openapi: 3.1.0
info:
contact:
email: tmunzer@juniper.net
name: Thomas Munzer
description: '> Version: **2604.1.1**
>
> Date: **May 13, 2026**
NOTE:
Some important API changes will be introduced. Please make sure to read the
announcements
---
## Additional Documentation
* [Mist Automation Guide](https://www.juniper.net/documentation/us/en/software/mist/automation-integration/index.html)
* [Mist Location SDK](https://www.juniper.net/documentation/us/en/software/mist/location-services/topics/concept/mist-how-get-mist-sdk.html)
* [Mist Product Updates](https://www.juniper.net/documentation/us/en/software/mist/product-updates/)
## Helpful Resources
* [API Sandbox and Exercises](https://api-class.mist.com/)
* [Postman Collection, Runners and Webhook Samples](https://www.postman.com/juniper-mist/workspace/mist-systems-s-public-workspace)
* [Python Script Examples](https://github.com/tmunzer/mist_library)
* [API Demo Apps](https://apps.mist-lab.fr/)
* [Juniper Blog](https://blogs.juniper.net/)
## Mist Web Browser Extension:
* Google Chrome, Microsoft Edge and other Chromium-based browser: [Chrome Web Store](https://chromewebstore.google.com/detail/mist-extension/ejhpdcljeamillfhdihkkmoakanpbplh)
* Firefox: [Firefox Add-ons](https://addons.mozilla.org/en-US/firefox/addon/mist-extension/)
---'
license:
name: MIT
url: https://raw.githubusercontent.com/tmunzer/Mist-OAS3.0/main/LICENSE
title: Mist Admins Orgs Marvis Invites API
version: 2604.1.1
x-logo:
altText: Juniper-MistAI
backgroundColor: '#FFFFFF'
url: https://www.mist.com/wp-content/uploads/logo.png
servers:
- description: Mist Global 01
url: https://api.mist.com
- description: Mist Global 02
url: https://api.gc1.mist.com
- description: Mist Global 03
url: https://api.ac2.mist.com
- description: Mist Global 04
url: https://api.gc2.mist.com
- description: Mist Global 05
url: https://api.gc4.mist.com
- description: Mist EMEA 01
url: https://api.eu.mist.com
- description: Mist EMEA 02
url: https://api.gc3.mist.com
- description: Mist EMEA 03
url: https://api.ac6.mist.com
- description: Mist EMEA 04
url: https://api.gc6.mist.com
- description: Mist APAC 01
url: https://api.ac5.mist.com
- description: Mist APAC 02
url: https://api.gc5.mist.com
- description: Mist APAC 03
url: https://api.gc7.mist.com
security:
- apiToken: []
- basicAuth: []
- basicAuth: []
csrfToken: []
tags:
- description: 'Marvis Clients are devices that have the Marvis Android Client installed on them and are connected to a Juniper Mist AP.
They provide detailed data and telemetry about the client''s wireless connection, including information about roaming behavior, connection type, and wireless properties.'
name: Orgs Marvis Invites
paths:
/api/v1/orgs/{org_id}/marvisinvites:
parameters:
- $ref: '#/components/parameters/org_id'
get:
description: List Org Marvis Client Invites
operationId: listOrgMarvisClientInvites
responses:
'200':
$ref: '#/components/responses/MarvisClientsArray'
'400':
$ref: '#/components/responses/HTTP400'
'401':
$ref: '#/components/responses/HTTP401'
'403':
$ref: '#/components/responses/HTTP403'
'404':
$ref: '#/components/responses/HTTP404'
'429':
$ref: '#/components/responses/HTTP429'
summary: listOrgMarvisClientInvites
tags:
- Orgs Marvis Invites
post:
description: Create Org Marvis Client Invite. SDK Invites can be generated for (and belongs to) an Org. They can be generated by an Admin of an Org and can be revoked at anytime.
