openapi: 3.1.0
info:
version: 16.10.0
title: Amplify Platform API v1.0.0 aca client API
description: 'The Amplify Platform API provides the interface to perform the following:
- Manage account settings and credentials
- Manage organization settings, users, service accounts, and teams
- Retrieve organization usage data
- Register and manage applications
- Retrieve application metrics and analytics
- Retrieve user, organization, and application activity
See the Amplify Guide for documentation and examples on how to authorize API calls to platform services.
For general documentation refer to the Amplify Platform documentation.
© Axway 2026. All rights reserved.'
contact:
email: support@axway.com
termsOfService: https://www.axway.com/en/axway-platform-terms-of-use
servers:
- url: https://platform.axway.com/api/v1
tags:
- name: client
paths:
/client:
parameters: []
post:
summary: Axway Add Service Account
description: "Register a new service account\n\n___Auth Requirement___\n - `administrator` access to the organization.\n"
externalDocs:
description: Managing Service Accounts
url: https://docs.axway.com/bundle/platform-management/page/docs/management_guide/organizations/managing_organizations/managing_service_accounts/index.html
tags:
- client
operationId: client_create
x-publishes:
- platform.client.create
responses:
'200':
description: Response
content:
application/json:
schema:
allOf:
- $ref: '#/components/schemas/Response'
- properties:
result:
type: object
required:
- guid
- name
- org_guid
- roles
- tags
unevaluatedProperties: false
allOf:
- $ref: '#/components/schemas/DefaultFields'
if:
type: object
title: Certificate Auth
required:
- type
properties:
type:
type: string
enum:
- certificate
then:
type: object
additionalProperties: false
properties:
key_id:
type: string
description: Identifier of the public key used for the client.
readOnly: true
privateKey:
type: string
description: Private key in PEM format for use with client certificate authentication. Returned when a key pair is generated.
else:
type: object
title: Secret Auth
additionalProperties: false
properties:
_id:
type: string
description: Document ID of the client.
readOnly: true
deprecated: true
client_id:
type: string
description: Identifier of the client to use for authentication.
guid:
type: string
format: uuid
description: '`guid` of the client.'
name:
type: string
description: Name of the client.
x-no-tags: true
org_guid:
type: string
format: uuid
description: '`guid` of the organization the client belongs to.'
roles:
type: array
description: Array of org-level role identifiers that are assigned to the client.
default: []
items:
type: string
enum:
- administrator
- developer
- auditor
- consumer
- usage_reporter
- api_central_admin
tags:
type: array
description: Tags assigned to the client.
default: []
minItems: 0
uniqueItems: true
maxItems: 30
items:
type: string
maxLength: 40
type:
type: string
description: Authentication method for the client.
default: secret
enum:
- secret
- certificate
examples:
ClientCreate200Example:
summary: Default client_create 200 response
x-microcks-default: true
value: example_value
'400':
description: Bad Request
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
examples:
CLIENT_DUPLICATE_ID:
value:
success: false
description: A client with this Client ID already exists.
code: 400
FORBIDDEN:
value:
$ref: '#/components/examples/FORBIDDEN/value'
NOT_FOUND:
value:
$ref: '#/components/examples/NOT_FOUND/value'
IDP_REQUIRED:
value:
$ref: '#/components/examples/IDP_REQUIRED/value'
USER_NOT_ADMIN:
value:
$ref: '#/components/examples/USER_NOT_ADMIN/value'
LOGIN_REQUIRED:
value:
$ref: '#/components/examples/LOGIN_REQUIRED/value'
PARAM_INVALID:
value:
$ref: '#/components/examples/PARAM_INVALID/value'
PARAM_REQUIRED:
value:
$ref: '#/components/examples/PARAM_REQUIRED/value'
security:
- BearerClient: []
- SessionCookie: []
- BearerUser: []
parameters:
- $ref: '#/components/parameters/fields'
example: example_value
- $ref: '#/components/parameters/exclude_fields'
example: example_value
requestBody:
content:
'*/*':
schema:
properties:
description:
type: string
description: Description for the use of the client.
generateKey:
type: boolean
description: Whether to generate a keypair to use with client certificate authentication.
