KosmoKrator

productivity

Logto CLI for AI Agents

Use the Logto CLI from KosmoKrator to call Logto tools headlessly, return JSON, inspect schemas, and automate workflows from coding agents, scripts, and CI.

Logto CLI Setup

Logto can be configured headlessly with `kosmokrator integrations:configure logto`.

Install, configure, and verify 
# Install KosmoKrator first if it is not available on PATH.
curl -fsSL https://raw.githubusercontent.com/OpenCompanyApp/kosmokrator/main/install.sh | bash

# Configure and verify this integration.
kosmokrator integrations:configure logto --set base_url="$LOGTO_BASE_URL" --enable --read allow --write ask --json
kosmokrator integrations:doctor logto --json
kosmokrator integrations:status --json

Credentials

Authentication type: oauth client credentials oauth_client_credentials. Configure credentials once, then reuse the same stored profile from scripts, coding CLIs, Lua, and MCP.

KeyEnv varTypeRequiredLabel
client_id LOGTO_CLIENT_ID Text string no Client ID
client_secret LOGTO_CLIENT_SECRET Secret secret no Client Secret
access_token LOGTO_ACCESS_TOKEN Secret secret no Access Token
base_url LOGTO_BASE_URL URL url yes Logto Base URL
token_url LOGTO_TOKEN_URL URL url no Token URL
resource LOGTO_RESOURCE Text string no Resource
scope LOGTO_SCOPE Text string no Scope

Command Patterns

The generic command is stable across every integration. The provider shortcut is shorter for humans.

Generic CLI call 
kosmo integrations:call logto.logto_add_mfa_verification '{}' --json
Provider shortcut 
kosmo integrations:logto logto_add_mfa_verification '{}' --json

Discovery

These commands return structured output for coding agents that need to inspect capabilities before choosing a function.

Discovery commands 
kosmo integrations:docs logto --json
kosmo integrations:docs logto.logto_add_mfa_verification --json
kosmo integrations:schema logto.logto_add_mfa_verification --json
kosmo integrations:search "Logto" --json
kosmo integrations:list --json

Automation Contexts

The same configured command surface works in these environments. The command does not change unless the host wrapper, credentials, or permissions change.

CI Run integration calls from CI jobs with JSON output, explicit credentials, and predictable exit status. Cron Jobs Schedule repeatable integration workflows from cron while keeping credentials in KosmoKrator config. Shell Scripts Call integration functions from shell scripts with stable JSON input and output. Headless Automation Use KosmoKrator as a non-interactive integration runtime for local automations and wrappers. Coding Agents Let coding agents discover schemas and execute integration functions through CLI commands or MCP.

CLI Functions

Every function below can be called headlessly. Commands are highlighted, copyable, and scroll horizontally when payloads are long.

logto.logto_add_mfa_verification

Add a MFA verification to the user, a logto-verification-id in header is required for checking sensitive permissions.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_add_mfa_verification '{}' --json
Shortcut 
kosmo integrations:logto logto_add_mfa_verification '{}' --json

logto.logto_add_one_time_tokens

Create a new one-time token associated with an email address. The token can be used for verification purposes and has an expiration time.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_add_one_time_tokens '{}' --json
Shortcut 
kosmo integrations:logto logto_add_one_time_tokens '{}' --json

logto.logto_add_organization_applications

Add an application to the organization.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_add_organization_applications '{}' --json
Shortcut 
kosmo integrations:logto logto_add_organization_applications '{}' --json

logto.logto_add_organization_users

Add users as members to the specified organization with the given user IDs.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_add_organization_users '{}' --json
Shortcut 
kosmo integrations:logto logto_add_organization_users '{}' --json

logto.logto_add_user_identities

Add an identity (social identity) to the user, a logto-verification-id in header is required for checking sensitive permissions, and a verification record for the social identity is required.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_add_user_identities '{}' --json
Shortcut 
kosmo integrations:logto logto_add_user_identities '{}' --json

logto.logto_add_user_profile

Adds user profile data to the current experience interaction. - For `Register`: The profile data provided before the identification request will be used to create a new user account. - For `SignIn` and `Register`: The profile data provided after the user is identified will be used to update the user's profile when the interaction is submitted. - `ForgotPassword`: Not supported.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_add_user_profile '{}' --json
Shortcut 
kosmo integrations:logto logto_add_user_profile '{}' --json

logto.logto_assert_saml

The Assertion Consumer Service (ACS) endpoint for Simple Assertion Markup Language (SAML) social connectors. SAML social connectors are deprecated. Use the SSO SAML connector instead.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_assert_saml '{}' --json
Shortcut 
kosmo integrations:logto logto_assert_saml '{}' --json

logto.logto_assert_single_sign_on_saml

The Assertion Consumer Service (ACS) endpoint for Simple Assertion Markup Language (SAML) single sign-on (SSO) connectors. This endpoint is used to complete the SAML SSO authentication flow. It receives the SAML assertion response from the identity provider (IdP) and redirects the user to complete the authentication flow.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_assert_single_sign_on_saml '{}' --json
Shortcut 
kosmo integrations:logto logto_assert_single_sign_on_saml '{}' --json

logto.logto_assign_application_roles

Assign API resource roles to the specified application. The API resource roles will be added to the existing API resource roles.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_assign_application_roles '{}' --json
Shortcut 
kosmo integrations:logto logto_assign_application_roles '{}' --json

logto.logto_assign_organization_roles_to_application

Add a role to the application in the organization.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_assign_organization_roles_to_application '{}' --json
Shortcut 
kosmo integrations:logto logto_assign_organization_roles_to_application '{}' --json

logto.logto_assign_organization_roles_to_applications

Assign roles to applications in the specified organization.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_assign_organization_roles_to_applications '{}' --json
Shortcut 
kosmo integrations:logto logto_assign_organization_roles_to_applications '{}' --json

logto.logto_assign_organization_roles_to_user

Assign roles to a user in the specified organization with the provided data.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_assign_organization_roles_to_user '{}' --json
Shortcut 
kosmo integrations:logto logto_assign_organization_roles_to_user '{}' --json

logto.logto_assign_organization_roles_to_users

Assign roles to user members of the specified organization.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_assign_organization_roles_to_users '{}' --json
Shortcut 
kosmo integrations:logto logto_assign_organization_roles_to_users '{}' --json

logto.logto_assign_user_roles

Assign API resource roles to the user. The roles will be added to the existing roles.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_assign_user_roles '{}' --json
Shortcut 
kosmo integrations:logto logto_assign_user_roles '{}' --json

logto.logto_bind_mfa_verification

Bind new MFA verification to the user profile using the verificationId.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_bind_mfa_verification '{}' --json
Shortcut 
kosmo integrations:logto logto_bind_mfa_verification '{}' --json

logto.logto_bind_passkey

Bind a WebAuthn credential as a passkey for sign-in purposes. Unlike `POST /api/experience/profile/mfa` with `type: WebAuthn`, this endpoint is exclusively for adding a passkey as a sign-in method and does NOT mark the user's optional MFA as enabled.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_bind_passkey '{}' --json
Shortcut 
kosmo integrations:logto logto_bind_passkey '{}' --json

logto.logto_check_password_with_default_sign_in_experience

Check if a password meets the password policy in the sign-in experience settings.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_check_password_with_default_sign_in_experience '{}' --json
Shortcut 
kosmo integrations:logto logto_check_password_with_default_sign_in_experience '{}' --json

logto.logto_cleanup_domains

Clean up custom domains that have been inactive (not verified) for a specified number of days. This uses Cloudflare as the source of truth to determine domain activity.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_cleanup_domains '{}' --json
Shortcut 
kosmo integrations:logto logto_cleanup_domains '{}' --json

logto.logto_create_and_send_mfa_verification_code

Create a new MFA verification code and send it to the user's bound identifier (email or phone). This endpoint automatically uses the user's bound email address or phone number from their profile for MFA verification. The user must be identified before calling this endpoint.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_create_and_send_mfa_verification_code '{}' --json
Shortcut 
kosmo integrations:logto logto_create_and_send_mfa_verification_code '{}' --json

logto.logto_create_and_send_verification_code

Create a new `CodeVerification` record and sends the code to the specified identifier. The code verification can be used to verify the given identifier.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_create_and_send_verification_code '{}' --json
Shortcut 
kosmo integrations:logto logto_create_and_send_verification_code '{}' --json

logto.logto_create_application

Create a new application with the given data.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_create_application '{}' --json
Shortcut 
kosmo integrations:logto logto_create_application '{}' --json

logto.logto_create_application_protected_app_metadata_custom_domain

Add a custom domain to the application. You'll need to setup DNS record later.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_create_application_protected_app_metadata_custom_domain '{}' --json
Shortcut 
kosmo integrations:logto logto_create_application_protected_app_metadata_custom_domain '{}' --json

logto.logto_create_application_secret

Add a new secret for the application.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_create_application_secret '{}' --json
Shortcut 
kosmo integrations:logto logto_create_application_secret '{}' --json

logto.logto_create_application_user_consent_organization

Grant a list of organization access of a user for a application by application id and user id. The user must be a member of all the organizations. Only third-party application needs to be granted access to organizations, all the other applications can request for all the organizations' access by default.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_create_application_user_consent_organization '{}' --json
Shortcut 
kosmo integrations:logto logto_create_application_user_consent_organization '{}' --json

logto.logto_create_application_user_consent_scope

Assign the user consent scopes to an application by application id

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_create_application_user_consent_scope '{}' --json
Shortcut 
kosmo integrations:logto logto_create_application_user_consent_scope '{}' --json

logto.logto_create_connector

Create a connector with the given data.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_create_connector '{}' --json
Shortcut 
kosmo integrations:logto logto_create_connector '{}' --json

logto.logto_create_connector_authorization_uri

Get authorization URI for specified connector by providing redirect URI and randomly generated state.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_create_connector_authorization_uri '{}' --json
Shortcut 
kosmo integrations:logto logto_create_connector_authorization_uri '{}' --json

logto.logto_create_connector_test

Test a passwordless (email or SMS) connector by sending a test message to the given phone number or email address.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_create_connector_test '{}' --json
Shortcut 
kosmo integrations:logto logto_create_connector_test '{}' --json

logto.logto_create_custom_profile_field

Create a custom profile field.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_create_custom_profile_field '{}' --json
Shortcut 
kosmo integrations:logto logto_create_custom_profile_field '{}' --json

logto.logto_create_custom_profile_fields_batch

Create multiple custom profile fields in a single request (max 20 items).

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_create_custom_profile_fields_batch '{}' --json
Shortcut 
kosmo integrations:logto logto_create_custom_profile_fields_batch '{}' --json

logto.logto_create_domain

Create a new domain with the given data. The maximum domain number is 1, once created, can not be modified, you'll have to delete and recreate one.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_create_domain '{}' --json
Shortcut 
kosmo integrations:logto logto_create_domain '{}' --json

logto.logto_create_enterprise_sso_verification

Create a new EnterpriseSSO verification record and return the provider's authorization URI for the given connector.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_create_enterprise_sso_verification '{}' --json
Shortcut 
kosmo integrations:logto logto_create_enterprise_sso_verification '{}' --json

logto.logto_create_hook

Create a new hook with the given data.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_create_hook '{}' --json
Shortcut 
kosmo integrations:logto logto_create_hook '{}' --json

logto.logto_create_hook_test

Test the specified hook with the given events and config.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_create_hook_test '{}' --json
Shortcut 
kosmo integrations:logto logto_create_hook_test '{}' --json

logto.logto_create_new_password_identity_verification

Create a NewPasswordIdentity verification record for the new user registration use. The verification record includes a unique user identifier and a password that can be used to create a new user account.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_create_new_password_identity_verification '{}' --json
Shortcut 
kosmo integrations:logto logto_create_new_password_identity_verification '{}' --json

logto.logto_create_or_replace_totp_mfa_verification

Create or replace the user's TOTP MFA verification with a new authenticator app binding. If the user already has a TOTP verification, it will be replaced; otherwise, a new one will be created. Requires a logto-verification-id header for sensitive permission checks, a valid TOTP secret, and a valid TOTP code generated from the secret.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_create_or_replace_totp_mfa_verification '{}' --json
Shortcut 
kosmo integrations:logto logto_create_or_replace_totp_mfa_verification '{}' --json

logto.logto_create_organization

Create a new organization with the given data.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_create_organization '{}' --json
Shortcut 
kosmo integrations:logto logto_create_organization '{}' --json

logto.logto_create_organization_invitation

Create an organization invitation and optionally send it via email. The tenant should have an email connector configured if you want to send the invitation via email at this point.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_create_organization_invitation '{}' --json
Shortcut 
kosmo integrations:logto logto_create_organization_invitation '{}' --json

logto.logto_create_organization_invitation_message

Resend the invitation message to the invitee.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_create_organization_invitation_message '{}' --json
Shortcut 
kosmo integrations:logto logto_create_organization_invitation_message '{}' --json

logto.logto_create_organization_jit_email_domain

Add a new email domain for just-in-time provisioning of users in the organization.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_create_organization_jit_email_domain '{}' --json
Shortcut 
kosmo integrations:logto logto_create_organization_jit_email_domain '{}' --json

logto.logto_create_organization_jit_role

Add new organization roles that will be assigned to users during just-in-time provisioning.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_create_organization_jit_role '{}' --json
Shortcut 
kosmo integrations:logto logto_create_organization_jit_role '{}' --json

logto.logto_create_organization_jit_sso_connector

Add new enterprise SSO connectors for just-in-time provisioning of users in the organization.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_create_organization_jit_sso_connector '{}' --json
Shortcut 
kosmo integrations:logto logto_create_organization_jit_sso_connector '{}' --json

logto.logto_create_organization_role

Create a new organization role with the given data.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_create_organization_role '{}' --json
Shortcut 
kosmo integrations:logto logto_create_organization_role '{}' --json

logto.logto_create_organization_role_resource_scope

Assign resource scopes to the specified organization role

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_create_organization_role_resource_scope '{}' --json
Shortcut 
kosmo integrations:logto logto_create_organization_role_resource_scope '{}' --json

logto.logto_create_organization_role_scope

Assign organization scopes to the specified organization role

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_create_organization_role_scope '{}' --json
Shortcut 
kosmo integrations:logto logto_create_organization_role_scope '{}' --json

logto.logto_create_organization_scope

Create a new organization scope with the given data.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_create_organization_scope '{}' --json
Shortcut 
kosmo integrations:logto logto_create_organization_scope '{}' --json

logto.logto_create_password_verification

Create and verify a new Password verification record. The verification record can only be created if the provided user credentials are correct.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_create_password_verification '{}' --json
Shortcut 
kosmo integrations:logto logto_create_password_verification '{}' --json

logto.logto_create_resource

Create an API resource in the current tenant.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_create_resource '{}' --json
Shortcut 
kosmo integrations:logto logto_create_resource '{}' --json

logto.logto_create_resource_scope

Create a new scope (permission) for an API resource.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_create_resource_scope '{}' --json
Shortcut 
kosmo integrations:logto logto_create_resource_scope '{}' --json

logto.logto_create_role

Create a new role with the given data.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_create_role '{}' --json
Shortcut 
kosmo integrations:logto logto_create_role '{}' --json

logto.logto_create_role_application

Assign a role to a list of applications. The role must have the type `Application`.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_create_role_application '{}' --json
Shortcut 
kosmo integrations:logto logto_create_role_application '{}' --json