operationId: createOrgMarvisClientInvite
requestBody:
content:
application/json:
examples:
Example:
value:
location:
enabled: true
name: Handhelds
synthetic_test:
enabled: true
telemetry:
enabled: true
schema:
$ref: '#/components/schemas/marvis_client'
responses:
'200':
$ref: '#/components/responses/MarvisClient'
'400':
$ref: '#/components/responses/HTTP400'
'401':
$ref: '#/components/responses/HTTP401'
'403':
$ref: '#/components/responses/HTTP403'
'404':
$ref: '#/components/responses/HTTP404'
'429':
$ref: '#/components/responses/HTTP429'
summary: createOrgMarvisClientInvite
tags:
- Orgs Marvis Invites
/api/v1/orgs/{org_id}/marvisinvites/{marvisinvite_id}:
parameters:
- $ref: '#/components/parameters/org_id'
- $ref: '#/components/parameters/marvisinvite_id'
delete:
description: Delete Org Marvis Client Invite
operationId: deleteOrgMarvisClientInvite
responses:
'200':
$ref: '#/components/responses/OK'
'400':
$ref: '#/components/responses/HTTP400'
'401':
$ref: '#/components/responses/HTTP401'
'403':
$ref: '#/components/responses/HTTP403'
'404':
$ref: '#/components/responses/HTTP404'
'429':
$ref: '#/components/responses/HTTP429'
summary: deleteOrgMarvisClientInvite
tags:
- Orgs Marvis Invites
get:
description: Get Org Marvis Client Invite
operationId: getOrgMarvisClientInvite
responses:
'200':
$ref: '#/components/responses/MarvisClient'
'400':
$ref: '#/components/responses/HTTP400'
'401':
$ref: '#/components/responses/HTTP401'
'403':
$ref: '#/components/responses/HTTP403'
'404':
$ref: '#/components/responses/HTTP404'
'429':
$ref: '#/components/responses/HTTP429'
summary: getOrgMarvisClientInvite
tags:
- Orgs Marvis Invites
put:
description: Update Org Marvis Client Invite
operationId: updateOrgMarvisClientInvite
requestBody:
content:
application/json:
examples:
Example:
value:
location:
enabled: true
name: Handhelds
synthetic_test:
enabled: true
telemetry:
enabled: true
schema:
$ref: '#/components/schemas/marvis_client'
responses:
'200':
$ref: '#/components/responses/MarvisClient'
'400':
$ref: '#/components/responses/HTTP400'
'401':
$ref: '#/components/responses/HTTP401'
'403':
$ref: '#/components/responses/HTTP403'
'404':
$ref: '#/components/responses/HTTP404'
'429':
$ref: '#/components/responses/HTTP429'
summary: updateOrgMarvisClientInvite
tags:
- Orgs Marvis Invites
components:
schemas:
id:
description: Unique ID of the object instance in the Mist Organization
examples:
- 53f10664-3ce8-4c27-b382-0ef66432349f
format: uuid
readOnly: true
type: string
marvis_client_telemetry:
additionalProperties: false
description: 'Note: some stats are not collected when it''s not connected to Mist infrastructure'
properties:
enabled:
type: boolean
type: object
response_http403:
additionalProperties: false
properties:
detail:
examples:
- You do not have permission to perform this action.
type: string
type: object
marvis_client_location:
additionalProperties: false
properties:
enabled:
type: boolean
type: object
response_http404:
additionalProperties: false
properties:
id:
type: string
type: object
marvis_client:
properties:
disabled:
default: false
type: boolean
enrollment_url:
description: In MDM, add `--enrollment_url ` to the install command
examples:
- marvisclient://api.mist.com/path/to/url
readOnly: true
type: string
id:
$ref: '#/components/schemas/id'
location:
$ref: '#/components/schemas/marvis_client_location'
name:
examples:
- Handhelds
type: string
synthetic_test:
$ref: '#/components/schemas/marvis_client_synthetic_test'
telemetry:
$ref: '#/components/schemas/marvis_client_telemetry'
type: object
marvis_clients:
items:
$ref: '#/components/schemas/marvis_client'
type: array
response_http400:
additionalProperties: false
properties:
detail:
examples:
- 'JSON parse error - Expecting value: line 5 column 8 (char 56)'
type: string
type: object
response_http429:
additionalProperties: false
properties:
detail:
examples:
- Too Many Request. The API Token used for the request reached the 5000 API Calls per hour threshold
type: string
type: object
marvis_client_synthetic_test:
additionalProperties: false
properties:
enabled:
type: boolean
type: object
response_http401:
additionalProperties: false
properties:
detail:
examples:
- Authentication credentials were not provided.
type: string
type: object
examples:
MarvisClientsArrayExample:
value:
- enrollment_url: marvisclient://api.mist.com/path/to/url
id: 3a14098f-b995-7552-b0a4-b8ee39b337a6
name: Handhelds
MarvisClientExample:
value:
enrollment_url: marvisclient://api.mist.com/path/to/url
id: 3a14098f-b995-7552-b0a4-b8ee39b337a6
name: Handhelds
HTTP400Example:
value:
detail: 'JSON parse error - Expecting value: line 5 column 8 (char 56)'
HTTP403Example:
value:
detail: You do not have permission to perform this action.
