openapi: 3.2.0
info:
  description: The Auth API is used to manage credentials and tokens for nacelle authentication and authorization.
  title: Auth Token API
  version: 0.1.0
servers:
- url: http://authimilate.api.nacelle.com/v1
- url: https://authimilate.api.nacelle.com/v1
security:
- oauth2: []
tags:
- name: Token
paths:
  /credential/token:
    post:
      description: This will create a new nacelle private token based on the input parameters.
      operationId: createPrivateToken
      parameters:
      - in: header
        name: X-Nacelle-Space-ID
        required: true
        schema:
          type: string
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/TokenRequest'
        required: true
      responses:
        '200':
          description: Token
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Token'
        '400':
          $ref: '#/components/responses/400'
        '401':
          $ref: '#/components/responses/401'
        '403':
          $ref: '#/components/responses/403'
        '404':
          $ref: '#/components/responses/404'
        '429':
          $ref: '#/components/responses/429'
        '500':
          $ref: '#/components/responses/500'
      summary: Create a new nacelle token
      tags:
      - Token
  /issue:
    post:
      operationId: issuePublicToken
      parameters:
      - in: header
        name: X-Nacelle-Space-ID
        required: true
        schema:
          type: string
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/IssueRequest'
        required: true
      responses:
        '200':
          description: IssueResponse
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/IssueResponse'
        '400':
          $ref: '#/components/responses/400'
        '401':
          $ref: '#/components/responses/401'
        '403':
          $ref: '#/components/responses/403'
        '404':
          $ref: '#/components/responses/404'
        '429':
          $ref: '#/components/responses/429'
        '500':
          $ref: '#/components/responses/500'
      summary: Issue a public token
      tags:
      - Token
components:
  responses:
    '401':
      description: Unauthorized
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/error'
    '500':
      description: Internal Server Error
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/error'
    '429':
      description: Rate Limit Exceeded
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/error'
    '404':
      description: Not Found
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/error'
    '403':
      description: Forbidden
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/error'
    '400':
      description: Bad Request
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/error'
  schemas:
    Token:
      properties:
        access_token:
          description: The access token that can be used for authenticated requests.
          example: your_access_token_here
          type: string
          x-go-name: AccessToken
        expires_in:
          description: The duration in seconds for which the access token is valid.
          example: 3600
          format: int64
          type: integer
          x-go-name: ExpiresIn
      title: Token represents the structure of an access token.
      type: object
      x-go-package: github.com/getnacelle/authimilate/services/auth0-mgmt/pkg/model
    IssueRequest:
      properties:
        customer_id:
          description: 'The customer''s unique identifier.

            cust12345'
          type: string
          x-go-name: CustomerID
        segment_id:
          description: The segment's unique identifier.
          example: seg67890
          type: string
          x-go-name: SegmentID
        space_id:
          description: The space's unique identifier.
          example: spaceXYZ
          type: string
          x-go-name: SpaceID
      title: PayloadJWT represents the request to create a new public token.
      type: object
      x-go-name: PayloadJWT
      x-go-package: github.com/getnacelle/authimilate/services/themisproxy/internal/themisclient
    IssueResponse:
      properties:
        expires_in:
          description: The duration in seconds for which the JWT token is valid.
          example: 3600
          format: int64
          type: integer
          x-go-name: ExpiresIn
        token:
          description: The JWT token that can be used for authentication.
          example: token
          type: string
          x-go-name: Token
      title: JWTResponse represents the structure of a JWT token response.
      type: object
      x-go-name: JWTResponse
      x-go-package: github.com/getnacelle/authimilate/services/themisproxy/internal/themisclient
    error:
      properties:
        code:
          description: A numeric error code.
          type: integer
        message:
          description: A description of the reason for the error.
          type: string
      type: object
    TokenRequest:
      properties:
        audience:
          description: The audience for the token.
          example: https://api.example.com/
          type: string
          x-go-name: Audience
        client_id:
          description: The client ID.
          example: exampleClientID
          type: string
          x-go-name: ClientID
        client_secret:
          description: The client secret.
          example: exampleClientSecret
          type: string
          x-go-name: ClientSecret
        grant_type:
          description: The type of grant being used.
          example: client_credentials
          type: string
          x-go-name: GrantType
      title: TokenRequest represents the request to create a new token.
      type: object
      x-go-package: github.com/getnacelle/authimilate/services/auth0-mgmt/pkg/model
  securitySchemes:
    oauth2:
      type: oauth2
      flows:
        clientCredentials:
          tokenUrl: https://authimilate.api.nacelle.com/v1/token
          scopes:
            read: Grants read access
            write: Grants write access
x-provenance:
  method: searched
  source: https://docs.nacelle.com/reference
  harvested: '2026-10-14'
  tool: harvest-readme-openapi.py
  note: Assembled verbatim from the OpenAPI definition ReadMe embeds in each operation page of the provider's developer portal; paths and components merged by API title, nothing authored.
  assembled_from:
  - https://docs.nacelle.com/reference/createcredential.md
  - https://docs.nacelle.com/reference/createprivatetoken.md
  - https://docs.nacelle.com/reference/deletecredential.md
  - https://docs.nacelle.com/reference/issuepublictoken.md
  - https://docs.nacelle.com/reference/listcredentials.md
  - https://docs.nacelle.com/reference/readcredential.md
  - https://docs.nacelle.com/reference/rotatecredentialsecret.md
  merge:
    pages: 7
    deduped: 51
    conflicts_kept_first: 0