logto.logto_create_role_scope

Link a list of API resource scopes (permissions) to a role. The original linked scopes will be kept.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_create_role_scope '{}' --json
Shortcut 
kosmo integrations:logto logto_create_role_scope '{}' --json

logto.logto_create_role_user

Assign a role to a list of users. The role must have the type `User`.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_create_role_user '{}' --json
Shortcut 
kosmo integrations:logto logto_create_role_user '{}' --json

logto.logto_create_saml_application

Create a new SAML application with the given configuration. A default signing certificate with 3 years lifetime will be automatically created.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_create_saml_application '{}' --json
Shortcut 
kosmo integrations:logto logto_create_saml_application '{}' --json

logto.logto_create_saml_application_secret

Create a new signing certificate for the SAML application.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_create_saml_application_secret '{}' --json
Shortcut 
kosmo integrations:logto logto_create_saml_application_secret '{}' --json

logto.logto_create_saml_authn

Process SAML authentication request using HTTP POST binding.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_create_saml_authn '{}' --json
Shortcut 
kosmo integrations:logto logto_create_saml_authn '{}' --json

logto.logto_create_sign_in_passkey_authentication

Create WebAuthn authentication options for passkey sign-in. The user will be resolved later by the credential during verification.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_create_sign_in_passkey_authentication '{}' --json
Shortcut 
kosmo integrations:logto logto_create_sign_in_passkey_authentication '{}' --json

logto.logto_create_sign_in_passkey_authentication_with_identifier

Create WebAuthn authentication options for passkey sign-in with an identifier. The identifier is used to look up the user's WebAuthn credentials and generate non-discoverable authentication options.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_create_sign_in_passkey_authentication_with_identifier '{}' --json
Shortcut 
kosmo integrations:logto logto_create_sign_in_passkey_authentication_with_identifier '{}' --json

logto.logto_create_social_verification

Create a new SocialVerification record and return the provider's authorization URI for the given connector.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_create_social_verification '{}' --json
Shortcut 
kosmo integrations:logto logto_create_social_verification '{}' --json

logto.logto_create_sso_connector

Create an new SSO connector instance for a given provider.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_create_sso_connector '{}' --json
Shortcut 
kosmo integrations:logto logto_create_sso_connector '{}' --json

logto.logto_create_subject_token

Create a new subject token for the use of impersonating the user.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_create_subject_token '{}' --json
Shortcut 
kosmo integrations:logto logto_create_subject_token '{}' --json

logto.logto_create_totp_secret

Create a new TOTP verification record and generate a new TOTP secret for the user. This secret can be used to bind a new TOTP verification to the user's profile. The verification record must be verified before the secret can be used to bind a new TOTP verification to the user's profile.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_create_totp_secret '{}' --json
Shortcut 
kosmo integrations:logto logto_create_totp_secret '{}' --json

logto.logto_create_user

Create a new user with the given data.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_create_user '{}' --json
Shortcut 
kosmo integrations:logto logto_create_user '{}' --json

logto.logto_create_user_asset

Upload a user asset.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_create_user_asset '{}' --json
Shortcut 
kosmo integrations:logto logto_create_user_asset '{}' --json

logto.logto_create_user_identity

Link authenticated user identity from a social platform to a Logto user. The usage of this API is usually coupled with `POST /connectors/:connectorId/authorization-uri`. With the help of these pair of APIs, you can implement a user profile page with the link social account feature in your application. Note: Currently due to technical limitations, this API does not support the following connectors that rely on Logto interaction session: `@logto/connector-apple`, `@logto/connector-saml`, `@logto/c

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_create_user_identity '{}' --json
Shortcut 
kosmo integrations:logto logto_create_user_identity '{}' --json

logto.logto_create_user_mfa_verification

Create a new MFA verification for a given user ID.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_create_user_mfa_verification '{}' --json
Shortcut 
kosmo integrations:logto logto_create_user_mfa_verification '{}' --json

logto.logto_create_user_personal_access_token

Add a new personal access token for the user.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_create_user_personal_access_token '{}' --json
Shortcut 
kosmo integrations:logto logto_create_user_personal_access_token '{}' --json

logto.logto_create_verification_by_password

Create a verification record by verifying the password.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_create_verification_by_password '{}' --json
Shortcut 
kosmo integrations:logto logto_create_verification_by_password '{}' --json

logto.logto_create_verification_by_social

Create a social verification record and return the authorization URI.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_create_verification_by_social '{}' --json
Shortcut 
kosmo integrations:logto logto_create_verification_by_social '{}' --json

logto.logto_create_verification_by_verification_code

Create a verification record and send the code to the specified identifier. The code verification can be used to verify the given identifier.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_create_verification_by_verification_code '{}' --json
Shortcut 
kosmo integrations:logto logto_create_verification_by_verification_code '{}' --json

logto.logto_create_verification_code

Request a verification code for the provided identifier (email/phone). if you're using email as the identifier, you need to setup your email connector first. if you're using phone as the identifier, you need to setup your SMS connector first.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_create_verification_code '{}' --json
Shortcut 
kosmo integrations:logto logto_create_verification_code '{}' --json

logto.logto_create_web_authn_authentication_verification

Create a new WebAuthn authentication verification record based on the user's existing WebAuthn credential. This verification record can be used to verify the user's WebAuthn credential.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_create_web_authn_authentication_verification '{}' --json
Shortcut 
kosmo integrations:logto logto_create_web_authn_authentication_verification '{}' --json

logto.logto_create_web_authn_registration_verification

Create a new WebAuthn registration verification record. The verification record can be used to bind a new WebAuthn credential to the user's profile.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_create_web_authn_registration_verification '{}' --json
Shortcut 
kosmo integrations:logto logto_create_web_authn_registration_verification '{}' --json

logto.logto_delete_application

Delete application by ID.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_delete_application '{}' --json
Shortcut 
kosmo integrations:logto logto_delete_application '{}' --json

logto.logto_delete_application_legacy_secret

Delete the legacy secret for the application and replace it with a new internal secret. Note: This operation does not "really" delete the legacy secret because it is still needed for internal validation. We may remove the display of the legacy secret (the `secret` field in the application response) in the future.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_delete_application_legacy_secret '{}' --json
Shortcut 
kosmo integrations:logto logto_delete_application_legacy_secret '{}' --json

logto.logto_delete_application_protected_app_metadata_custom_domain

Remove custom domain from the specified application.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_delete_application_protected_app_metadata_custom_domain '{}' --json
Shortcut 
kosmo integrations:logto logto_delete_application_protected_app_metadata_custom_domain '{}' --json

logto.logto_delete_application_role

Remove a API resource role from the specified application.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_delete_application_role '{}' --json
Shortcut 
kosmo integrations:logto logto_delete_application_role '{}' --json

logto.logto_delete_application_secret

Delete a secret for the application by name.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_delete_application_secret '{}' --json
Shortcut 
kosmo integrations:logto logto_delete_application_secret '{}' --json

logto.logto_delete_application_user_consent_organization

Revoke a user's access to an organization for a application by application id, user id and organization id.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_delete_application_user_consent_organization '{}' --json
Shortcut 
kosmo integrations:logto logto_delete_application_user_consent_organization '{}' --json

logto.logto_delete_application_user_consent_scope

Remove the user consent scope from an application by application id, scope type and scope id

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_delete_application_user_consent_scope '{}' --json
Shortcut 
kosmo integrations:logto logto_delete_application_user_consent_scope '{}' --json

logto.logto_delete_captcha_provider

Delete the captcha provider.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_delete_captcha_provider '{}' --json
Shortcut 
kosmo integrations:logto logto_delete_captcha_provider '{}' --json

logto.logto_delete_connector

Delete connector by ID.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_delete_connector '{}' --json
Shortcut 
kosmo integrations:logto logto_delete_connector '{}' --json

logto.logto_delete_custom_phrase

Delete custom phrases for the specified language tag.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_delete_custom_phrase '{}' --json
Shortcut 
kosmo integrations:logto logto_delete_custom_phrase '{}' --json

logto.logto_delete_custom_profile_field_by_name

Delete a custom profile field by name.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_delete_custom_profile_field_by_name '{}' --json
Shortcut 
kosmo integrations:logto logto_delete_custom_profile_field_by_name '{}' --json

logto.logto_delete_domain

Delete domain by ID.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_delete_domain '{}' --json
Shortcut 
kosmo integrations:logto logto_delete_domain '{}' --json

logto.logto_delete_email_template

Delete an email template by its ID.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_delete_email_template '{}' --json
Shortcut 
kosmo integrations:logto logto_delete_email_template '{}' --json

logto.logto_delete_email_templates

Bulk delete email templates by their language tag and template type.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_delete_email_templates '{}' --json
Shortcut 
kosmo integrations:logto logto_delete_email_templates '{}' --json

logto.logto_delete_grant_by_id

Revoke a specific user application grant by grant ID and remove the related session authorization. A logto-verification-id in header is required for revoking grants.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_delete_grant_by_id '{}' --json
Shortcut 
kosmo integrations:logto logto_delete_grant_by_id '{}' --json

logto.logto_delete_hook

Delete hook by ID.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_delete_hook '{}' --json
Shortcut 
kosmo integrations:logto logto_delete_hook '{}' --json

logto.logto_delete_identity

Delete an identity (social identity) from the user, a logto-verification-id in header is required for checking sensitive permissions. The request is rejected if it would remove the user's last identifier.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_delete_identity '{}' --json
Shortcut 
kosmo integrations:logto logto_delete_identity '{}' --json

logto.logto_delete_jwt_customizer

Delete the JWT customizer for the given token type.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_delete_jwt_customizer '{}' --json
Shortcut 
kosmo integrations:logto logto_delete_jwt_customizer '{}' --json

logto.logto_delete_mfa_verification

Delete an MFA verification, a logto-verification-id in header is required for checking sensitive permissions.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_delete_mfa_verification '{}' --json
Shortcut 
kosmo integrations:logto logto_delete_mfa_verification '{}' --json

logto.logto_delete_oidc_key

Delete an OIDC signing key by key type and key ID.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_delete_oidc_key '{}' --json
Shortcut 
kosmo integrations:logto logto_delete_oidc_key '{}' --json

logto.logto_delete_one_time_token

Delete a one-time token by its ID.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_delete_one_time_token '{}' --json
Shortcut 
kosmo integrations:logto logto_delete_one_time_token '{}' --json

logto.logto_delete_organization

Delete organization by ID.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_delete_organization '{}' --json
Shortcut 
kosmo integrations:logto logto_delete_organization '{}' --json

logto.logto_delete_organization_application

Remove an application from the organization.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_delete_organization_application '{}' --json
Shortcut 
kosmo integrations:logto logto_delete_organization_application '{}' --json

logto.logto_delete_organization_application_role

Remove a role from the application in the organization.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_delete_organization_application_role '{}' --json
Shortcut 
kosmo integrations:logto logto_delete_organization_application_role '{}' --json

logto.logto_delete_organization_invitation

Delete an organization invitation by ID.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_delete_organization_invitation '{}' --json
Shortcut 
kosmo integrations:logto logto_delete_organization_invitation '{}' --json

logto.logto_delete_organization_jit_email_domain

Remove an email domain for just-in-time provisioning of users in the organization.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_delete_organization_jit_email_domain '{}' --json
Shortcut 
kosmo integrations:logto logto_delete_organization_jit_email_domain '{}' --json

logto.logto_delete_organization_jit_role

Remove an organization role that will be assigned to users during just-in-time provisioning.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_delete_organization_jit_role '{}' --json
Shortcut 
kosmo integrations:logto logto_delete_organization_jit_role '{}' --json

logto.logto_delete_organization_jit_sso_connector

Remove an enterprise SSO connector for just-in-time provisioning of users in the organization.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_delete_organization_jit_sso_connector '{}' --json
Shortcut 
kosmo integrations:logto logto_delete_organization_jit_sso_connector '{}' --json

logto.logto_delete_organization_role

Delete organization role by ID.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_delete_organization_role '{}' --json
Shortcut 
kosmo integrations:logto logto_delete_organization_role '{}' --json

logto.logto_delete_organization_role_resource_scope

Remove a resource scope assignment from the specified organization role.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_delete_organization_role_resource_scope '{}' --json
Shortcut 
kosmo integrations:logto logto_delete_organization_role_resource_scope '{}' --json

logto.logto_delete_organization_role_scope

Remove a organization scope assignment from the specified organization role.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_delete_organization_role_scope '{}' --json
Shortcut 
kosmo integrations:logto logto_delete_organization_role_scope '{}' --json

logto.logto_delete_organization_scope

Delete organization scope by ID.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_delete_organization_scope '{}' --json
Shortcut 
kosmo integrations:logto logto_delete_organization_scope '{}' --json

logto.logto_delete_organization_user

Remove a user's membership from the specified organization.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_delete_organization_user '{}' --json
Shortcut 
kosmo integrations:logto logto_delete_organization_user '{}' --json

logto.logto_delete_organization_user_role

Remove a role assignment from a user in the specified organization.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_delete_organization_user_role '{}' --json
Shortcut 
kosmo integrations:logto logto_delete_organization_user_role '{}' --json

logto.logto_delete_personal_access_token_post

Delete a token for the user by name.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_delete_personal_access_token_post '{}' --json
Shortcut 
kosmo integrations:logto logto_delete_personal_access_token_post '{}' --json

logto.logto_delete_primary_email

Delete primary email for the user, a logto-verification-id header is required for checking sensitive permissions. The request is rejected if it would remove the user's last identifier.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_delete_primary_email '{}' --json
Shortcut 
kosmo integrations:logto logto_delete_primary_email '{}' --json

logto.logto_delete_primary_phone

Delete primary phone for the user, a logto-verification-id header is required for checking sensitive permissions. The request is rejected if it would remove the user's last identifier.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_delete_primary_phone '{}' --json
Shortcut 
kosmo integrations:logto logto_delete_primary_phone '{}' --json

logto.logto_delete_resource

Delete an API resource by ID.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_delete_resource '{}' --json
Shortcut 
kosmo integrations:logto logto_delete_resource '{}' --json

logto.logto_delete_resource_scope

Delete an API resource scope (permission) from the given resource.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_delete_resource_scope '{}' --json
Shortcut 
kosmo integrations:logto logto_delete_resource_scope '{}' --json

logto.logto_delete_role

Delete a role with the given ID.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_delete_role '{}' --json
Shortcut 
kosmo integrations:logto logto_delete_role '{}' --json

logto.logto_delete_role_application

Remove the role from an application with the given ID.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_delete_role_application '{}' --json
Shortcut 
kosmo integrations:logto logto_delete_role_application '{}' --json

logto.logto_delete_role_scope

Unlink an API resource scope (permission) from a role with the given ID.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_delete_role_scope '{}' --json
Shortcut 
kosmo integrations:logto logto_delete_role_scope '{}' --json

logto.logto_delete_role_user

Remove a role from a user with the given ID.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_delete_role_user '{}' --json
Shortcut 
kosmo integrations:logto logto_delete_role_user '{}' --json

logto.logto_delete_saml_application

Delete a SAML application by ID.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_delete_saml_application '{}' --json
Shortcut 
kosmo integrations:logto logto_delete_saml_application '{}' --json

logto.logto_delete_saml_application_secret

Delete a signing certificate of the SAML application. Active certificates cannot be deleted.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_delete_saml_application_secret '{}' --json
Shortcut 
kosmo integrations:logto logto_delete_saml_application_secret '{}' --json