name:
$ref: '#/components/schemas/Client/properties/name'
org_guid:
$ref: '#/components/schemas/Client/properties/org_guid'
publicKey:
type: string
description: Public key in PEM format for use with client certificate authentication, used to validate JWT issued by the service account and signed by the private key.
roles:
$ref: '#/components/schemas/Client/properties/roles'
secret:
type: string
description: Secret to use when authenticating using client-secret authentication.
tags:
$ref: '#/components/schemas/Client/properties/tags'
teams:
type: array
description: List of teams and roles to assign the client to.
items:
properties:
guid:
$ref: '#/components/schemas/Team/properties/guid'
roles:
$ref: '#/components/schemas/Team/properties/users/items/properties/roles'
type:
$ref: '#/components/schemas/Client/properties/type'
required:
- name
- org_guid
- type
x-microcks-operation:
delay: 0
dispatcher: FALLBACK
get:
summary: Axway Get Service Accounts
description: "Returns all the service accounts for an organization.\n\n___Auth Requirement___\n - Access to the organization. Developer access may be restricted by the organization service accounts access control setting.\n"
externalDocs:
description: Managing Service Accounts
url: https://docs.axway.com/bundle/platform-management/page/docs/management_guide/organizations/managing_organizations/managing_service_accounts/index.html
tags:
- client
operationId: client_find
responses:
'200':
description: Response
content:
application/json:
schema:
allOf:
- $ref: '#/components/schemas/Response'
- properties:
result:
$ref: '#/components/schemas/ClientList'
- properties:
metadata:
$ref: '#/components/schemas/ResponseMetadata'
examples:
ClientFind200Example:
summary: Default client_find 200 response
x-microcks-default: true
value: example_value
'400':
description: Bad Request
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
examples:
FORBIDDEN:
value:
$ref: '#/components/examples/FORBIDDEN/value'
NOT_FOUND:
value:
$ref: '#/components/examples/NOT_FOUND/value'
IDP_REQUIRED:
value:
$ref: '#/components/examples/IDP_REQUIRED/value'
USER_NOT_ADMIN:
value:
$ref: '#/components/examples/USER_NOT_ADMIN/value'
LOGIN_REQUIRED:
value:
$ref: '#/components/examples/LOGIN_REQUIRED/value'
PARAM_INVALID:
value:
$ref: '#/components/examples/PARAM_INVALID/value'
PARAM_REQUIRED:
value:
$ref: '#/components/examples/PARAM_REQUIRED/value'
security:
- BearerClient: []
- SessionCookie: []
- BearerUser: []
parameters:
- $ref: '#/components/parameters/fields'
example: example_value
- $ref: '#/components/parameters/exclude_fields'
example: example_value
- in: query
name: org_id
required: true
schema:
type: string
description: '`guid` or `org_id` of the org whose service accounts to return'
example: 507f1f77bcf86cd799439011
- in: query
name: roles
required: false
schema:
type: array
description: Search for roles
items:
type: string
default: null
example:
- example_value
- in: query
name: term
required: false
schema:
type: string
description: Search term, matches name, email id and role
default: null
example: example_value
- in: query
name: limit
required: false
schema:
type: number
minimum: 0
maximum: 100
description: Number of results per page. Zero will return an empty result, but the matched count in meta will be returned.
example: 1.0
- in: query
name: page
required: false
schema:
type: number
description: Page of results.
default: 1
example: 1.0
- in: query
name: skip
required: false
schema:
type: number
description: Number of items to skip in results, used for pagination.
default: 0
example: 1.0
- in: query
name: sort
required: false
schema:
type: array
description: Field on which to sort results, may pass multiple comma-separated. Prefix the field name with `-` for descending order.
