1/b2b/oauth/authenticate | Authenticate |
| POST | /v1/b2b/oauth/discovery/authenticate | Authenticate |
| POST | /v1/b2b/otps/sms/send | Send |
| POST | /v1/b2b/otps/sms/authenticate | Authenticate |
| POST | /v1/b2b/otps/email/login_or_signup | Loginorsignup |
| POST | /v1/b2b/otps/email/authenticate | Authenticate |
| POST | /v1/b2b/otps/email/discovery/send | Send |
| POST | /v1/b2b/otps/email/discovery/authenticate | Authenticate |
| POST | /v1/b2b/passwords/strength_check | Strengthcheck |
| POST | /v1/b2b/passwords/migrate | Migrate |
| POST | /v1/b2b/passwords/authenticate | Authenticate |
| POST | /v1/b2b/passwords/email/reset/start | Resetstart |
| POST | /v1/b2b/passwords/email/reset | Reset |
| POST | /v1/b2b/passwords/email/require_reset | Requirereset |
| POST | /v1/b2b/passwords/session/reset | Reset |
| POST | /v1/b2b/passwords/existing_password/reset | Reset |
| POST | /v1/b2b/passwords/discovery/authenticate | Authenticate |
| POST | /v1/b2b/passwords/discovery/email/reset/start | Resetstart |
| POST | /v1/b2b/passwords/discovery/email/reset | Reset |
| GET | /v1/b2b/sso/{organization_id} | Getconnections |
| DELETE | /v1/b2b/sso/{organization_id}/connections/{connection_id} | Deleteconnection |
| POST | /v1/b2b/sso/authenticate | Authenticate |
| POST | /v1/b2b/sso/oidc/{organization_id} | Createconnection |
| PUT | /v1/b2b/sso/oidc/{organization_id}/connections/{connection_id} | Updateconnection |
| POST | /v1/b2b/sso/saml/{organization_id} | Createconnection |
| PUT | /v1/b2b/sso/saml/{organization_id}/connections/{connection_id} | Updateconnection |
| PUT | /v1/b2b/sso/saml/{organization_id}/connections/{connection_id}/url | Updatebyurl |
| DELETE | /v1/b2b/sso/saml/{organization_id}/connections/{connection_id}/verification_certificates/{certificate_id} | Deleteverificationcertificate |
| DELETE | /v1/b2b/sso/saml/{organization_id}/connections/{connection_id}/encryption_private_keys/{private_key_id} | Deleteencryptionprivatekey |
| POST | /v1/b2b/sso/external/{organization_id} | Createconnection |
| PUT | /v1/b2b/sso/external/{organization_id}/connections/{connection_id} | Updateconnection |
### users
| Method | Path | Description |
|--------|------|-------------|
| POST | /v1/users | Create |
| GET | /v1/users/{user_id} | Get |
| PUT | /v1/users/{user_id} | Update |
| DELETE | /v1/users/{user_id} | Delete |
| POST | /v1/users/search | Search |
| PUT | /v1/users/{user_id}/exchange_primary_factor | Exchangeprimaryfactor |
| DELETE | /v1/users/emails/{email_id} | Deleteemail |
| DELETE | /v1/users/phone_numbers/{phone_id} | Deletephonenumber |
| DELETE | /v1/users/webauthn_registrations/{webauthn_registration_id} | Deletewebauthnregistration |
| DELETE | /v1/users/biometric_registrations/{biometric_registration_id} | Deletebiometricregistration |
| DELETE | /v1/users/totps/{totp_id} | Deletetotp |
| DELETE | /v1/users/crypto_wallets/{crypto_wallet_id} | Deletecryptowallet |
| DELETE | /v1/users/passwords/{password_id} | Deletepassword |
| DELETE | /v1/users/oauth/{oauth_user_registration_id} | Deleteoauthregistration |
| DELETE | /v1/users/{user_id}/external_id | Deleteexternalid |
| GET | /v1/users/{user_id}/connected_apps | Connectedapps |
| POST | /v1/users/{user_id}/connected_apps/{connected_app_id}/revoke | Revoke |
### sessions
| Method | Path | Description |
|--------|------|-------------|
| GET | /v1/sessions | Get |
| POST | /v1/sessions/authenticate | Authenticate |
| POST | /v1/sessions/revoke | Revoke |
| POST | /v1/sessions/migrate | Migrate |
| POST | /v1/sessions/exchange_access_token | Exchangeaccesstoken |
| GET | /v1/sessions/jwks/{project_id} | Getjwks |
| POST | /v1/sessions/attest | Attest |
### rbac
| Method | Path | Description |
|--------|------|-------------|
| GET | /v1/rbac/policy | Policy |
### crypto_wallets
| Method | Path | Description |
|--------|------|-------------|
| POST | /v1/crypto_wallets/authenticate/start | Authenticatestart |
| POST | /v1/crypto_wallets/authenticate | Authenticate |
### debug
| Method | Path | Description |
|--------|------|-------------|
| GET | /v1/debug/whoami | Whoami |
### fingerprint
| Method | Path | Description |
|--------|------|-------------|
| POST | /v1/fingerprint/lookup | Lookup |
### rules
| Method | Path | Description |
|--------|------|-------------|
| POST | /v1/rules/set | Set |
| POST | /v1/rules/list | List |
### verdict_reasons
| Method | Path | Description |
|--------|------|-------------|
| POST | /v1/verdict_reasons/override | Override |
| POST | /v1/verdict_reasons/list | List |
### email
| Method | Path | Description |
|--------|------|-------------|
| POST | /v1/email/risk | Risk |
### idp
| Method | Path | Description |
|--------|------|-------------|
| POST | /v1/idp/oauth/authorize/start | Authorizestart |
| POST | /v1/idp/oauth/authorize | Authorize |
### impersonation
| Method | Path | Description |
|--------|------|-------------|
| POST | /v1/impersonation/authenticate | Authenticate |
### m2m
| Method | Path | Description |
|--------|------|-------------|
| GET | /v1/m2m/clients/{client_id} | Get |
| PUT | /v1/m2m/clients/{client_id} | Update |
| DELETE | /v1/m2m/clients/{client_id} | Delete |
| POST | /v1/m2m/clients/search | Search |
| POST | /v1/m2m/clients | Create |
| POST | /v1/m2m/clients/{client_id}/secrets/rotate/start | Rotatestart |
| POST | /v1/m2m/clients/{client_id}/secrets/rotate/cancel | Rotatecancel |
| POST | /v1/m2m/clients/{client_id}/secrets/rotate | Rotate |
### magic_links
| Method | Path | Description |
|--------|------|-------------|
| POST | /v1/magic_links/authenticate | Authenticate |
| POST | /v1/magic_links | Create |
| POST | /v1/magic_links/email/send | Send |
| POST | /v1/magic_links/email/login_or_create | Loginorcreate |
| POST | /v1/magic_links/email/invite | Invite |
| POST | /v1/magic_links/email/revoke_invite | Revokeinvite |
### passwords
| Method | Path | Description |
|--------|------|-------------|
| POST |
… (truncated)Scan or optimize your own skill →
Want a live grade + an embeddable README badge? Run your skill through the free scanner.
Graded independently by Skillproof — nothing to sell the author. Quality is mechanical + corpus-grounded; safety flags are heuristic (builtin+triage), not a malicious verdict.