logto.logto_delete_secret

Delete a secret by its ID.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_delete_secret '{}' --json
Shortcut 
kosmo integrations:logto logto_delete_secret '{}' --json

logto.logto_delete_sentinel_activities

Remove sentinel activity reports based on the provided target value(identifier).Use this endpoint to unblock users who may be locked out due to too many failed authentication attempts.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_delete_sentinel_activities '{}' --json
Shortcut 
kosmo integrations:logto logto_delete_sentinel_activities '{}' --json

logto.logto_delete_session_by_id

Revoke a specific user session by its ID, optionally revoking target associated grants and tokens. A logto-verification-id in header is required for revoking sessions.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_delete_session_by_id '{}' --json
Shortcut 
kosmo integrations:logto logto_delete_session_by_id '{}' --json

logto.logto_delete_sso_connector

Delete an SSO connector by ID.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_delete_sso_connector '{}' --json
Shortcut 
kosmo integrations:logto logto_delete_sso_connector '{}' --json

logto.logto_delete_user

Delete user with the given ID. Note all associated data will be deleted cascadingly.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_delete_user '{}' --json
Shortcut 
kosmo integrations:logto logto_delete_user '{}' --json

logto.logto_delete_user_grant

Revoke a specific grant and its associated token chain by grant ID. Also removes the matching session authorization entry for this grant from the related active session. The grant must belong to the user.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_delete_user_grant '{}' --json
Shortcut 
kosmo integrations:logto logto_delete_user_grant '{}' --json

logto.logto_delete_user_identity

Delete a social identity from the user.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_delete_user_identity '{}' --json
Shortcut 
kosmo integrations:logto logto_delete_user_identity '{}' --json

logto.logto_delete_user_mfa_verification

Delete an MFA verification for the user with the given verification ID. The verification ID must be associated with the given user ID.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_delete_user_mfa_verification '{}' --json
Shortcut 
kosmo integrations:logto logto_delete_user_mfa_verification '{}' --json

logto.logto_delete_user_personal_access_token

Delete a token for the user by name using the legacy path parameter. Deprecated: use the POST /delete endpoint instead to avoid url name encoding issues.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_delete_user_personal_access_token '{}' --json
Shortcut 
kosmo integrations:logto logto_delete_user_personal_access_token '{}' --json

logto.logto_delete_user_role

Remove an API resource role from the user.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_delete_user_role '{}' --json
Shortcut 
kosmo integrations:logto logto_delete_user_role '{}' --json

logto.logto_delete_user_session

Revoke a specific user session by its ID, optionally revoking associated target grants and tokens.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_delete_user_session '{}' --json
Shortcut 
kosmo integrations:logto logto_delete_user_session '{}' --json

logto.logto_generate_backup_codes

Create a new BackupCode verification record with new backup codes generated. This verification record will be used to bind the backup codes to the user's profile.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_generate_backup_codes '{}' --json
Shortcut 
kosmo integrations:logto logto_generate_backup_codes '{}' --json

logto.logto_generate_my_account_backup_codes

Generate backup codes for the user.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_generate_my_account_backup_codes '{}' --json
Shortcut 
kosmo integrations:logto logto_generate_my_account_backup_codes '{}' --json

logto.logto_generate_totp_secret

Generate a TOTP secret for the user.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_generate_totp_secret '{}' --json
Shortcut 
kosmo integrations:logto logto_generate_totp_secret '{}' --json

logto.logto_generate_web_authn_registration_options

Generate WebAuthn registration options for the user to register a new WebAuthn device.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_generate_web_authn_registration_options '{}' --json
Shortcut 
kosmo integrations:logto logto_generate_web_authn_registration_options '{}' --json

logto.logto_get_account_center_settings

Get the account center settings.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_get_account_center_settings '{}' --json
Shortcut 
kosmo integrations:logto logto_get_account_center_settings '{}' --json

logto.logto_get_active_user_counts

Get active user data, including daily active user (DAU), weekly active user (WAU) and monthly active user (MAU). It also includes an array of DAU in the past 30 days.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_get_active_user_counts '{}' --json
Shortcut 
kosmo integrations:logto logto_get_active_user_counts '{}' --json

logto.logto_get_admin_console_config

Get the global configuration object for Logto Console.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_get_admin_console_config '{}' --json
Shortcut 
kosmo integrations:logto logto_get_admin_console_config '{}' --json

logto.logto_get_application

Get application details by ID.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_get_application '{}' --json
Shortcut 
kosmo integrations:logto logto_get_application '{}' --json

logto.logto_get_application_sign_in_experience

Get application level sign-in experience for a given application. - Only branding properties and terms links customization is supported for now. - Only third-party applications can have the sign-in experience customization for now.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_get_application_sign_in_experience '{}' --json
Shortcut 
kosmo integrations:logto logto_get_application_sign_in_experience '{}' --json

logto.logto_get_backup_codes

Get all backup codes for the user with their usage status. Requires identity verification.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_get_backup_codes '{}' --json
Shortcut 
kosmo integrations:logto logto_get_backup_codes '{}' --json

logto.logto_get_captcha_provider

Get the captcha provider, you can only have one captcha provider.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_get_captcha_provider '{}' --json
Shortcut 
kosmo integrations:logto logto_get_captcha_provider '{}' --json

logto.logto_get_connector

Get connector data by ID

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_get_connector '{}' --json
Shortcut 
kosmo integrations:logto logto_get_connector '{}' --json

logto.logto_get_connector_factory

Get connector factory by the given ID.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_get_connector_factory '{}' --json
Shortcut 
kosmo integrations:logto logto_get_connector_factory '{}' --json

logto.logto_get_custom_phrase

Get custom phrases for the specified language tag.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_get_custom_phrase '{}' --json
Shortcut 
kosmo integrations:logto logto_get_custom_phrase '{}' --json

logto.logto_get_custom_profile_field_by_name

Get a custom profile field by name.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_get_custom_profile_field_by_name '{}' --json
Shortcut 
kosmo integrations:logto logto_get_custom_profile_field_by_name '{}' --json

logto.logto_get_domain

Get domain details by ID, by calling this API, the domain status will be synced from remote provider.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_get_domain '{}' --json
Shortcut 
kosmo integrations:logto logto_get_domain '{}' --json

logto.logto_get_email_template

Get the email template by its ID.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_get_email_template '{}' --json
Shortcut 
kosmo integrations:logto logto_get_email_template '{}' --json

logto.logto_get_enabled_sso_connectors

Extract the email domain from the provided email address. Returns all the enabled SSO connectors that match the email domain.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_get_enabled_sso_connectors '{}' --json
Shortcut 
kosmo integrations:logto logto_get_enabled_sso_connectors '{}' --json

logto.logto_get_enterprise_sso_identity_access_token

This API retrieves the access token issued by a third-party enterprise SSO provider for a given SSO connector ID. Access is only available if token storage is enabled for the corresponding connector. When a user authenticates through a SSO provider, Logto automatically stores the provider's tokens in an encrypted form. You can use this API to securely retrieve the stored access token and use it to access third-party APIs on behalf of the user.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_get_enterprise_sso_identity_access_token '{}' --json
Shortcut 
kosmo integrations:logto logto_get_enterprise_sso_identity_access_token '{}' --json

logto.logto_get_grants

Retrieve all active application grants for the user. A logto-verification-id in header is required for checking grant details.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_get_grants '{}' --json
Shortcut 
kosmo integrations:logto logto_get_grants '{}' --json

logto.logto_get_hasura_auth

The `HASURA_GRAPHQL_AUTH_HOOK` endpoint for Hasura auth. Use this endpoint to integrate Hasura's [webhook authentication flow](https://hasura.io/docs/latest/auth/authentication/webhook/).

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_get_hasura_auth '{}' --json
Shortcut 
kosmo integrations:logto logto_get_hasura_auth '{}' --json

logto.logto_get_hook

Get hook details by ID.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_get_hook '{}' --json
Shortcut 
kosmo integrations:logto logto_get_hook '{}' --json

logto.logto_get_id_token_config

Get the ID token extended claims configuration for the tenant. This configuration controls which extended claims (e.g., `custom_data`, `identities`, `roles`, `organizations`, `organization_roles`) are included in ID tokens.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_get_id_token_config '{}' --json
Shortcut 
kosmo integrations:logto logto_get_id_token_config '{}' --json

logto.logto_get_interaction

Get the public interaction data.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_get_interaction '{}' --json
Shortcut 
kosmo integrations:logto logto_get_interaction '{}' --json

logto.logto_get_jwt_customizer

Get the JWT customizer for the given token type.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_get_jwt_customizer '{}' --json
Shortcut 
kosmo integrations:logto logto_get_jwt_customizer '{}' --json

logto.logto_get_log

Get log details by ID.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_get_log '{}' --json
Shortcut 
kosmo integrations:logto logto_get_log '{}' --json

logto.logto_get_logto_config

Retrieve the exposed portion of the current user's logto config. This includes MFA states (enabled, skipped, skipMfaOnSignIn) and passkey sign-in binding states (skipped). Passkey is a WebAuthn MFA factor and shares the same account center field access control as MFA.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_get_logto_config '{}' --json
Shortcut 
kosmo integrations:logto logto_get_logto_config '{}' --json

logto.logto_get_mfa_settings

Get MFA settings for the user. This endpoint requires the Identities scope. Returns current MFA configuration preferences.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_get_mfa_settings '{}' --json
Shortcut 
kosmo integrations:logto logto_get_mfa_settings '{}' --json

logto.logto_get_mfa_verifications

Get MFA verifications for the user.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_get_mfa_verifications '{}' --json
Shortcut 
kosmo integrations:logto logto_get_mfa_verifications '{}' --json

logto.logto_get_new_user_counts

Get new user count in the past 7 days.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_get_new_user_counts '{}' --json
Shortcut 
kosmo integrations:logto logto_get_new_user_counts '{}' --json

logto.logto_get_oidc_keys

Get OIDC signing keys by key type. The actual key will be redacted from the result.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_get_oidc_keys '{}' --json
Shortcut 
kosmo integrations:logto logto_get_oidc_keys '{}' --json

logto.logto_get_oidc_session_config

Get the OIDC session configuration for the tenant.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_get_oidc_session_config '{}' --json
Shortcut 
kosmo integrations:logto logto_get_oidc_session_config '{}' --json

logto.logto_get_one_time_token

Get a one-time token by its ID.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_get_one_time_token '{}' --json
Shortcut 
kosmo integrations:logto logto_get_one_time_token '{}' --json

logto.logto_get_organization

Get organization details by ID.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_get_organization '{}' --json
Shortcut 
kosmo integrations:logto logto_get_organization '{}' --json

logto.logto_get_organization_invitation

Get an organization invitation by ID.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_get_organization_invitation '{}' --json
Shortcut 
kosmo integrations:logto logto_get_organization_invitation '{}' --json

logto.logto_get_organization_role

Get organization role details by ID.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_get_organization_role '{}' --json
Shortcut 
kosmo integrations:logto logto_get_organization_role '{}' --json

logto.logto_get_organization_scope

Get organization scope details by ID.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_get_organization_scope '{}' --json
Shortcut 
kosmo integrations:logto logto_get_organization_scope '{}' --json

logto.logto_get_profile

Get profile for the user.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_get_profile '{}' --json
Shortcut 
kosmo integrations:logto logto_get_profile '{}' --json

logto.logto_get_resource

Get an API resource details by ID.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_get_resource '{}' --json
Shortcut 
kosmo integrations:logto logto_get_resource '{}' --json

logto.logto_get_role

Get role details by ID.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_get_role '{}' --json
Shortcut 
kosmo integrations:logto logto_get_role '{}' --json

logto.logto_get_saml_application

Get SAML application details by ID.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_get_saml_application '{}' --json
Shortcut 
kosmo integrations:logto logto_get_saml_application '{}' --json

logto.logto_get_saml_application_callback

Handle the OIDC callback for SAML application and generate SAML response.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_get_saml_application_callback '{}' --json
Shortcut 
kosmo integrations:logto logto_get_saml_application_callback '{}' --json

logto.logto_get_saml_authn

Process SAML authentication request using HTTP Redirect binding.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_get_saml_authn '{}' --json
Shortcut 
kosmo integrations:logto logto_get_saml_authn '{}' --json

logto.logto_get_sessions

Retrieve all non-expired sessions for the user, including session metadata and interaction details when available. A logto-verification-id in header is required for checking sensitive session details.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_get_sessions '{}' --json
Shortcut 
kosmo integrations:logto logto_get_sessions '{}' --json

logto.logto_get_sign_in_exp

Get the default sign-in experience settings.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_get_sign_in_exp '{}' --json
Shortcut 
kosmo integrations:logto logto_get_sign_in_exp '{}' --json

logto.logto_get_sign_in_experience_config

Get the full sign-in experience configuration.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_get_sign_in_experience_config '{}' --json
Shortcut 
kosmo integrations:logto logto_get_sign_in_experience_config '{}' --json

logto.logto_get_sign_in_experience_phrases

Get localized phrases based on the specified language.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_get_sign_in_experience_phrases '{}' --json
Shortcut 
kosmo integrations:logto logto_get_sign_in_experience_phrases '{}' --json

logto.logto_get_social_identity_access_token

This API retrieves the access token issued by a third-party social provider for a given social target. Access is only available if token storage is enabled for the corresponding social connector. When a user authenticates through a social provider, Logto automatically stores the provider's tokens in an encrypted form. You can use this API to securely retrieve the stored access token and use it to access third-party APIs on behalf of the user.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_get_social_identity_access_token '{}' --json
Shortcut 
kosmo integrations:logto logto_get_social_identity_access_token '{}' --json

logto.logto_get_sso_connector

Get SSO connector data by ID. In addition to the raw SSO connector data, a copy of fetched or parsed IdP configs and a copy of connector provider's data will be attached.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_get_sso_connector '{}' --json
Shortcut 
kosmo integrations:logto logto_get_sso_connector '{}' --json

logto.logto_get_status

The traditional health check API. No authentication needed. > **Note** > Even if 204 is returned, it does not guarantee all the APIs are working properly since they may depend on additional resources or external services.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_get_status '{}' --json
Shortcut 
kosmo integrations:logto logto_get_status '{}' --json

logto.logto_get_swagger_json

The endpoint for the current JSON document. The JSON conforms to the [OpenAPI v3.0.1](https://spec.openapis.org/oas/v3.0.1) (a.k.a. Swagger) specification.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_get_swagger_json '{}' --json
Shortcut 
kosmo integrations:logto logto_get_swagger_json '{}' --json

logto.logto_get_system_application_config

Get the application constants.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_get_system_application_config '{}' --json
Shortcut 
kosmo integrations:logto logto_get_system_application_config '{}' --json

logto.logto_get_total_user_count

Get total user count in the current tenant.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_get_total_user_count '{}' --json
Shortcut 
kosmo integrations:logto logto_get_total_user_count '{}' --json

logto.logto_get_user

Get user data for the given ID.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_get_user '{}' --json
Shortcut 
kosmo integrations:logto logto_get_user '{}' --json

logto.logto_get_user_asset_service_status

Get user assets service status.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_get_user_asset_service_status '{}' --json
Shortcut 
kosmo integrations:logto logto_get_user_asset_service_status '{}' --json

logto.logto_get_user_has_password

Check if the user with the given ID has a password set.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_get_user_has_password '{}' --json
Shortcut 
kosmo integrations:logto logto_get_user_has_password '{}' --json