items:
type: string
enum:
- client_id
- name
- role
default:
- name
example:
- client_id
x-microcks-operation:
delay: 0
dispatcher: FALLBACK
/client/{client_id}/json:
parameters: []
get:
summary: Axway Get Service Account JSON Representation
description: "Triggers the download of a JSON representation of a service account\n\n___Auth Requirement___\n - Access to the organization.\n"
externalDocs:
description: Managing Service Accounts
url: https://docs.axway.com/bundle/platform-management/page/docs/management_guide/organizations/managing_organizations/managing_service_accounts/index.html
tags:
- client
operationId: client_download
responses:
'200':
description: Success
content:
application/octet-stream:
schema:
type: object
properties:
clientId:
$ref: '#/components/schemas/Client/properties/client_id'
kid:
$ref: '#/components/schemas/Client/then/properties/key_id'
name:
$ref: '#/components/schemas/Client/properties/name'
publicKey:
type: string
description: Public key in PEM format for use with client certificate authentication, used to validate JWT issued by the service account and signed by the private key.
tokenUrl:
type: string
description: URL of the token endpoint used to generate a JWT for the client.
'400':
description: Bad Request
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
examples:
FORBIDDEN:
value:
$ref: '#/components/examples/FORBIDDEN/value'
NOT_FOUND:
value:
$ref: '#/components/examples/NOT_FOUND/value'
IDP_REQUIRED:
value:
$ref: '#/components/examples/IDP_REQUIRED/value'
USER_NOT_ADMIN:
value:
$ref: '#/components/examples/USER_NOT_ADMIN/value'
LOGIN_REQUIRED:
value:
$ref: '#/components/examples/LOGIN_REQUIRED/value'
PARAM_INVALID:
value:
$ref: '#/components/examples/PARAM_INVALID/value'
PARAM_REQUIRED:
value:
$ref: '#/components/examples/PARAM_REQUIRED/value'
security:
- BearerClient: []
- SessionCookie: []
- BearerUser: []
parameters:
- in: path
name: client_id
required: true
schema:
type: string
description: guid or client_id of the service account
example: 507f1f77bcf86cd799439011
x-microcks-operation:
delay: 0
dispatcher: FALLBACK
/client/{client_id}:
parameters: []
get:
summary: Axway Get a Service Account
description: 'Returns a single service account
___Auth Requirement___
Access to organization the client belongs to.'
externalDocs:
description: Managing Service Accounts
url: https://docs.axway.com/bundle/platform-management/page/docs/management_guide/organizations/managing_organizations/managing_service_accounts/index.html
tags:
- client
operationId: client_findOne
responses:
'200':
description: Response
content:
application/json:
schema:
allOf:
- $ref: '#/components/schemas/Response'
- properties:
result:
type: object
required:
- guid
- name
- org_guid
- roles
- tags
unevaluatedProperties: false
allOf:
- $ref: '#/components/schemas/DefaultFields'
if:
type: object
title: Certificate Auth
required:
- type
properties:
type:
type: string
enum:
- certificate
then:
type: object
additionalProperties: false
properties:
key_id:
type: string
description: Identifier of the public key used for the client.
readOnly: true
publicKey:
type: string
description: Public key in PEM format for use with client certificate authentication, used to validate JWT issued by the service account and signed by the private key.
else:
type: object
title: Secret Auth
additionalProperties: false
properties:
_id:
type: string
description: Document ID of the client.
readOnly: true
deprecated: true
client_id:
type: string
description: Identifier of the client to use for authentication.
guid:
type: string
format: uuid
description: '`guid` of the client.'
name:
type: string
description: Name of the client.
x-no-tags: true
org_guid:
type: string
format: uuid
description: '`guid` of the organization the client belongs to.'
roles:
type: array
description: Array of org-level role identifiers that are assigned to the client.
default: []
items:
type: string
enum:
- administrator
- developer
- auditor
- consumer
- usage_reporter
- api_central_admin
tags:
type: array
description: Tags assigned to the client.
default: []
minItems: 0
uniqueItems: true
maxItems: 30
items:
type: string
maxLength: 40
type:
type: string
description: Authentication method for the client.
default: secret
enum:
- secret
- certificate
description:
type: string
description: Description for the use of the client.
