AuthorizeRequest
response_typeAn OAuth2 parameter, defined by RFC 6749 rather than by a column here.
grant_typeAn OAuth2 parameter, defined by RFC 6749 rather than by a column here.
client_idAn OAuth2 parameter. Its form is the authorisation server's and is defined by RFC 6749 rather than by a column here.
client_secretAn OAuth2 parameter. Its form is the authorisation server's and is defined by RFC 6749 rather than by a column here.
redirect_uriAn OAuth2 parameter, defined by RFC 6749 rather than by a column here.
scopeAn OAuth2 parameter, defined by RFC 6749 rather than by a column here.
stateAn OAuth2 parameter the client chooses and the server echoes; RFC 6749 sets no length and neither does any column here.
code_challengeCode Challenge
A PKCE parameter, defined by RFC 7636 rather than by a column here.
code_challenge_methodCode Challenge Method
A PKCE parameter, defined by RFC 7636 rather than by a column here.
action_idChosen by the caller and echoed back; no column behind this API stores it.
Error
transactionIdThe platform's identifier for this call, for tracing it in the logs.
errorCodeThe platform's own code for the error, and what to match on.
descriptionThe error in words. errorCode is the part to match on; this is for a log or a screen.
messageThe error in words. errorCode is the part to match on.
messageFormatThe message before its arguments were substituted in, which is what groups two errors that differ only by their values.
argumentsThe values substituted into messageFormat.
propertyNameWhich field of the request the error is about.
detailMore about the error than message carries, where there is more.
The individual problems, where one error stands for several.
isTechnicalErrorWhether the failure is the platform's rather than the request's. A technical error is worth retrying; a business one is not.
exceptionTypeThe platform's internal exception class. Useful in a support conversation and not something to match on.
HealthCheckResponse
dateA date and time as a string, in RFC 3339 form: 2026-10-16T14:30:00Z, or with an offset, 2026-10-16T17:30:00+03:00.
resultThe outcome, as the downstream system words it.
IntrospectionRequest
tokenToken
An OAuth2 token, whose form is the authorisation server's rather than a column's.
token_type_hintToken Type Hint
An OAuth2 parameter, defined by RFC 7009 rather than by a column here.
client_idClient Id
An OAuth2 parameter. Its form is the authorisation server's and is defined by RFC 6749 rather than by a column here.
client_secretClient Secret
An OAuth2 parameter. Its form is the authorisation server's and is defined by RFC 6749 rather than by a column here.
IntrospectionResponse
activescopeclient_idusernametoken_typeexpiatjtiissRevocationRequest
tokenToken
An OAuth2 token, whose form is the authorisation server's rather than a column's.
token_type_hintToken Type Hint
An OAuth2 parameter, defined by RFC 7009 rather than by a column here.
client_idClient Id
An OAuth2 parameter. Its form is the authorisation server's and is defined by RFC 6749 rather than by a column here.
client_secretClient Secret
An OAuth2 parameter. Its form is the authorisation server's and is defined by RFC 6749 rather than by a column here.
TokenRequest
grant_typeAn OAuth2 parameter, defined by RFC 6749 rather than by a column here.
scopeAn OAuth2 parameter, defined by RFC 6749 rather than by a column here.
usernameUser Id
An OAuth2 parameter, defined by RFC 6749 rather than by a column here.
passwordThe resource owner's password, for the password grant only. Defined by RFC 6749 rather than by this platform, and ignored by every other grant type.
codeAn OAuth2 authorisation code. Its form is the authorisation server's rather than a column's.
redirect_uriAn OAuth2 parameter, defined by RFC 6749 rather than by a column here.
refresh_tokenAn OAuth2 token, whose form is the authorisation server's rather than a column's.
assertionAn OAuth2 assertion, whose form is the issuing party's rather than a column's.
client_idAn OAuth2 parameter. Its form is the authorisation server's and is defined by RFC 6749 rather than by a column here.
client_secretAn OAuth2 parameter. Its form is the authorisation server's and is defined by RFC 6749 rather than by a column here.
code_verifierA PKCE parameter, defined by RFC 7636 rather than by a column here.
attestation_tokenIssued and checked by the attestation service; its form is that service's rather than a column's.