logto.logto_get_user_identity

This API retrieves the social identity and its associated token set for the specified user from the Logto Secret Vault. The token set will only be available if token storage is enabled for the corresponding social connector.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_get_user_identity '{}' --json
Shortcut 
kosmo integrations:logto logto_get_user_identity '{}' --json

logto.logto_get_user_session

Retrieve a non-expired session for the user by session ID, including session metadata and interaction details when available.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_get_user_session '{}' --json
Shortcut 
kosmo integrations:logto logto_get_user_session '{}' --json

logto.logto_get_user_sso_identity

This API retrieves the user's enterprise SSO identity and associated token set record from the Logto Secret Vault. The token set will only be available if token storage is enabled for the corresponding SSO connector.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_get_user_sso_identity '{}' --json
Shortcut 
kosmo integrations:logto logto_get_user_sso_identity '{}' --json

logto.logto_get_well_known_account_center

Get the default account center configuration.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_get_well_known_account_center '{}' --json
Shortcut 
kosmo integrations:logto logto_get_well_known_account_center '{}' --json

logto.logto_get_well_known_experience

Get the full sign-in experience configuration.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_get_well_known_experience '{}' --json
Shortcut 
kosmo integrations:logto logto_get_well_known_experience '{}' --json

logto.logto_get_well_known_experience_openapi_json

The endpoint for the Experience API JSON document. The JSON conforms to the [OpenAPI v3.0.1](https://spec.openapis.org/oas/v3.0.1) (a.k.a. Swagger) specification.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_get_well_known_experience_openapi_json '{}' --json
Shortcut 
kosmo integrations:logto logto_get_well_known_experience_openapi_json '{}' --json

logto.logto_get_well_known_management_openapi_json

The endpoint for the Management API JSON document. The JSON conforms to the [OpenAPI v3.0.1](https://spec.openapis.org/oas/v3.0.1) (a.k.a. Swagger) specification.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_get_well_known_management_openapi_json '{}' --json
Shortcut 
kosmo integrations:logto logto_get_well_known_management_openapi_json '{}' --json

logto.logto_get_well_known_user_openapi_json

The endpoint for the User API JSON document. The JSON conforms to the [OpenAPI v3.0.1](https://spec.openapis.org/oas/v3.0.1) (a.k.a. Swagger) specification.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_get_well_known_user_openapi_json '{}' --json
Shortcut 
kosmo integrations:logto logto_get_well_known_user_openapi_json '{}' --json

logto.logto_identify_user

This API identifies the user based on the verificationId within the current experience interaction: - `SignIn` and `ForgotPassword` interactions: Verifies the user's identity using the provided `verificationId`. - `Register` interaction: Creates a new user account using the profile data from the current interaction. If a verificationId is provided, the profile data will first be updated with the verification record before creating the account. If not, the account is created directly from the sto

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_identify_user '{}' --json
Shortcut 
kosmo integrations:logto logto_identify_user '{}' --json

logto.logto_init_interaction

Init a new experience interaction with the given interaction type. Any existing interaction data will be cleared.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_init_interaction '{}' --json
Shortcut 
kosmo integrations:logto logto_init_interaction '{}' --json

logto.logto_list_application_organizations

Get the list of organizations that an application is associated with.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_list_application_organizations '{}' --json
Shortcut 
kosmo integrations:logto logto_list_application_organizations '{}' --json

logto.logto_list_application_protected_app_metadata_custom_domains

Get custom domains of the specified application, the application type should be protected app.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_list_application_protected_app_metadata_custom_domains '{}' --json
Shortcut 
kosmo integrations:logto logto_list_application_protected_app_metadata_custom_domains '{}' --json

logto.logto_list_application_roles

Get API resource roles assigned to the specified application with pagination.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_list_application_roles '{}' --json
Shortcut 
kosmo integrations:logto logto_list_application_roles '{}' --json

logto.logto_list_application_secrets

Get all the secrets for the application.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_list_application_secrets '{}' --json
Shortcut 
kosmo integrations:logto logto_list_application_secrets '{}' --json

logto.logto_list_application_user_consent_organizations

List all the user consented organizations for a application by application id and user id.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_list_application_user_consent_organizations '{}' --json
Shortcut 
kosmo integrations:logto logto_list_application_user_consent_organizations '{}' --json

logto.logto_list_application_user_consent_scopes

List all the user consent scopes of an application by application id

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_list_application_user_consent_scopes '{}' --json
Shortcut 
kosmo integrations:logto logto_list_application_user_consent_scopes '{}' --json

logto.logto_list_applications

Get applications that match the given query with pagination.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_list_applications '{}' --json
Shortcut 
kosmo integrations:logto logto_list_applications '{}' --json

logto.logto_list_connector_factories

Get all connector factories data available in Logto.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_list_connector_factories '{}' --json
Shortcut 
kosmo integrations:logto logto_list_connector_factories '{}' --json

logto.logto_list_connectors

Get all connectors in the current tenant.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_list_connectors '{}' --json
Shortcut 
kosmo integrations:logto logto_list_connectors '{}' --json

logto.logto_list_custom_phrases

Get all custom phrases for all languages.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_list_custom_phrases '{}' --json
Shortcut 
kosmo integrations:logto logto_list_custom_phrases '{}' --json

logto.logto_list_custom_profile_fields

Get all custom profile fields.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_list_custom_profile_fields '{}' --json
Shortcut 
kosmo integrations:logto logto_list_custom_profile_fields '{}' --json

logto.logto_list_domains

Get all of your custom domains.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_list_domains '{}' --json
Shortcut 
kosmo integrations:logto logto_list_domains '{}' --json

logto.logto_list_email_templates

Get the list of email templates.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_list_email_templates '{}' --json
Shortcut 
kosmo integrations:logto logto_list_email_templates '{}' --json

logto.logto_list_hook_recent_logs

Get recent logs that match the given query for the specified hook with pagination.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_list_hook_recent_logs '{}' --json
Shortcut 
kosmo integrations:logto logto_list_hook_recent_logs '{}' --json

logto.logto_list_hooks

Get a list of hooks with optional pagination.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_list_hooks '{}' --json
Shortcut 
kosmo integrations:logto logto_list_hooks '{}' --json

logto.logto_list_jwt_customizers

Get all JWT customizers for the tenant.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_list_jwt_customizers '{}' --json
Shortcut 
kosmo integrations:logto logto_list_jwt_customizers '{}' --json

logto.logto_list_logs

Get logs that match the given query with pagination.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_list_logs '{}' --json
Shortcut 
kosmo integrations:logto logto_list_logs '{}' --json

logto.logto_list_one_time_tokens

Get a list of one-time tokens, filtering by email and status, with optional pagination.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_list_one_time_tokens '{}' --json
Shortcut 
kosmo integrations:logto logto_list_one_time_tokens '{}' --json

logto.logto_list_organization_application_roles

Get roles associated with the application in the organization.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_list_organization_application_roles '{}' --json
Shortcut 
kosmo integrations:logto logto_list_organization_application_roles '{}' --json

logto.logto_list_organization_applications

Get applications associated with the organization.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_list_organization_applications '{}' --json
Shortcut 
kosmo integrations:logto logto_list_organization_applications '{}' --json

logto.logto_list_organization_invitations

Get organization invitations.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_list_organization_invitations '{}' --json
Shortcut 
kosmo integrations:logto logto_list_organization_invitations '{}' --json

logto.logto_list_organization_jit_email_domains

Get email domains for just-in-time provisioning of users in the organization.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_list_organization_jit_email_domains '{}' --json
Shortcut 
kosmo integrations:logto logto_list_organization_jit_email_domains '{}' --json

logto.logto_list_organization_jit_roles

Get organization roles that will be assigned to users during just-in-time provisioning.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_list_organization_jit_roles '{}' --json
Shortcut 
kosmo integrations:logto logto_list_organization_jit_roles '{}' --json

logto.logto_list_organization_jit_sso_connectors

Get enterprise SSO connectors for just-in-time provisioning of users in the organization.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_list_organization_jit_sso_connectors '{}' --json
Shortcut 
kosmo integrations:logto logto_list_organization_jit_sso_connectors '{}' --json

logto.logto_list_organization_role_resource_scopes

Get resource scopes that are assigned to the specified organization role with optional pagination.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_list_organization_role_resource_scopes '{}' --json
Shortcut 
kosmo integrations:logto logto_list_organization_role_resource_scopes '{}' --json

logto.logto_list_organization_role_scopes

Get organization scopes that are assigned to the specified organization role with optional pagination.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_list_organization_role_scopes '{}' --json
Shortcut 
kosmo integrations:logto logto_list_organization_role_scopes '{}' --json

logto.logto_list_organization_roles

Get organization roles with pagination.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_list_organization_roles '{}' --json
Shortcut 
kosmo integrations:logto logto_list_organization_roles '{}' --json

logto.logto_list_organization_scopes

Get organization scopes that match with optional pagination.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_list_organization_scopes '{}' --json
Shortcut 
kosmo integrations:logto logto_list_organization_scopes '{}' --json

logto.logto_list_organization_user_roles

Get roles assigned to a user in the specified organization with pagination.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_list_organization_user_roles '{}' --json
Shortcut 
kosmo integrations:logto logto_list_organization_user_roles '{}' --json

logto.logto_list_organization_user_scopes

Get scopes assigned to a user in the specified organization tailored by the organization roles. The scopes are derived from the organization roles assigned to the user.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_list_organization_user_scopes '{}' --json
Shortcut 
kosmo integrations:logto logto_list_organization_user_scopes '{}' --json

logto.logto_list_organization_users

Get users that are members of the specified organization for the given query with pagination.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_list_organization_users '{}' --json
Shortcut 
kosmo integrations:logto logto_list_organization_users '{}' --json

logto.logto_list_organizations

Get organizations that match the given query with pagination.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_list_organizations '{}' --json
Shortcut 
kosmo integrations:logto logto_list_organizations '{}' --json

logto.logto_list_resource_scopes

Get scopes (permissions) defined for an API resource.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_list_resource_scopes '{}' --json
Shortcut 
kosmo integrations:logto logto_list_resource_scopes '{}' --json

logto.logto_list_resources

Get API resources in the current tenant with pagination.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_list_resources '{}' --json
Shortcut 
kosmo integrations:logto logto_list_resources '{}' --json

logto.logto_list_role_applications

Get applications that have the role assigned with pagination.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_list_role_applications '{}' --json
Shortcut 
kosmo integrations:logto logto_list_role_applications '{}' --json

logto.logto_list_role_scopes

Get API resource scopes (permissions) linked with a role.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_list_role_scopes '{}' --json
Shortcut 
kosmo integrations:logto logto_list_role_scopes '{}' --json

logto.logto_list_role_users

Get users who have the role assigned with pagination.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_list_role_users '{}' --json
Shortcut 
kosmo integrations:logto logto_list_role_users '{}' --json

logto.logto_list_roles

Get roles with filters and pagination.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_list_roles '{}' --json
Shortcut 
kosmo integrations:logto logto_list_roles '{}' --json

logto.logto_list_saml_application_metadata

Get the SAML metadata XML for the application.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_list_saml_application_metadata '{}' --json
Shortcut 
kosmo integrations:logto logto_list_saml_application_metadata '{}' --json

logto.logto_list_saml_application_secrets

Get all signing certificates of the SAML application.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_list_saml_application_secrets '{}' --json
Shortcut 
kosmo integrations:logto logto_list_saml_application_secrets '{}' --json

logto.logto_list_sso_connector_providers

Get a complete list of supported SSO connector providers.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_list_sso_connector_providers '{}' --json
Shortcut 
kosmo integrations:logto logto_list_sso_connector_providers '{}' --json

logto.logto_list_sso_connectors

Get SSO connectors with pagination. In addition to the raw SSO connector data, a copy of fetched or parsed IdP configs and a copy of connector provider's data will be attached.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_list_sso_connectors '{}' --json
Shortcut 
kosmo integrations:logto logto_list_sso_connectors '{}' --json

logto.logto_list_user_all_identities

This API retrieves all identities (social and enterprise SSO) for a user, along with their associated token set records from the Logto Secret Vault. The token sets will only be available if token storage is enabled for the corresponding identity connector.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_list_user_all_identities '{}' --json
Shortcut 
kosmo integrations:logto logto_list_user_all_identities '{}' --json

logto.logto_list_user_custom_data

Get custom data for the given user ID.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_list_user_custom_data '{}' --json
Shortcut 
kosmo integrations:logto logto_list_user_custom_data '{}' --json

logto.logto_list_user_grants

Retrieve all non-expired grants of the user. Optionally filter by application type via `appType`; when omitted, grants from all application types are returned.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_list_user_grants '{}' --json
Shortcut 
kosmo integrations:logto logto_list_user_grants '{}' --json

logto.logto_list_user_logto_configs

Retrieve the exposed portion of a user's logto config. Includes MFA states (enabled, skipped, skipMfaOnSignIn) and passkey sign-in states (skipped).

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_list_user_logto_configs '{}' --json
Shortcut 
kosmo integrations:logto logto_list_user_logto_configs '{}' --json

logto.logto_list_user_mfa_verifications

Get a user's existing MFA verifications for a given user ID.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_list_user_mfa_verifications '{}' --json
Shortcut 
kosmo integrations:logto logto_list_user_mfa_verifications '{}' --json

logto.logto_list_user_organizations

Get all organizations that the user is a member of. In each organization object, the user's roles in that organization are included in the `organizationRoles` array.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_list_user_organizations '{}' --json
Shortcut 
kosmo integrations:logto logto_list_user_organizations '{}' --json

logto.logto_list_user_personal_access_tokens

Get all personal access tokens for the user.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_list_user_personal_access_tokens '{}' --json
Shortcut 
kosmo integrations:logto logto_list_user_personal_access_tokens '{}' --json

logto.logto_list_user_roles

Get API resource roles assigned to the user with pagination.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_list_user_roles '{}' --json
Shortcut 
kosmo integrations:logto logto_list_user_roles '{}' --json

logto.logto_list_user_sessions

Retrieve all non-expired sessions for the user, including session metadata and interaction details when available.

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_list_user_sessions '{}' --json
Shortcut 
kosmo integrations:logto logto_list_user_sessions '{}' --json

logto.logto_list_users

Get users with filters and pagination. Logto provides a very flexible way to query users. You can filter users by almost any fields with multiple modes. To learn more about the query syntax, please refer to [Advanced user search](https://docs.logto.io/docs/recipes/manage-users/advanced-user-search/).