HTTP429Example:
value:
detail: Too Many Request. The API Token used for the request reached the 5000 API Calls per hour threshold
HTTP401Example:
value:
detail: Authentication credentials were not provided.
parameters:
org_id:
in: path
name: org_id
required: true
schema:
examples:
- 000000ab-00ab-00ab-00ab-0000000000ab
format: uuid
type: string
marvisinvite_id:
in: path
name: marvisinvite_id
required: true
schema:
examples:
- 000000ab-00ab-00ab-00ab-0000000000ab
format: uuid
type: string
responses:
HTTP404:
content:
application/json:
schema:
$ref: '#/components/schemas/response_http404'
application/vnd.api+json:
schema:
$ref: '#/components/schemas/response_http404'
description: Not found. The API endpoint doesn’t exist or resource doesn’ t exist
HTTP429:
content:
application/json:
examples:
Example:
$ref: '#/components/examples/HTTP429Example'
schema:
$ref: '#/components/schemas/response_http429'
application/vnd.api+json:
examples:
Example:
$ref: '#/components/examples/HTTP429Example'
schema:
$ref: '#/components/schemas/response_http429'
description: Too Many Request. The API Token used for the request reached the 5000 API Calls per hour threshold
HTTP403:
content:
application/json:
examples:
Example:
$ref: '#/components/examples/HTTP403Example'
schema:
$ref: '#/components/schemas/response_http403'
application/vnd.api+json:
examples:
Example:
$ref: '#/components/examples/HTTP403Example'
schema:
$ref: '#/components/schemas/response_http403'
description: Permission Denied
MarvisClientsArray:
content:
application/json:
examples:
Example:
$ref: '#/components/examples/MarvisClientsArrayExample'
schema:
$ref: '#/components/schemas/marvis_clients'
application/vnd.api+json:
examples:
Example:
$ref: '#/components/examples/MarvisClientsArrayExample'
schema:
$ref: '#/components/schemas/marvis_clients'
description: Example response
HTTP400:
content:
application/json:
examples:
Example:
$ref: '#/components/examples/HTTP400Example'
schema:
$ref: '#/components/schemas/response_http400'
application/vnd.api+json:
examples:
Example:
$ref: '#/components/examples/HTTP400Example'
schema:
$ref: '#/components/schemas/response_http400'
description: Bad Syntax
OK:
description: OK
HTTP401:
content:
application/json:
examples:
Example:
$ref: '#/components/examples/HTTP401Example'
schema:
$ref: '#/components/schemas/response_http401'
application/vnd.api+json:
examples:
Example:
$ref: '#/components/examples/HTTP401Example'
schema:
$ref: '#/components/schemas/response_http401'
description: Unauthorized
MarvisClient:
content:
application/json:
examples:
Example:
$ref: '#/components/examples/MarvisClientExample'
schema:
$ref: '#/components/schemas/marvis_client'
application/vnd.api+json:
examples:
Example:
$ref: '#/components/examples/MarvisClientExample'
schema:
$ref: '#/components/schemas/marvis_client'
description: Example response
securitySchemes:
apiToken:
description: "Like many other API providers, it’s also possible to generate API Tokens to be used (in HTTP Header) for authentication. An API token ties to a Admin with equal or less privileges.\n\n**Format**:\n API Token value format is `Token {apitoken}`\n\n**Notes**:\n* an API token generated for a specific admin has the same privilege as the user\n* an API token will be automatically removed if not used for > 90 days\n* SSO admins cannot generate these API tokens. Refer Org level API tokens which can have privileges of a specific Org/Site for more information."
in: header
name: Authorization
type: apiKey
basicAuth:
description: While our current UI uses Session / Cookie-based authentication, it’s also possible to do Basic Auth.
scheme: basic
type: http
csrfToken:
description: "This protects the website against [Cross Site Request Forgery](https://en.wikipedia.org/wiki/Cross-site_request_forgery), all the POST / PUT / DELETE APIs needs to have CSRF token in the AJAX Request header when using Login/Password authentication (with or without MFA)\n\n\nThe CSRF Token is sent back by Mist in the Cookies from the Login Response API Call:\n`cookies[csrftoken]` \n\nThe CSRF Token must be added in the HTTP Request Headers:\n```\nX-CSRFToken: vwvBuq9qkqaKh7lu8tNc0gkvBfEaLAmx\n```"
in: header
name: X-CSRFToken
type: apiKey