examples:
ClientFindone200Example:
summary: Default client_findOne 200 response
x-microcks-default: true
value: example_value
'400':
description: Bad Request
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
examples:
FORBIDDEN:
value:
$ref: '#/components/examples/FORBIDDEN/value'
NOT_FOUND:
value:
$ref: '#/components/examples/NOT_FOUND/value'
LOGIN_REQUIRED:
value:
$ref: '#/components/examples/LOGIN_REQUIRED/value'
PARAM_INVALID:
value:
$ref: '#/components/examples/PARAM_INVALID/value'
PARAM_REQUIRED:
value:
$ref: '#/components/examples/PARAM_REQUIRED/value'
security:
- BearerClient: []
- SessionCookie: []
- BearerUser: []
parameters:
- $ref: '#/components/parameters/fields'
example: example_value
- $ref: '#/components/parameters/exclude_fields'
example: example_value
- in: path
name: client_id
required: true
schema:
type: string
description: guid or client_id of the service account
example: 507f1f77bcf86cd799439011
- in: header
name: authorization
required: false
schema:
type: string
description: Bearer token in JWT format to authorize the request.
example: example_value
x-microcks-operation:
delay: 0
dispatcher: FALLBACK
delete:
summary: Axway Delete Service Account
description: 'Deletes a service account. This is a destructive and irreversible delete.
___Auth Requirement___
`administrator` role in the organization the client belongs to.'
externalDocs:
description: Managing Service Accounts
url: https://docs.axway.com/bundle/platform-management/page/docs/management_guide/organizations/managing_organizations/managing_service_accounts/index.html
tags:
- client
operationId: client_remove
x-publishes:
- platform.client.remove
responses:
'204':
description: No Content
'400':
description: Bad Request
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
examples:
FORBIDDEN:
value:
$ref: '#/components/examples/FORBIDDEN/value'
NOT_FOUND:
value:
$ref: '#/components/examples/NOT_FOUND/value'
LOGIN_REQUIRED:
value:
$ref: '#/components/examples/LOGIN_REQUIRED/value'
PARAM_INVALID:
value:
$ref: '#/components/examples/PARAM_INVALID/value'
PARAM_REQUIRED:
value:
$ref: '#/components/examples/PARAM_REQUIRED/value'
security:
- BearerClient: []
- SessionCookie: []
- BearerUser: []
parameters:
- in: path
name: client_id
required: true
schema:
type: string
description: guid or client_id of the service account
example: 507f1f77bcf86cd799439011
- in: header
name: authorization
required: false
schema:
type: string
description: Bearer token in JWT format to authorize the request.
example: example_value
x-microcks-operation:
delay: 0
dispatcher: FALLBACK
put:
summary: Axway Update Service Account
description: 'Updates a service account.
___Auth Requirement___
`administrator` role in the organization the client belongs to.'
externalDocs:
description: Managing Service Accounts
url: https://docs.axway.com/bundle/platform-management/page/docs/management_guide/organizations/managing_organizations/managing_service_accounts/index.html
tags:
- client
operationId: client_update
x-publishes:
- platform.client.update
responses:
'200':
description: Response
content:
application/json:
schema:
allOf:
- $ref: '#/components/schemas/Response'
- properties:
result:
type: object
required:
- guid
- name
- org_guid
- roles
- tags
unevaluatedProperties: false
allOf:
- $ref: '#/components/schemas/DefaultFields'
if:
type: object
title: Certificate Auth
required:
- type
properties:
type:
type: string
enum:
- certificate
then:
type: object
additionalProperties: false
properties:
key_id:
type: string
description: Identifier of the public key used for the client.
readOnly: true
privateKey:
type: string
description: Private key in PEM format for use with client certificate authentication. Returned when a key pair is generated.
else:
type: object
title: Secret Auth
additionalProperties: false
properties:
_id:
type: string
description: Document ID of the client.
readOnly: true
deprecated: true
client_id:
type: string
description: Identifier of the client to use for authentication.
guid:
type: string
format: uuid
description: '`guid` of the client.'
name:
type: string
description: Name of the client.
x-no-tags: true
org_guid:
type: string
format: uuid
description: '`guid` of the organization the client belongs to.'
roles:
type: array
description: Array of org-level role identifiers that are assigned to the client.
default: []
items:
type: string
enum:
- administrator
- developer
- auditor
- consumer
- usage_reporter
- api_central_admin
tags:
type: array
description: Tags assigned to the client.