Read read
Parameters
none
Generic call 
kosmo integrations:call logto.logto_list_users '{}' --json
Shortcut 
kosmo integrations:logto logto_list_users '{}' --json

logto.logto_mark_mfa_enabled

Mark the user's MFA as enabled for the current interaction and persist in DB user configs upon successful submission.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_mark_mfa_enabled '{}' --json
Shortcut 
kosmo integrations:logto logto_mark_mfa_enabled '{}' --json

logto.logto_replace_application_roles

Update API resource roles assigned to the specified application. This will replace the existing API resource roles.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_replace_application_roles '{}' --json
Shortcut 
kosmo integrations:logto logto_replace_application_roles '{}' --json

logto.logto_replace_application_sign_in_experience

Update application level sign-in experience for the specified application. Create a new sign-in experience if it does not exist. - Only branding properties and terms links customization is supported for now. - Only third-party applications can be customized for now. - Application level sign-in experience customization is optional, if provided, it will override the default branding and terms links.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_replace_application_sign_in_experience '{}' --json
Shortcut 
kosmo integrations:logto logto_replace_application_sign_in_experience '{}' --json

logto.logto_replace_application_user_consent_organizations

Grant a list of organization access of a user for a application by application id and user id. The user must be a member of all the organizations. Only third-party application needs to be granted access to organizations, all the other applications can request for all the organizations' access by default.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_replace_application_user_consent_organizations '{}' --json
Shortcut 
kosmo integrations:logto logto_replace_application_user_consent_organizations '{}' --json

logto.logto_replace_custom_phrase

Upsert custom phrases for the specified language tag. Upsert means that if the custom phrases already exist, they will be updated. Otherwise, they will be created.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_replace_custom_phrase '{}' --json
Shortcut 
kosmo integrations:logto logto_replace_custom_phrase '{}' --json

logto.logto_replace_email_templates

Create or replace a list of email templates. If an email template with the same language tag and template type already exists, its details will be updated.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_replace_email_templates '{}' --json
Shortcut 
kosmo integrations:logto logto_replace_email_templates '{}' --json

logto.logto_replace_one_time_token_status

Update the status of a one-time token by its ID. This can be used to mark the token as consumed or expired.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_replace_one_time_token_status '{}' --json
Shortcut 
kosmo integrations:logto logto_replace_one_time_token_status '{}' --json

logto.logto_replace_organization_application_roles

Replace all roles associated with the application in the organization with the given data.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_replace_organization_application_roles '{}' --json
Shortcut 
kosmo integrations:logto logto_replace_organization_application_roles '{}' --json

logto.logto_replace_organization_applications

Replace all applications associated with the organization with the given data.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_replace_organization_applications '{}' --json
Shortcut 
kosmo integrations:logto logto_replace_organization_applications '{}' --json

logto.logto_replace_organization_invitation_status

Update the status of an organization invitation by ID.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_replace_organization_invitation_status '{}' --json
Shortcut 
kosmo integrations:logto logto_replace_organization_invitation_status '{}' --json

logto.logto_replace_organization_jit_email_domains

Replace all just-in-time provisioning email domains for the organization with the given data.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_replace_organization_jit_email_domains '{}' --json
Shortcut 
kosmo integrations:logto logto_replace_organization_jit_email_domains '{}' --json

logto.logto_replace_organization_jit_roles

Replace all organization roles that will be assigned to users during just-in-time provisioning with the given data.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_replace_organization_jit_roles '{}' --json
Shortcut 
kosmo integrations:logto logto_replace_organization_jit_roles '{}' --json

logto.logto_replace_organization_jit_sso_connectors

Replace all enterprise SSO connectors for just-in-time provisioning of users in the organization with the given data.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_replace_organization_jit_sso_connectors '{}' --json
Shortcut 
kosmo integrations:logto logto_replace_organization_jit_sso_connectors '{}' --json

logto.logto_replace_organization_role_resource_scopes

Replace all resource scopes that are assigned to the specified organization role with the given resource scopes. This effectively removes all existing organization scope assignments and replaces them with the new ones.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_replace_organization_role_resource_scopes '{}' --json
Shortcut 
kosmo integrations:logto logto_replace_organization_role_resource_scopes '{}' --json

logto.logto_replace_organization_role_scopes

Replace all organization scopes that are assigned to the specified organization role with the given organization scopes. This effectively removes all existing organization scope assignments and replaces them with the new ones.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_replace_organization_role_scopes '{}' --json
Shortcut 
kosmo integrations:logto logto_replace_organization_role_scopes '{}' --json

logto.logto_replace_organization_user_roles

Update roles assigned to a user in the specified organization with the provided data.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_replace_organization_user_roles '{}' --json
Shortcut 
kosmo integrations:logto logto_replace_organization_user_roles '{}' --json

logto.logto_replace_organization_users

Replace all user members for the specified organization with the given users. This effectively removing all existing user memberships in the organization and adding the new users as members.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_replace_organization_users '{}' --json
Shortcut 
kosmo integrations:logto logto_replace_organization_users '{}' --json

logto.logto_replace_user_identity

Directly update a social identity of the user.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_replace_user_identity '{}' --json
Shortcut 
kosmo integrations:logto logto_replace_user_identity '{}' --json

logto.logto_replace_user_roles

Update API resource roles assigned to the user. This will replace the existing roles.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_replace_user_roles '{}' --json
Shortcut 
kosmo integrations:logto logto_replace_user_roles '{}' --json

logto.logto_reset_user_password

Reset the user's password. (`ForgotPassword` interaction only)

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_reset_user_password '{}' --json
Shortcut 
kosmo integrations:logto logto_reset_user_password '{}' --json

logto.logto_rotate_oidc_keys

A new key will be generated and prepend to the list of keys. Only two recent keys will be kept. The oldest key will be automatically removed if there are more than two keys.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_rotate_oidc_keys '{}' --json
Shortcut 
kosmo integrations:logto logto_rotate_oidc_keys '{}' --json

logto.logto_skip_mfa_binding_flow

Skip MFA verification binding flow. If the MFA is enabled in the sign-in experience settings and marked as `UserControlled`, the user can skip the MFA verification binding flow by calling this API.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_skip_mfa_binding_flow '{}' --json
Shortcut 
kosmo integrations:logto logto_skip_mfa_binding_flow '{}' --json

logto.logto_skip_mfa_suggestion

Mark the optional additional MFA binding suggestion as skipped for the current interaction. When multiple MFA factors are enabled and only an email/phone factor is configured, a suggestion to add another factor may be shown; this endpoint records the choice to skip.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_skip_mfa_suggestion '{}' --json
Shortcut 
kosmo integrations:logto logto_skip_mfa_suggestion '{}' --json

logto.logto_skip_passkey_binding

Skip passkey binding flow. The users can temporarily skip the passkey binding flow by calling this API during sign-up. On sign-in, the skip flag will be persisted to user config.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_skip_passkey_binding '{}' --json
Shortcut 
kosmo integrations:logto logto_skip_passkey_binding '{}' --json

logto.logto_submit_interaction

Submit the current interaction. - Submit the verified user identity to the OIDC provider for further authentication (SignIn and Register). - Update the user's profile data if any (SignIn and Register). - Reset the password and clear all the interaction records (ForgotPassword).

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_submit_interaction '{}' --json
Shortcut 
kosmo integrations:logto logto_submit_interaction '{}' --json

logto.logto_test_jwt_customizer

Test the JWT customizer script with the given sample context and sample token payload.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_test_jwt_customizer '{}' --json
Shortcut 
kosmo integrations:logto logto_test_jwt_customizer '{}' --json

logto.logto_update_account_center_settings

Update the account center settings with the provided settings.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_update_account_center_settings '{}' --json
Shortcut 
kosmo integrations:logto logto_update_account_center_settings '{}' --json

logto.logto_update_admin_console_config

Update the global configuration object for Logto Console. This method performs a partial update.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_update_admin_console_config '{}' --json
Shortcut 
kosmo integrations:logto logto_update_admin_console_config '{}' --json

logto.logto_update_application

Update application details by ID with the given data.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_update_application '{}' --json
Shortcut 
kosmo integrations:logto logto_update_application '{}' --json

logto.logto_update_application_custom_data

Update the custom data of an application.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_update_application_custom_data '{}' --json
Shortcut 
kosmo integrations:logto logto_update_application_custom_data '{}' --json

logto.logto_update_application_secret

Update a secret for the application by name.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_update_application_secret '{}' --json
Shortcut 
kosmo integrations:logto logto_update_application_secret '{}' --json

logto.logto_update_captcha_provider

Update the captcha provider with the provided settings.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_update_captcha_provider '{}' --json
Shortcut 
kosmo integrations:logto logto_update_captcha_provider '{}' --json

logto.logto_update_connector

Update connector by ID with the given data. This methods performs a partial update.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_update_connector '{}' --json
Shortcut 
kosmo integrations:logto logto_update_connector '{}' --json

logto.logto_update_custom_profile_field_by_name

Update a custom profile field by name.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_update_custom_profile_field_by_name '{}' --json
Shortcut 
kosmo integrations:logto logto_update_custom_profile_field_by_name '{}' --json

logto.logto_update_custom_profile_fields_sie_order

Update the display order of the custom profile fields in Sign-in Experience.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_update_custom_profile_fields_sie_order '{}' --json
Shortcut 
kosmo integrations:logto logto_update_custom_profile_fields_sie_order '{}' --json

logto.logto_update_email_template_details

Update the details of an email template by its ID.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_update_email_template_details '{}' --json
Shortcut 
kosmo integrations:logto logto_update_email_template_details '{}' --json

logto.logto_update_hook

Update hook details by ID with the given data.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_update_hook '{}' --json
Shortcut 
kosmo integrations:logto logto_update_hook '{}' --json

logto.logto_update_hook_signing_key

Update the signing key for the specified hook.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_update_hook_signing_key '{}' --json
Shortcut 
kosmo integrations:logto logto_update_hook_signing_key '{}' --json

logto.logto_update_interaction_event

Update the current experience interaction event to the given event type. This API is used to switch the interaction event between `SignIn` and `Register`, while keeping all the verification records data.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_update_interaction_event '{}' --json
Shortcut 
kosmo integrations:logto logto_update_interaction_event '{}' --json

logto.logto_update_jwt_customizer

Update the JWT customizer for the given token type.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_update_jwt_customizer '{}' --json
Shortcut 
kosmo integrations:logto logto_update_jwt_customizer '{}' --json

logto.logto_update_logto_config

Update the exposed portion of the current user's logto config. Supports updating MFA states (enabled, skipped, skipMfaOnSignIn) and passkey sign-in binding states (skipped). Passkey is a WebAuthn MFA factor and shares the same account center field access control as MFA.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_update_logto_config '{}' --json
Shortcut 
kosmo integrations:logto logto_update_logto_config '{}' --json

logto.logto_update_mfa_settings

Update MFA settings for the user. This endpoint requires identity verification and the Identities scope. Controls whether MFA verification is required during sign-in when the user has MFA configured.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_update_mfa_settings '{}' --json
Shortcut 
kosmo integrations:logto logto_update_mfa_settings '{}' --json

logto.logto_update_mfa_verification_name

Update a MFA verification name, a logto-verification-id in header is required for checking sensitive permissions. Only WebAuthn is supported for now.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_update_mfa_verification_name '{}' --json
Shortcut 
kosmo integrations:logto logto_update_mfa_verification_name '{}' --json

logto.logto_update_oidc_session_config

Update the OIDC session configuration for the tenant. This method performs a partial update. If the configuration does not exist, it will be created.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_update_oidc_session_config '{}' --json
Shortcut 
kosmo integrations:logto logto_update_oidc_session_config '{}' --json

logto.logto_update_organization

Update organization details by ID with the given data.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_update_organization '{}' --json
Shortcut 
kosmo integrations:logto logto_update_organization '{}' --json

logto.logto_update_organization_role

Update organization role details by ID with the given data.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_update_organization_role '{}' --json
Shortcut 
kosmo integrations:logto logto_update_organization_role '{}' --json

logto.logto_update_organization_scope

Update organization scope details by ID with the given data.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_update_organization_scope '{}' --json
Shortcut 
kosmo integrations:logto logto_update_organization_scope '{}' --json

logto.logto_update_other_profile

Update other profile for the user, only the fields that are passed in will be updated, to update the address, the user must have the address scope.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_update_other_profile '{}' --json
Shortcut 
kosmo integrations:logto logto_update_other_profile '{}' --json

logto.logto_update_password

Update password for the user, a logto-verification-id in header is required for checking sensitive permissions.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_update_password '{}' --json
Shortcut 
kosmo integrations:logto logto_update_password '{}' --json

logto.logto_update_personal_access_token_name

Update a token for the user by name.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_update_personal_access_token_name '{}' --json
Shortcut 
kosmo integrations:logto logto_update_personal_access_token_name '{}' --json

logto.logto_update_primary_email

Update primary email for the user, a logto-verification-id in header is required for checking sensitive permissions, and a new identifier verification record is required for the new email ownership verification.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_update_primary_email '{}' --json
Shortcut 
kosmo integrations:logto logto_update_primary_email '{}' --json

logto.logto_update_primary_phone

Update primary phone for the user, a logto-verification-id in header is required for checking sensitive permissions, and a new identifier verification record is required for the new phone ownership verification.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_update_primary_phone '{}' --json
Shortcut 
kosmo integrations:logto logto_update_primary_phone '{}' --json

logto.logto_update_profile

Update profile for the user, only the fields that are passed in will be updated. Updating or deleting username requires a logto-verification-id header for checking sensitive permissions. Removing any sign-in identifier, including username, is rejected if it would remove the user's last identifier.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_update_profile '{}' --json
Shortcut 
kosmo integrations:logto logto_update_profile '{}' --json

logto.logto_update_resource

Update an API resource details by ID with the given data. This method performs a partial update.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_update_resource '{}' --json
Shortcut 
kosmo integrations:logto logto_update_resource '{}' --json

logto.logto_update_resource_is_default

Set an API resource as the default resource for the current tenant. Each tenant can have only one default API resource. If an API resource is set as default, the previously set default API resource will be set as non-default. See [this section](https://docs.logto.io/docs/references/resources/#default-api) for more information.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_update_resource_is_default '{}' --json
Shortcut 
kosmo integrations:logto logto_update_resource_is_default '{}' --json

logto.logto_update_resource_scope

Update an API resource scope (permission) for the given resource. This method performs a partial update.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_update_resource_scope '{}' --json
Shortcut 
kosmo integrations:logto logto_update_resource_scope '{}' --json

logto.logto_update_role

Update role details. This method performs a partial update.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_update_role '{}' --json
Shortcut 
kosmo integrations:logto logto_update_role '{}' --json

logto.logto_update_saml_application

Update SAML application details by ID.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_update_saml_application '{}' --json
Shortcut 
kosmo integrations:logto logto_update_saml_application '{}' --json

logto.logto_update_saml_application_secret

Update the status of a signing certificate.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_update_saml_application_secret '{}' --json
Shortcut 
kosmo integrations:logto logto_update_saml_application_secret '{}' --json

logto.logto_update_sign_in_exp

Update the default sign-in experience settings with the provided data.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_update_sign_in_exp '{}' --json
Shortcut 
kosmo integrations:logto logto_update_sign_in_exp '{}' --json

logto.logto_update_social_identity_access_token_by_verification_id

This API updates the token storage for a social identity by a given social verification ID. It is used to fetch a new access token from the social provider and store it securely in Logto.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_update_social_identity_access_token_by_verification_id '{}' --json
Shortcut 
kosmo integrations:logto logto_update_social_identity_access_token_by_verification_id '{}' --json

logto.logto_update_sso_connector

Update an SSO connector by ID. This method performs a partial update.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_update_sso_connector '{}' --json
Shortcut 
kosmo integrations:logto logto_update_sso_connector '{}' --json

logto.logto_update_user

Update user data for the given ID. This method performs a partial update.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_update_user '{}' --json
Shortcut 
kosmo integrations:logto logto_update_user '{}' --json

logto.logto_update_user_custom_data

Update custom data for the given user ID. This method performs a partial update of the custom data object.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_update_user_custom_data '{}' --json
Shortcut 
kosmo integrations:logto logto_update_user_custom_data '{}' --json

logto.logto_update_user_is_suspended

Update user suspension status for the given ID.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_update_user_is_suspended '{}' --json
Shortcut 
kosmo integrations:logto logto_update_user_is_suspended '{}' --json

logto.logto_update_user_logto_configs

Update the exposed portion of a user's logto config. Supports updating MFA states (enabled, skipped, skipMfaOnSignIn) and passkey sign-in states (skipped). All fields are optional - only provided fields will be updated.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_update_user_logto_configs '{}' --json
Shortcut 
kosmo integrations:logto logto_update_user_logto_configs '{}' --json

logto.logto_update_user_password

Update user password for the given ID.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_update_user_password '{}' --json
Shortcut 
kosmo integrations:logto logto_update_user_password '{}' --json

logto.logto_update_user_personal_access_token

Update a token for the user by name using the legacy path parameter. Deprecated: use the PATCH /personal-access-tokens endpoint instead to avoid url name encoding issues.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_update_user_personal_access_token '{}' --json
Shortcut 
kosmo integrations:logto logto_update_user_personal_access_token '{}' --json

logto.logto_update_user_profile

Update profile for the given user ID. This method performs a partial update of the profile object.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_update_user_profile '{}' --json
Shortcut 
kosmo integrations:logto logto_update_user_profile '{}' --json

logto.logto_upload_custom_ui_assets

Upload a zip file containing custom web assets such as HTML, CSS, and JavaScript files, then replace the default sign-in experience with the custom UI assets.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_upload_custom_ui_assets '{}' --json
Shortcut 
kosmo integrations:logto logto_upload_custom_ui_assets '{}' --json

logto.logto_upsert_id_token_config

Create or update the ID token extended claims configuration for the tenant. This controls which extended claims are included in ID tokens when the corresponding scopes are requested.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_upsert_id_token_config '{}' --json
Shortcut 
kosmo integrations:logto logto_upsert_id_token_config '{}' --json

logto.logto_upsert_jwt_customizer

Create or update a JWT customizer for the given token type.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_upsert_jwt_customizer '{}' --json
Shortcut 
kosmo integrations:logto logto_upsert_jwt_customizer '{}' --json

logto.logto_verify_backup_code

Create a new BackupCode verification record and verify the provided backup code against the user's backup codes. The verification record will be marked as verified if the code is correct.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_verify_backup_code '{}' --json
Shortcut 
kosmo integrations:logto logto_verify_backup_code '{}' --json

logto.logto_verify_enterprise_sso_verification

Verify the SSO authorization response data and get the user's identity from the SSO provider.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_verify_enterprise_sso_verification '{}' --json
Shortcut 
kosmo integrations:logto logto_verify_enterprise_sso_verification '{}' --json

logto.logto_verify_mfa_verification_code

Verify the provided MFA verification code. The verification code must have been sent using the MFA verification code endpoint. This endpoint verifies the code against the user's bound identifier and marks the verification as complete if successful.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_verify_mfa_verification_code '{}' --json
Shortcut 
kosmo integrations:logto logto_verify_mfa_verification_code '{}' --json

logto.logto_verify_one_time_token

Verify a one-time token associated with an email address. If the token is valid and not expired, it will be marked as consumed.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_verify_one_time_token '{}' --json
Shortcut 
kosmo integrations:logto logto_verify_one_time_token '{}' --json

logto.logto_verify_one_time_token_verification

Verify the provided one-time token against the user's email. If successful, the verification record will be marked as verified.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_verify_one_time_token_verification '{}' --json
Shortcut 
kosmo integrations:logto logto_verify_one_time_token_verification '{}' --json

logto.logto_verify_sign_in_passkey_authentication

Verify the passkey sign-in WebAuthn authentication response against the stored authentication challenge. When `verificationId` is provided, it verifies against the challenge generated by the identifier-based authentication endpoint. When omitted, it verifies against the preflight authentication options stored in the interaction. Upon successful verification, the verification record will be marked as verified and the user will be resolved by the credential if not provided earlier.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_verify_sign_in_passkey_authentication '{}' --json
Shortcut 
kosmo integrations:logto logto_verify_sign_in_passkey_authentication '{}' --json

logto.logto_verify_social_verification

Verify the social authorization response data and get the user's identity data from the social provider.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_verify_social_verification '{}' --json
Shortcut 
kosmo integrations:logto logto_verify_social_verification '{}' --json

logto.logto_verify_totp_verification

Verifies the provided TOTP code against the new created TOTP secret or the existing TOTP secret. If a verificationId is provided, this API will verify the code against the TOTP secret that is associated with the verification record. Otherwise, a new TOTP verification record will be created and verified against the user's existing TOTP secret.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_verify_totp_verification '{}' --json
Shortcut 
kosmo integrations:logto logto_verify_totp_verification '{}' --json

logto.logto_verify_user_password

Test if the given password matches the user's password.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_verify_user_password '{}' --json
Shortcut 
kosmo integrations:logto logto_verify_user_password '{}' --json

logto.logto_verify_verification_by_social

Verify a social verification record by callback connector data, and save the user information to the record.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_verify_verification_by_social '{}' --json
Shortcut 
kosmo integrations:logto logto_verify_verification_by_social '{}' --json

logto.logto_verify_verification_by_verification_code

Verify the provided verification code against the identifier. If successful, the verification record will be marked as verified.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_verify_verification_by_verification_code '{}' --json
Shortcut 
kosmo integrations:logto logto_verify_verification_by_verification_code '{}' --json

logto.logto_verify_verification_code

Verify a verification code for a specified identifier. if you're using email as the identifier, you need to setup your email connector first. if you're using phone as the identifier, you need to setup your SMS connector first.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_verify_verification_code '{}' --json
Shortcut 
kosmo integrations:logto logto_verify_verification_code '{}' --json

logto.logto_verify_verification_code_verification

Verify the provided verification code against the user's identifier. If successful, the verification record will be marked as verified.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_verify_verification_code_verification '{}' --json
Shortcut 
kosmo integrations:logto logto_verify_verification_code_verification '{}' --json

logto.logto_verify_web_authn_authentication_verification

Verifies the WebAuthn authentication response against the user's authentication challenge. Upon successful verification, the verification record will be marked as verified.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_verify_web_authn_authentication_verification '{}' --json
Shortcut 
kosmo integrations:logto logto_verify_web_authn_authentication_verification '{}' --json

logto.logto_verify_web_authn_registration

Verify the WebAuthn registration by the user's response.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_verify_web_authn_registration '{}' --json
Shortcut 
kosmo integrations:logto logto_verify_web_authn_registration '{}' --json

logto.logto_verify_web_authn_registration_verification

Verify the WebAuthn registration response against the user's WebAuthn registration challenge. If the response is valid, the WebAuthn registration record will be marked as verified.

Write write
Parameters
none
Generic call 
kosmo integrations:call logto.logto_verify_web_authn_registration_verification '{}' --json
Shortcut 
kosmo integrations:logto logto_verify_web_authn_registration_verification '{}' --json

Function Schemas

Use these parameter tables when building CLI payloads without calling integrations:schema first.