default: []
minItems: 0
uniqueItems: true
maxItems: 30
items:
type: string
maxLength: 40
type:
type: string
description: Authentication method for the client.
default: secret
enum:
- secret
- certificate
examples:
ClientUpdate200Example:
summary: Default client_update 200 response
x-microcks-default: true
value: example_value
'400':
description: Bad Request
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
examples:
CLIENT_DUPLICATE_ID:
value:
success: false
description: A client with this Client ID already exists.
code: 400
CLIENT_MIGRATED:
value:
success: false
description: Legacy clients cannot be modified.
code: 400
FORBIDDEN:
value:
$ref: '#/components/examples/FORBIDDEN/value'
CONFLICTING_TEAM_ROLE:
value:
success: false
description: '"roles" contained an invalid value: The "%s" role assigned in the team "%s" requires one of the following organization roles: %s.'
code: 400
internalCode: 747
REQUIRED_ORG_ROLE:
value:
success: false
description: '"roles" contained an invalid value: The "%s" role requires one of the following organization roles: %s.'
code: 400
internalCode: 747
LOGIN_REQUIRED:
value:
$ref: '#/components/examples/LOGIN_REQUIRED/value'
PARAM_INVALID:
value:
$ref: '#/components/examples/PARAM_INVALID/value'
PARAM_REQUIRED:
value:
$ref: '#/components/examples/PARAM_REQUIRED/value'
security:
- BearerClient: []
- SessionCookie: []
- BearerUser: []
parameters:
- $ref: '#/components/parameters/fields'
example: example_value
- $ref: '#/components/parameters/exclude_fields'
example: example_value
- in: path
name: client_id
required: true
schema:
type: string
description: guid or client_id of the service account
example: 507f1f77bcf86cd799439011
- in: header
name: authorization
required: false
schema:
type: string
description: Bearer token in JWT format to authorize the request.
example: example_value
requestBody:
content:
'*/*':
schema:
properties:
description:
type: string
description: Description for the use of the client.
generateKey:
type: boolean
description: Whether to generate a keypair to use with client certificate authentication.
name:
$ref: '#/components/schemas/Client/properties/name'
publicKey:
type: string
description: Public key in PEM format for use with client certificate authentication, used to validate JWT issued by the service account and signed by the private key.
roles:
$ref: '#/components/schemas/Client/properties/roles'
secret:
type: string
description: Secret to use when authenticating using client-secret authentication.
tags:
$ref: '#/components/schemas/Client/properties/tags'
teams:
type: array
description: List of teams and roles to assign the client to.
items:
properties:
guid:
$ref: '#/components/schemas/Team/properties/guid'
roles:
$ref: '#/components/schemas/Team/properties/users/items/properties/roles'
x-microcks-operation:
delay: 0
dispatcher: FALLBACK
components:
schemas:
Response:
type: object
properties:
success:
type: boolean
description: Whether the request was successful.
example: true
Client:
type: object
required:
- guid
- name
- org_guid
- roles
- tags
unevaluatedProperties: false
allOf:
- $ref: '#/components/schemas/DefaultFields'
if:
type: object
title: Certificate Auth
required:
- type
properties:
type:
type: string
enum:
- certificate
then:
type: object
additionalProperties: false
properties:
key_id:
type: string
description: Identifier of the public key used for the client.
readOnly: true
else:
type: object
title: Secret Auth
additionalProperties: false
properties:
_id:
type: string
description: Document ID of the client.
readOnly: true
deprecated: true
example: 507f1f77bcf86cd799439011
client_id:
type: string
description: Identifier of the client to use for authentication.
example: 507f1f77bcf86cd799439011
guid:
type: string
format: uuid
description: '`guid` of the client.'
example: example_value
name:
type: string
description: Name of the client.
x-no-tags: true
example: Example Name
org_guid:
type: string
format: uuid
description: '`guid` of the organization the client belongs to.'
example: example_value
roles:
type: array
description: Array of org-level role identifiers that are assigned to the client.
default: []
items:
type: string
enum:
- administrator
- developer
- auditor
- consumer
- usage_reporter
- api_central_admin
example:
- administrator
tags:
type: array
description: Tags assigned to the client.
default: []
minItems: 0
uniqueItems: true
maxItems: 30
items:
type: string
maxLength: 40
example:
- example_value
type:
type: string
description: Authentication method for the client.
default: secret
enum:
- secret
- certificate
example: secret
Error:
type: object
allOf:
- $ref: '#/components/schemas/Response'
- type: object
properties:
code:
type: number
description: HTTP status code.
description:
type: string
description: A message describing the error.
internalCode:
type: number
description: Internal code.