logto.logto_add_mfa_verification 0 parameters
Schema command 
kosmo integrations:schema logto.logto_add_mfa_verification --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_add_one_time_tokens 0 parameters
Schema command 
kosmo integrations:schema logto.logto_add_one_time_tokens --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_add_organization_applications 0 parameters
Schema command 
kosmo integrations:schema logto.logto_add_organization_applications --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_add_organization_users 0 parameters
Schema command 
kosmo integrations:schema logto.logto_add_organization_users --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_add_user_identities 0 parameters
Schema command 
kosmo integrations:schema logto.logto_add_user_identities --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_add_user_profile 0 parameters
Schema command 
kosmo integrations:schema logto.logto_add_user_profile --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_assert_saml 0 parameters
Schema command 
kosmo integrations:schema logto.logto_assert_saml --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_assert_single_sign_on_saml 0 parameters
Schema command 
kosmo integrations:schema logto.logto_assert_single_sign_on_saml --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_assign_application_roles 0 parameters
Schema command 
kosmo integrations:schema logto.logto_assign_application_roles --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_assign_organization_roles_to_application 0 parameters
Schema command 
kosmo integrations:schema logto.logto_assign_organization_roles_to_application --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_assign_organization_roles_to_applications 0 parameters
Schema command 
kosmo integrations:schema logto.logto_assign_organization_roles_to_applications --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_assign_organization_roles_to_user 0 parameters
Schema command 
kosmo integrations:schema logto.logto_assign_organization_roles_to_user --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_assign_organization_roles_to_users 0 parameters
Schema command 
kosmo integrations:schema logto.logto_assign_organization_roles_to_users --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_assign_user_roles 0 parameters
Schema command 
kosmo integrations:schema logto.logto_assign_user_roles --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_bind_mfa_verification 0 parameters
Schema command 
kosmo integrations:schema logto.logto_bind_mfa_verification --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_bind_passkey 0 parameters
Schema command 
kosmo integrations:schema logto.logto_bind_passkey --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_check_password_with_default_sign_in_experience 0 parameters
Schema command 
kosmo integrations:schema logto.logto_check_password_with_default_sign_in_experience --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_cleanup_domains 0 parameters
Schema command 
kosmo integrations:schema logto.logto_cleanup_domains --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_create_and_send_mfa_verification_code 0 parameters
Schema command 
kosmo integrations:schema logto.logto_create_and_send_mfa_verification_code --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_create_and_send_verification_code 0 parameters
Schema command 
kosmo integrations:schema logto.logto_create_and_send_verification_code --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_create_application 0 parameters
Schema command 
kosmo integrations:schema logto.logto_create_application --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_create_application_protected_app_metadata_custom_domain 0 parameters
Schema command 
kosmo integrations:schema logto.logto_create_application_protected_app_metadata_custom_domain --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_create_application_secret 0 parameters
Schema command 
kosmo integrations:schema logto.logto_create_application_secret --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_create_connector 0 parameters
Schema command 
kosmo integrations:schema logto.logto_create_connector --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_create_connector_authorization_uri 0 parameters
Schema command 
kosmo integrations:schema logto.logto_create_connector_authorization_uri --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_create_connector_test 0 parameters
Schema command 
kosmo integrations:schema logto.logto_create_connector_test --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_create_custom_profile_field 0 parameters
Schema command 
kosmo integrations:schema logto.logto_create_custom_profile_field --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_create_custom_profile_fields_batch 0 parameters
Schema command 
kosmo integrations:schema logto.logto_create_custom_profile_fields_batch --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_create_domain 0 parameters
Schema command 
kosmo integrations:schema logto.logto_create_domain --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_create_enterprise_sso_verification 0 parameters
Schema command 
kosmo integrations:schema logto.logto_create_enterprise_sso_verification --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_create_hook 0 parameters
Schema command 
kosmo integrations:schema logto.logto_create_hook --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_create_hook_test 0 parameters
Schema command 
kosmo integrations:schema logto.logto_create_hook_test --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_create_new_password_identity_verification 0 parameters
Schema command 
kosmo integrations:schema logto.logto_create_new_password_identity_verification --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_create_or_replace_totp_mfa_verification 0 parameters
Schema command 
kosmo integrations:schema logto.logto_create_or_replace_totp_mfa_verification --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_create_organization 0 parameters
Schema command 
kosmo integrations:schema logto.logto_create_organization --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_create_organization_invitation 0 parameters
Schema command 
kosmo integrations:schema logto.logto_create_organization_invitation --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_create_organization_invitation_message 0 parameters
Schema command 
kosmo integrations:schema logto.logto_create_organization_invitation_message --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_create_organization_jit_email_domain 0 parameters
Schema command 
kosmo integrations:schema logto.logto_create_organization_jit_email_domain --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_create_organization_jit_role 0 parameters
Schema command 
kosmo integrations:schema logto.logto_create_organization_jit_role --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_create_organization_jit_sso_connector 0 parameters
Schema command 
kosmo integrations:schema logto.logto_create_organization_jit_sso_connector --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_create_organization_role 0 parameters
Schema command 
kosmo integrations:schema logto.logto_create_organization_role --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_create_organization_role_resource_scope 0 parameters
Schema command 
kosmo integrations:schema logto.logto_create_organization_role_resource_scope --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_create_organization_role_scope 0 parameters
Schema command 
kosmo integrations:schema logto.logto_create_organization_role_scope --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_create_organization_scope 0 parameters
Schema command 
kosmo integrations:schema logto.logto_create_organization_scope --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_create_password_verification 0 parameters
Schema command 
kosmo integrations:schema logto.logto_create_password_verification --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_create_resource 0 parameters
Schema command 
kosmo integrations:schema logto.logto_create_resource --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_create_resource_scope 0 parameters
Schema command 
kosmo integrations:schema logto.logto_create_resource_scope --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_create_role 0 parameters
Schema command 
kosmo integrations:schema logto.logto_create_role --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_create_role_application 0 parameters
Schema command 
kosmo integrations:schema logto.logto_create_role_application --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_create_role_scope 0 parameters
Schema command 
kosmo integrations:schema logto.logto_create_role_scope --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_create_role_user 0 parameters
Schema command 
kosmo integrations:schema logto.logto_create_role_user --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_create_saml_application 0 parameters
Schema command 
kosmo integrations:schema logto.logto_create_saml_application --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_create_saml_application_secret 0 parameters
Schema command 
kosmo integrations:schema logto.logto_create_saml_application_secret --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_create_saml_authn 0 parameters
Schema command 
kosmo integrations:schema logto.logto_create_saml_authn --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_create_sign_in_passkey_authentication 0 parameters
Schema command 
kosmo integrations:schema logto.logto_create_sign_in_passkey_authentication --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_create_sign_in_passkey_authentication_with_identifier 0 parameters
Schema command 
kosmo integrations:schema logto.logto_create_sign_in_passkey_authentication_with_identifier --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_create_social_verification 0 parameters
Schema command 
kosmo integrations:schema logto.logto_create_social_verification --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_create_sso_connector 0 parameters
Schema command 
kosmo integrations:schema logto.logto_create_sso_connector --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_create_subject_token 0 parameters
Schema command 
kosmo integrations:schema logto.logto_create_subject_token --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_create_totp_secret 0 parameters
Schema command 
kosmo integrations:schema logto.logto_create_totp_secret --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_create_user 0 parameters
Schema command 
kosmo integrations:schema logto.logto_create_user --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_create_user_asset 0 parameters
Schema command 
kosmo integrations:schema logto.logto_create_user_asset --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_create_user_identity 0 parameters
Schema command 
kosmo integrations:schema logto.logto_create_user_identity --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_create_user_mfa_verification 0 parameters
Schema command 
kosmo integrations:schema logto.logto_create_user_mfa_verification --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_create_user_personal_access_token 0 parameters
Schema command 
kosmo integrations:schema logto.logto_create_user_personal_access_token --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_create_verification_by_password 0 parameters
Schema command 
kosmo integrations:schema logto.logto_create_verification_by_password --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_create_verification_by_social 0 parameters
Schema command 
kosmo integrations:schema logto.logto_create_verification_by_social --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_create_verification_by_verification_code 0 parameters
Schema command 
kosmo integrations:schema logto.logto_create_verification_by_verification_code --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_create_verification_code 0 parameters
Schema command 
kosmo integrations:schema logto.logto_create_verification_code --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_create_web_authn_authentication_verification 0 parameters
Schema command 
kosmo integrations:schema logto.logto_create_web_authn_authentication_verification --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_create_web_authn_registration_verification 0 parameters
Schema command 
kosmo integrations:schema logto.logto_create_web_authn_registration_verification --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_delete_application 0 parameters
Schema command 
kosmo integrations:schema logto.logto_delete_application --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_delete_application_legacy_secret 0 parameters
Schema command 
kosmo integrations:schema logto.logto_delete_application_legacy_secret --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_delete_application_protected_app_metadata_custom_domain 0 parameters
Schema command 
kosmo integrations:schema logto.logto_delete_application_protected_app_metadata_custom_domain --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_delete_application_role 0 parameters
Schema command 
kosmo integrations:schema logto.logto_delete_application_role --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_delete_application_secret 0 parameters
Schema command 
kosmo integrations:schema logto.logto_delete_application_secret --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_delete_captcha_provider 0 parameters
Schema command 
kosmo integrations:schema logto.logto_delete_captcha_provider --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_delete_connector 0 parameters
Schema command 
kosmo integrations:schema logto.logto_delete_connector --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_delete_custom_phrase 0 parameters
Schema command 
kosmo integrations:schema logto.logto_delete_custom_phrase --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_delete_custom_profile_field_by_name 0 parameters
Schema command 
kosmo integrations:schema logto.logto_delete_custom_profile_field_by_name --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_delete_domain 0 parameters
Schema command 
kosmo integrations:schema logto.logto_delete_domain --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_delete_email_template 0 parameters
Schema command 
kosmo integrations:schema logto.logto_delete_email_template --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_delete_email_templates 0 parameters
Schema command 
kosmo integrations:schema logto.logto_delete_email_templates --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_delete_grant_by_id 0 parameters
Schema command 
kosmo integrations:schema logto.logto_delete_grant_by_id --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_delete_hook 0 parameters
Schema command 
kosmo integrations:schema logto.logto_delete_hook --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_delete_identity 0 parameters
Schema command 
kosmo integrations:schema logto.logto_delete_identity --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_delete_jwt_customizer 0 parameters
Schema command 
kosmo integrations:schema logto.logto_delete_jwt_customizer --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_delete_mfa_verification 0 parameters
Schema command 
kosmo integrations:schema logto.logto_delete_mfa_verification --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_delete_oidc_key 0 parameters
Schema command 
kosmo integrations:schema logto.logto_delete_oidc_key --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_delete_one_time_token 0 parameters
Schema command 
kosmo integrations:schema logto.logto_delete_one_time_token --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_delete_organization 0 parameters
Schema command 
kosmo integrations:schema logto.logto_delete_organization --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_delete_organization_application 0 parameters
Schema command 
kosmo integrations:schema logto.logto_delete_organization_application --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_delete_organization_application_role 0 parameters
Schema command 
kosmo integrations:schema logto.logto_delete_organization_application_role --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_delete_organization_invitation 0 parameters
Schema command 
kosmo integrations:schema logto.logto_delete_organization_invitation --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_delete_organization_jit_email_domain 0 parameters
Schema command 
kosmo integrations:schema logto.logto_delete_organization_jit_email_domain --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_delete_organization_jit_role 0 parameters
Schema command 
kosmo integrations:schema logto.logto_delete_organization_jit_role --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_delete_organization_jit_sso_connector 0 parameters
Schema command 
kosmo integrations:schema logto.logto_delete_organization_jit_sso_connector --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_delete_organization_role 0 parameters
Schema command 
kosmo integrations:schema logto.logto_delete_organization_role --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_delete_organization_role_resource_scope 0 parameters
Schema command 
kosmo integrations:schema logto.logto_delete_organization_role_resource_scope --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_delete_organization_role_scope 0 parameters
Schema command 
kosmo integrations:schema logto.logto_delete_organization_role_scope --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_delete_organization_scope 0 parameters
Schema command 
kosmo integrations:schema logto.logto_delete_organization_scope --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_delete_organization_user 0 parameters
Schema command 
kosmo integrations:schema logto.logto_delete_organization_user --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_delete_organization_user_role 0 parameters
Schema command 
kosmo integrations:schema logto.logto_delete_organization_user_role --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_delete_personal_access_token_post 0 parameters
Schema command 
kosmo integrations:schema logto.logto_delete_personal_access_token_post --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_delete_primary_email 0 parameters
Schema command 
kosmo integrations:schema logto.logto_delete_primary_email --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_delete_primary_phone 0 parameters
Schema command 
kosmo integrations:schema logto.logto_delete_primary_phone --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_delete_resource 0 parameters
Schema command 
kosmo integrations:schema logto.logto_delete_resource --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_delete_resource_scope 0 parameters
Schema command 
kosmo integrations:schema logto.logto_delete_resource_scope --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_delete_role 0 parameters
Schema command 
kosmo integrations:schema logto.logto_delete_role --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_delete_role_application 0 parameters
Schema command 
kosmo integrations:schema logto.logto_delete_role_application --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_delete_role_scope 0 parameters
Schema command 
kosmo integrations:schema logto.logto_delete_role_scope --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_delete_role_user 0 parameters
Schema command 
kosmo integrations:schema logto.logto_delete_role_user --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_delete_saml_application 0 parameters
Schema command 
kosmo integrations:schema logto.logto_delete_saml_application --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_delete_saml_application_secret 0 parameters
Schema command 
kosmo integrations:schema logto.logto_delete_saml_application_secret --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_delete_secret 0 parameters
Schema command 
kosmo integrations:schema logto.logto_delete_secret --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_delete_sentinel_activities 0 parameters
Schema command 
kosmo integrations:schema logto.logto_delete_sentinel_activities --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_delete_session_by_id 0 parameters
Schema command 
kosmo integrations:schema logto.logto_delete_session_by_id --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_delete_sso_connector 0 parameters
Schema command 
kosmo integrations:schema logto.logto_delete_sso_connector --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_delete_user 0 parameters
Schema command 
kosmo integrations:schema logto.logto_delete_user --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_delete_user_grant 0 parameters
Schema command 
kosmo integrations:schema logto.logto_delete_user_grant --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_delete_user_identity 0 parameters
Schema command 
kosmo integrations:schema logto.logto_delete_user_identity --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_delete_user_mfa_verification 0 parameters
Schema command 
kosmo integrations:schema logto.logto_delete_user_mfa_verification --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_delete_user_personal_access_token 0 parameters
Schema command 
kosmo integrations:schema logto.logto_delete_user_personal_access_token --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_delete_user_role 0 parameters
Schema command 
kosmo integrations:schema logto.logto_delete_user_role --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_delete_user_session 0 parameters
Schema command 
kosmo integrations:schema logto.logto_delete_user_session --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_generate_backup_codes 0 parameters
Schema command 
kosmo integrations:schema logto.logto_generate_backup_codes --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_generate_my_account_backup_codes 0 parameters
Schema command 
kosmo integrations:schema logto.logto_generate_my_account_backup_codes --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_generate_totp_secret 0 parameters
Schema command 
kosmo integrations:schema logto.logto_generate_totp_secret --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_generate_web_authn_registration_options 0 parameters
Schema command 
kosmo integrations:schema logto.logto_generate_web_authn_registration_options --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_get_account_center_settings 0 parameters
Schema command 
kosmo integrations:schema logto.logto_get_account_center_settings --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_get_active_user_counts 0 parameters
Schema command 
kosmo integrations:schema logto.logto_get_active_user_counts --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_get_admin_console_config 0 parameters
Schema command 
kosmo integrations:schema logto.logto_get_admin_console_config --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_get_application 0 parameters
Schema command 
kosmo integrations:schema logto.logto_get_application --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_get_application_sign_in_experience 0 parameters
Schema command 
kosmo integrations:schema logto.logto_get_application_sign_in_experience --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_get_backup_codes 0 parameters
Schema command 
kosmo integrations:schema logto.logto_get_backup_codes --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_get_captcha_provider 0 parameters
Schema command 
kosmo integrations:schema logto.logto_get_captcha_provider --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_get_connector 0 parameters
Schema command 
kosmo integrations:schema logto.logto_get_connector --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_get_connector_factory 0 parameters
Schema command 
kosmo integrations:schema logto.logto_get_connector_factory --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_get_custom_phrase 0 parameters
Schema command 
kosmo integrations:schema logto.logto_get_custom_phrase --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_get_custom_profile_field_by_name 0 parameters
Schema command 
kosmo integrations:schema logto.logto_get_custom_profile_field_by_name --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_get_domain 0 parameters
Schema command 
kosmo integrations:schema logto.logto_get_domain --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_get_email_template 0 parameters
Schema command 
kosmo integrations:schema logto.logto_get_email_template --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_get_enabled_sso_connectors 0 parameters
Schema command 
kosmo integrations:schema logto.logto_get_enabled_sso_connectors --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_get_enterprise_sso_identity_access_token 0 parameters
Schema command 
kosmo integrations:schema logto.logto_get_enterprise_sso_identity_access_token --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_get_grants 0 parameters
Schema command 
kosmo integrations:schema logto.logto_get_grants --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_get_hasura_auth 0 parameters
Schema command 
kosmo integrations:schema logto.logto_get_hasura_auth --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_get_hook 0 parameters
Schema command 
kosmo integrations:schema logto.logto_get_hook --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_get_id_token_config 0 parameters
Schema command 
kosmo integrations:schema logto.logto_get_id_token_config --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_get_interaction 0 parameters
Schema command 
kosmo integrations:schema logto.logto_get_interaction --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_get_jwt_customizer 0 parameters
Schema command 
kosmo integrations:schema logto.logto_get_jwt_customizer --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_get_log 0 parameters
Schema command 
kosmo integrations:schema logto.logto_get_log --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_get_logto_config 0 parameters
Schema command 
kosmo integrations:schema logto.logto_get_logto_config --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_get_mfa_settings 0 parameters
Schema command 
kosmo integrations:schema logto.logto_get_mfa_settings --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_get_mfa_verifications 0 parameters
Schema command 
kosmo integrations:schema logto.logto_get_mfa_verifications --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_get_new_user_counts 0 parameters
Schema command 
kosmo integrations:schema logto.logto_get_new_user_counts --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_get_oidc_keys 0 parameters
Schema command 
kosmo integrations:schema logto.logto_get_oidc_keys --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_get_oidc_session_config 0 parameters
Schema command 
kosmo integrations:schema logto.logto_get_oidc_session_config --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_get_one_time_token 0 parameters
Schema command 
kosmo integrations:schema logto.logto_get_one_time_token --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_get_organization 0 parameters
Schema command 
kosmo integrations:schema logto.logto_get_organization --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_get_organization_invitation 0 parameters
Schema command 
kosmo integrations:schema logto.logto_get_organization_invitation --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_get_organization_role 0 parameters
Schema command 
kosmo integrations:schema logto.logto_get_organization_role --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_get_organization_scope 0 parameters
Schema command 
kosmo integrations:schema logto.logto_get_organization_scope --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_get_profile 0 parameters
Schema command 
kosmo integrations:schema logto.logto_get_profile --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_get_resource 0 parameters
Schema command 
kosmo integrations:schema logto.logto_get_resource --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_get_role 0 parameters
Schema command 
kosmo integrations:schema logto.logto_get_role --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_get_saml_application 0 parameters