ResponseMetadata:
type: object
properties:
count:
type: number
description: Number of results included in the response.
example: 1.0
limit:
type: number
description: Number of results per page.
example: 1.0
matched:
type: number
description: Total number of matched results.
example: 1.0
page:
type: number
description: Page of results.
example: 1.0
pages:
type: number
description: Total number of pages of results.
example: 1.0
skip:
type: number
description: Number of results skipped in pagination.
example: 1.0
ClientList:
title: ClientList
type: array
description: A list of Client objects.
items:
$ref: '#/components/schemas/Client'
DefaultFields:
type: object
unevaluatedProperties: false
properties:
created:
type: string
format: date-time
description: Date created.
readOnly: true
example: '2026-04-21T00:00:00Z'
created_by:
type: object
description: Creator user or client.
readOnly: true
properties:
guid:
type: string
description: '`guid` of the creator.'
type:
type: string
description: Type of the creator.
enum:
- user
- client
example:
guid: example_value
type: user
updated:
type: string
format: date-time
description: Date last updated.
readOnly: true
example: '2026-04-21T00:00:00Z'
Team:
properties:
users:
items:
properties:
roles:
type: array
description: Array of role identifiers that are assigned to the member.
items:
type: string
enum:
- consumer
- subscription_admin
- developer
- catalog_manager
- subscription_approver
- api_access
- insights
- administrator
- marketplace_admin
guid:
type: string
format: uuid
description: '`guid` of the team.'
example: example_value
examples:
USER_NOT_ADMIN:
value:
success: false
description: You are not authorized to perform this action. Please contact your organization administrator.
code: 403
NOT_FOUND:
value:
success: false
description: Resource Not Found
code: 404
FORBIDDEN:
value:
success: false
description: You do not have access privileges to view this content.
code: 403
LOGIN_REQUIRED:
value:
success: false
description: Sign-in Required
code: 401
IDP_REQUIRED:
value:
success: false
description: You must sign in using the Identity Provider configured by your organization's administrators to access this organization.
code: 401
internalCode: 235
PARAM_REQUIRED:
value:
success: false
description: '"%s" is a required parameter.'
code: 400
internalCode: 77
PARAM_INVALID:
value:
success: false
description: '"%s" contained an invalid value.'
code: 400
internalCode: 74
parameters:
fields:
name: fields
in: query
description: A list of fields to include in the response.
schema:
type: array
items:
type: string
exclude_fields:
name: exclude_fields
in: query
description: A list of fields to exclude from the response.
schema:
type: array
items:
type: string
securitySchemes:
AuthToken:
description: Auth token for internal services
type: apiKey
in: header
name: x-auth-token
BearerClient:
description: Service account access token
type: http
scheme: bearer
bearerFormat: jwt
BearerService:
description: Service account access token for an internal client
type: http
scheme: bearer
bearerFormat: jwt
BearerUser:
description: AxwayID user session access token
type: http
scheme: bearer
bearerFormat: jwt
MFA:
description: Multi-factor authentication code
type: apiKey
in: header
name: x-auth-code
OAuth2:
type: oauth2
flows:
clientCredentials:
tokenUrl: https://login.axway.com/auth/realms/Broker/protocol/openid-connect/token
scopes: {}
authorizationCode:
authorizationUrl: https://login.axway.com/auth/realms/Broker/openid-connect/auth
tokenUrl: https://login.axway.com/auth/realms/Broker/openid-connect/token
scopes: {}
implicit:
authorizationUrl: https://login.axway.com/auth/realms/Broker/openid-connect/auth
scopes: {}
Password:
description: User password
type: apiKey
in: header
name: x-auth-password
SessionCookie:
description: Platform session cookie
type: apiKey
in: cookie
name: connect.sid