Schema command 
kosmo integrations:schema logto.logto_get_saml_application --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_get_saml_application_callback 0 parameters
Schema command 
kosmo integrations:schema logto.logto_get_saml_application_callback --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_get_saml_authn 0 parameters
Schema command 
kosmo integrations:schema logto.logto_get_saml_authn --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_get_sessions 0 parameters
Schema command 
kosmo integrations:schema logto.logto_get_sessions --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_get_sign_in_exp 0 parameters
Schema command 
kosmo integrations:schema logto.logto_get_sign_in_exp --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_get_sign_in_experience_config 0 parameters
Schema command 
kosmo integrations:schema logto.logto_get_sign_in_experience_config --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_get_sign_in_experience_phrases 0 parameters
Schema command 
kosmo integrations:schema logto.logto_get_sign_in_experience_phrases --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_get_social_identity_access_token 0 parameters
Schema command 
kosmo integrations:schema logto.logto_get_social_identity_access_token --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_get_sso_connector 0 parameters
Schema command 
kosmo integrations:schema logto.logto_get_sso_connector --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_get_status 0 parameters
Schema command 
kosmo integrations:schema logto.logto_get_status --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_get_swagger_json 0 parameters
Schema command 
kosmo integrations:schema logto.logto_get_swagger_json --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_get_system_application_config 0 parameters
Schema command 
kosmo integrations:schema logto.logto_get_system_application_config --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_get_total_user_count 0 parameters
Schema command 
kosmo integrations:schema logto.logto_get_total_user_count --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_get_user 0 parameters
Schema command 
kosmo integrations:schema logto.logto_get_user --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_get_user_asset_service_status 0 parameters
Schema command 
kosmo integrations:schema logto.logto_get_user_asset_service_status --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_get_user_has_password 0 parameters
Schema command 
kosmo integrations:schema logto.logto_get_user_has_password --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_get_user_identity 0 parameters
Schema command 
kosmo integrations:schema logto.logto_get_user_identity --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_get_user_session 0 parameters
Schema command 
kosmo integrations:schema logto.logto_get_user_session --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_get_user_sso_identity 0 parameters
Schema command 
kosmo integrations:schema logto.logto_get_user_sso_identity --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_get_well_known_account_center 0 parameters
Schema command 
kosmo integrations:schema logto.logto_get_well_known_account_center --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_get_well_known_experience 0 parameters
Schema command 
kosmo integrations:schema logto.logto_get_well_known_experience --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_get_well_known_experience_openapi_json 0 parameters
Schema command 
kosmo integrations:schema logto.logto_get_well_known_experience_openapi_json --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_get_well_known_management_openapi_json 0 parameters
Schema command 
kosmo integrations:schema logto.logto_get_well_known_management_openapi_json --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_get_well_known_user_openapi_json 0 parameters
Schema command 
kosmo integrations:schema logto.logto_get_well_known_user_openapi_json --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_identify_user 0 parameters
Schema command 
kosmo integrations:schema logto.logto_identify_user --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_init_interaction 0 parameters
Schema command 
kosmo integrations:schema logto.logto_init_interaction --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_list_application_organizations 0 parameters
Schema command 
kosmo integrations:schema logto.logto_list_application_organizations --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_list_application_protected_app_metadata_custom_domains 0 parameters
Schema command 
kosmo integrations:schema logto.logto_list_application_protected_app_metadata_custom_domains --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_list_application_roles 0 parameters
Schema command 
kosmo integrations:schema logto.logto_list_application_roles --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_list_application_secrets 0 parameters
Schema command 
kosmo integrations:schema logto.logto_list_application_secrets --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_list_applications 0 parameters
Schema command 
kosmo integrations:schema logto.logto_list_applications --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_list_connector_factories 0 parameters
Schema command 
kosmo integrations:schema logto.logto_list_connector_factories --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_list_connectors 0 parameters
Schema command 
kosmo integrations:schema logto.logto_list_connectors --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_list_custom_phrases 0 parameters
Schema command 
kosmo integrations:schema logto.logto_list_custom_phrases --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_list_custom_profile_fields 0 parameters
Schema command 
kosmo integrations:schema logto.logto_list_custom_profile_fields --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_list_domains 0 parameters
Schema command 
kosmo integrations:schema logto.logto_list_domains --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_list_email_templates 0 parameters
Schema command 
kosmo integrations:schema logto.logto_list_email_templates --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_list_hook_recent_logs 0 parameters
Schema command 
kosmo integrations:schema logto.logto_list_hook_recent_logs --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_list_hooks 0 parameters
Schema command 
kosmo integrations:schema logto.logto_list_hooks --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_list_jwt_customizers 0 parameters
Schema command 
kosmo integrations:schema logto.logto_list_jwt_customizers --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_list_logs 0 parameters
Schema command 
kosmo integrations:schema logto.logto_list_logs --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_list_one_time_tokens 0 parameters
Schema command 
kosmo integrations:schema logto.logto_list_one_time_tokens --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_list_organization_application_roles 0 parameters
Schema command 
kosmo integrations:schema logto.logto_list_organization_application_roles --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_list_organization_applications 0 parameters
Schema command 
kosmo integrations:schema logto.logto_list_organization_applications --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_list_organization_invitations 0 parameters
Schema command 
kosmo integrations:schema logto.logto_list_organization_invitations --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_list_organization_jit_email_domains 0 parameters
Schema command 
kosmo integrations:schema logto.logto_list_organization_jit_email_domains --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_list_organization_jit_roles 0 parameters
Schema command 
kosmo integrations:schema logto.logto_list_organization_jit_roles --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_list_organization_jit_sso_connectors 0 parameters
Schema command 
kosmo integrations:schema logto.logto_list_organization_jit_sso_connectors --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_list_organization_role_resource_scopes 0 parameters
Schema command 
kosmo integrations:schema logto.logto_list_organization_role_resource_scopes --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_list_organization_role_scopes 0 parameters
Schema command 
kosmo integrations:schema logto.logto_list_organization_role_scopes --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_list_organization_roles 0 parameters
Schema command 
kosmo integrations:schema logto.logto_list_organization_roles --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_list_organization_scopes 0 parameters
Schema command 
kosmo integrations:schema logto.logto_list_organization_scopes --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_list_organization_user_roles 0 parameters
Schema command 
kosmo integrations:schema logto.logto_list_organization_user_roles --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_list_organization_user_scopes 0 parameters
Schema command 
kosmo integrations:schema logto.logto_list_organization_user_scopes --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_list_organization_users 0 parameters
Schema command 
kosmo integrations:schema logto.logto_list_organization_users --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_list_organizations 0 parameters
Schema command 
kosmo integrations:schema logto.logto_list_organizations --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_list_resource_scopes 0 parameters
Schema command 
kosmo integrations:schema logto.logto_list_resource_scopes --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_list_resources 0 parameters
Schema command 
kosmo integrations:schema logto.logto_list_resources --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_list_role_applications 0 parameters
Schema command 
kosmo integrations:schema logto.logto_list_role_applications --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_list_role_scopes 0 parameters
Schema command 
kosmo integrations:schema logto.logto_list_role_scopes --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_list_role_users 0 parameters
Schema command 
kosmo integrations:schema logto.logto_list_role_users --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_list_roles 0 parameters
Schema command 
kosmo integrations:schema logto.logto_list_roles --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_list_saml_application_metadata 0 parameters
Schema command 
kosmo integrations:schema logto.logto_list_saml_application_metadata --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_list_saml_application_secrets 0 parameters
Schema command 
kosmo integrations:schema logto.logto_list_saml_application_secrets --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_list_sso_connector_providers 0 parameters
Schema command 
kosmo integrations:schema logto.logto_list_sso_connector_providers --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_list_sso_connectors 0 parameters
Schema command 
kosmo integrations:schema logto.logto_list_sso_connectors --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_list_user_all_identities 0 parameters
Schema command 
kosmo integrations:schema logto.logto_list_user_all_identities --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_list_user_custom_data 0 parameters
Schema command 
kosmo integrations:schema logto.logto_list_user_custom_data --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_list_user_grants 0 parameters
Schema command 
kosmo integrations:schema logto.logto_list_user_grants --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_list_user_logto_configs 0 parameters
Schema command 
kosmo integrations:schema logto.logto_list_user_logto_configs --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_list_user_mfa_verifications 0 parameters
Schema command 
kosmo integrations:schema logto.logto_list_user_mfa_verifications --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_list_user_organizations 0 parameters
Schema command 
kosmo integrations:schema logto.logto_list_user_organizations --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_list_user_personal_access_tokens 0 parameters
Schema command 
kosmo integrations:schema logto.logto_list_user_personal_access_tokens --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_list_user_roles 0 parameters
Schema command 
kosmo integrations:schema logto.logto_list_user_roles --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_list_user_sessions 0 parameters
Schema command 
kosmo integrations:schema logto.logto_list_user_sessions --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_list_users 0 parameters
Schema command 
kosmo integrations:schema logto.logto_list_users --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_mark_mfa_enabled 0 parameters
Schema command 
kosmo integrations:schema logto.logto_mark_mfa_enabled --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_replace_application_roles 0 parameters
Schema command 
kosmo integrations:schema logto.logto_replace_application_roles --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_replace_application_sign_in_experience 0 parameters
Schema command 
kosmo integrations:schema logto.logto_replace_application_sign_in_experience --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_replace_custom_phrase 0 parameters
Schema command 
kosmo integrations:schema logto.logto_replace_custom_phrase --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_replace_email_templates 0 parameters
Schema command 
kosmo integrations:schema logto.logto_replace_email_templates --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_replace_one_time_token_status 0 parameters
Schema command 
kosmo integrations:schema logto.logto_replace_one_time_token_status --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_replace_organization_application_roles 0 parameters
Schema command 
kosmo integrations:schema logto.logto_replace_organization_application_roles --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_replace_organization_applications 0 parameters
Schema command 
kosmo integrations:schema logto.logto_replace_organization_applications --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_replace_organization_invitation_status 0 parameters
Schema command 
kosmo integrations:schema logto.logto_replace_organization_invitation_status --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_replace_organization_jit_email_domains 0 parameters
Schema command 
kosmo integrations:schema logto.logto_replace_organization_jit_email_domains --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_replace_organization_jit_roles 0 parameters
Schema command 
kosmo integrations:schema logto.logto_replace_organization_jit_roles --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_replace_organization_jit_sso_connectors 0 parameters
Schema command 
kosmo integrations:schema logto.logto_replace_organization_jit_sso_connectors --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_replace_organization_role_resource_scopes 0 parameters
Schema command 
kosmo integrations:schema logto.logto_replace_organization_role_resource_scopes --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_replace_organization_role_scopes 0 parameters
Schema command 
kosmo integrations:schema logto.logto_replace_organization_role_scopes --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_replace_organization_user_roles 0 parameters
Schema command 
kosmo integrations:schema logto.logto_replace_organization_user_roles --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_replace_organization_users 0 parameters
Schema command 
kosmo integrations:schema logto.logto_replace_organization_users --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_replace_user_identity 0 parameters
Schema command 
kosmo integrations:schema logto.logto_replace_user_identity --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_replace_user_roles 0 parameters
Schema command 
kosmo integrations:schema logto.logto_replace_user_roles --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_reset_user_password 0 parameters
Schema command 
kosmo integrations:schema logto.logto_reset_user_password --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_rotate_oidc_keys 0 parameters
Schema command 
kosmo integrations:schema logto.logto_rotate_oidc_keys --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_skip_mfa_binding_flow 0 parameters
Schema command 
kosmo integrations:schema logto.logto_skip_mfa_binding_flow --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_skip_mfa_suggestion 0 parameters
Schema command 
kosmo integrations:schema logto.logto_skip_mfa_suggestion --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_skip_passkey_binding 0 parameters
Schema command 
kosmo integrations:schema logto.logto_skip_passkey_binding --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_submit_interaction 0 parameters
Schema command 
kosmo integrations:schema logto.logto_submit_interaction --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_test_jwt_customizer 0 parameters
Schema command 
kosmo integrations:schema logto.logto_test_jwt_customizer --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_update_account_center_settings 0 parameters
Schema command 
kosmo integrations:schema logto.logto_update_account_center_settings --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_update_admin_console_config 0 parameters
Schema command 
kosmo integrations:schema logto.logto_update_admin_console_config --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_update_application 0 parameters
Schema command 
kosmo integrations:schema logto.logto_update_application --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_update_application_custom_data 0 parameters
Schema command 
kosmo integrations:schema logto.logto_update_application_custom_data --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_update_application_secret 0 parameters
Schema command 
kosmo integrations:schema logto.logto_update_application_secret --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_update_captcha_provider 0 parameters
Schema command 
kosmo integrations:schema logto.logto_update_captcha_provider --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_update_connector 0 parameters
Schema command 
kosmo integrations:schema logto.logto_update_connector --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_update_custom_profile_field_by_name 0 parameters
Schema command 
kosmo integrations:schema logto.logto_update_custom_profile_field_by_name --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_update_custom_profile_fields_sie_order 0 parameters
Schema command 
kosmo integrations:schema logto.logto_update_custom_profile_fields_sie_order --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_update_email_template_details 0 parameters
Schema command 
kosmo integrations:schema logto.logto_update_email_template_details --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_update_hook 0 parameters
Schema command 
kosmo integrations:schema logto.logto_update_hook --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_update_hook_signing_key 0 parameters
Schema command 
kosmo integrations:schema logto.logto_update_hook_signing_key --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_update_interaction_event 0 parameters
Schema command 
kosmo integrations:schema logto.logto_update_interaction_event --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_update_jwt_customizer 0 parameters
Schema command 
kosmo integrations:schema logto.logto_update_jwt_customizer --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_update_logto_config 0 parameters
Schema command 
kosmo integrations:schema logto.logto_update_logto_config --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_update_mfa_settings 0 parameters
Schema command 
kosmo integrations:schema logto.logto_update_mfa_settings --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_update_mfa_verification_name 0 parameters
Schema command 
kosmo integrations:schema logto.logto_update_mfa_verification_name --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_update_oidc_session_config 0 parameters
Schema command 
kosmo integrations:schema logto.logto_update_oidc_session_config --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_update_organization 0 parameters
Schema command 
kosmo integrations:schema logto.logto_update_organization --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_update_organization_role 0 parameters
Schema command 
kosmo integrations:schema logto.logto_update_organization_role --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_update_organization_scope 0 parameters
Schema command 
kosmo integrations:schema logto.logto_update_organization_scope --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_update_other_profile 0 parameters
Schema command 
kosmo integrations:schema logto.logto_update_other_profile --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_update_password 0 parameters
Schema command 
kosmo integrations:schema logto.logto_update_password --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_update_personal_access_token_name 0 parameters
Schema command 
kosmo integrations:schema logto.logto_update_personal_access_token_name --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_update_primary_email 0 parameters
Schema command 
kosmo integrations:schema logto.logto_update_primary_email --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_update_primary_phone 0 parameters
Schema command 
kosmo integrations:schema logto.logto_update_primary_phone --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_update_profile 0 parameters
Schema command 
kosmo integrations:schema logto.logto_update_profile --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_update_resource 0 parameters
Schema command 
kosmo integrations:schema logto.logto_update_resource --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_update_resource_is_default 0 parameters
Schema command 
kosmo integrations:schema logto.logto_update_resource_is_default --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_update_resource_scope 0 parameters
Schema command 
kosmo integrations:schema logto.logto_update_resource_scope --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_update_role 0 parameters
Schema command 
kosmo integrations:schema logto.logto_update_role --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_update_saml_application 0 parameters
Schema command 
kosmo integrations:schema logto.logto_update_saml_application --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_update_saml_application_secret 0 parameters
Schema command 
kosmo integrations:schema logto.logto_update_saml_application_secret --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_update_sign_in_exp 0 parameters
Schema command 
kosmo integrations:schema logto.logto_update_sign_in_exp --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_update_social_identity_access_token_by_verification_id 0 parameters
Schema command 
kosmo integrations:schema logto.logto_update_social_identity_access_token_by_verification_id --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_update_sso_connector 0 parameters
Schema command 
kosmo integrations:schema logto.logto_update_sso_connector --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_update_user 0 parameters
Schema command 
kosmo integrations:schema logto.logto_update_user --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_update_user_custom_data 0 parameters
Schema command 
kosmo integrations:schema logto.logto_update_user_custom_data --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_update_user_is_suspended 0 parameters
Schema command 
kosmo integrations:schema logto.logto_update_user_is_suspended --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_update_user_logto_configs 0 parameters
Schema command 
kosmo integrations:schema logto.logto_update_user_logto_configs --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_update_user_password 0 parameters
Schema command 
kosmo integrations:schema logto.logto_update_user_password --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_update_user_personal_access_token 0 parameters
Schema command 
kosmo integrations:schema logto.logto_update_user_personal_access_token --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_update_user_profile 0 parameters
Schema command 
kosmo integrations:schema logto.logto_update_user_profile --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_upload_custom_ui_assets 0 parameters
Schema command 
kosmo integrations:schema logto.logto_upload_custom_ui_assets --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_upsert_id_token_config 0 parameters
Schema command 
kosmo integrations:schema logto.logto_upsert_id_token_config --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_upsert_jwt_customizer 0 parameters
Schema command 
kosmo integrations:schema logto.logto_upsert_jwt_customizer --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_verify_backup_code 0 parameters
Schema command 
kosmo integrations:schema logto.logto_verify_backup_code --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_verify_enterprise_sso_verification 0 parameters
Schema command 
kosmo integrations:schema logto.logto_verify_enterprise_sso_verification --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_verify_mfa_verification_code 0 parameters
Schema command 
kosmo integrations:schema logto.logto_verify_mfa_verification_code --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_verify_one_time_token 0 parameters
Schema command 
kosmo integrations:schema logto.logto_verify_one_time_token --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_verify_one_time_token_verification 0 parameters
Schema command 
kosmo integrations:schema logto.logto_verify_one_time_token_verification --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_verify_sign_in_passkey_authentication 0 parameters
Schema command 
kosmo integrations:schema logto.logto_verify_sign_in_passkey_authentication --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_verify_social_verification 0 parameters
Schema command 
kosmo integrations:schema logto.logto_verify_social_verification --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_verify_totp_verification 0 parameters
Schema command 
kosmo integrations:schema logto.logto_verify_totp_verification --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_verify_user_password 0 parameters
Schema command 
kosmo integrations:schema logto.logto_verify_user_password --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_verify_verification_by_social 0 parameters
Schema command 
kosmo integrations:schema logto.logto_verify_verification_by_social --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_verify_verification_by_verification_code 0 parameters
Schema command 
kosmo integrations:schema logto.logto_verify_verification_by_verification_code --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_verify_verification_code 0 parameters
Schema command 
kosmo integrations:schema logto.logto_verify_verification_code --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_verify_verification_code_verification 0 parameters
Schema command 
kosmo integrations:schema logto.logto_verify_verification_code_verification --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_verify_web_authn_authentication_verification 0 parameters
Schema command 
kosmo integrations:schema logto.logto_verify_web_authn_authentication_verification --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_verify_web_authn_registration 0 parameters
Schema command 
kosmo integrations:schema logto.logto_verify_web_authn_registration --json
ParameterTypeRequiredDescription
No parameters.
logto.logto_verify_web_authn_registration_verification 0 parameters
Schema command 
kosmo integrations:schema logto.logto_verify_web_authn_registration_verification --json
ParameterTypeRequiredDescription
No parameters.

Permissions

Headless calls still follow the integration read/write permission policy. Configure read/write defaults with integrations:configure. Add --force only for trusted automation that should bypass that policy.