KosmoKrator

productivity

Logto Lua API for KosmoKrator Agents

Agent-facing Lua documentation and function reference for the Logto KosmoKrator integration.

Lua Namespace

Agents call this integration through app.integrations.logto.*. Use lua_read_doc("integrations.logto") inside KosmoKrator to discover the same reference at runtime.

Call Lua from the Headless CLI

Use kosmo integrations:lua when a shell script, CI job, cron job, or another coding CLI should run a deterministic Logto workflow without starting an interactive agent session.

Inline Lua call
kosmo integrations:lua --eval 'dump(app.integrations.logto.add_mfa_verification({}))' --json
Read Lua docs headlessly
kosmo integrations:lua --eval 'print(docs.read("logto"))' --json
kosmo integrations:lua --eval 'print(docs.read("logto.add_mfa_verification"))' --json

Workflow file

Put repeatable logic in a Lua file, then execute it with JSON output for the calling process.

workflow.lua
local logto = app.integrations.logto
local result = logto.add_mfa_verification({})

dump(result)
Run the workflow
kosmo integrations:lua workflow.lua --json
kosmo integrations:lua workflow.lua --force --json
Namespace note. integrations:lua exposes app.integrations.logto, app.mcp.*, docs.*, json.*, and regex.*. Use app.integrations.logto.default.* or app.integrations.logto.work.* when you configured named credential accounts.

MCP-only Lua

If the script only needs configured MCP servers and does not need Logto, use the narrower mcp:lua command.

MCP Lua command
# Use mcp:lua for MCP-only scripts; use integrations:lua for this integration namespace.
kosmo mcp:lua --eval 'dump(mcp.servers())' --json

Agent-Facing Lua Docs

This is the rendered version of the full Lua documentation exposed to agents when they inspect the integration namespace.

Logto Lua Docs

Namespace: logto

Logto exposes the official Management API operation set. Tools are generated one-to-one from the public Logto OpenAPI source and preserve upstream path, query, header, and request-body shapes.

Configuration

Provide either a pre-issued access_token or a machine-to-machine client_id and client_secret. Set base_url to the tenant root, for example https://tenant.logto.app. When using client credentials, the service exchanges a token at /oidc/token with resource = <base_url>/api and scope = all unless overridden.

Usage Notes

  • Path parameters use snake_case tool arguments, such as user_id, application_id, or organization_id.
  • Query parameters preserve Logto names on the wire but use snake_case arguments where needed.
  • For create, patch, replace, and action endpoints, pass body as an object matching the Logto API request schema.
  • Empty responses return { success = true, status = <code> }.
  • Use fake tenants, users, apps, and domains in tests and examples.

Examples

local users = logto.logto_list_users({
  page = 1,
  page_size = 20,
})
local created = logto.logto_create_user({
  body = {
    primaryEmail = "[email protected]",
    name = "Agent Test",
  },
})
Raw agent markdown
# Logto Lua Docs

Namespace: `logto`

Logto exposes the official Management API operation set. Tools are generated one-to-one from the public Logto OpenAPI source and preserve upstream path, query, header, and request-body shapes.

## Configuration

Provide either a pre-issued `access_token` or a machine-to-machine `client_id` and `client_secret`. Set `base_url` to the tenant root, for example `https://tenant.logto.app`. When using client credentials, the service exchanges a token at `/oidc/token` with `resource = <base_url>/api` and `scope = all` unless overridden.

## Usage Notes

- Path parameters use snake_case tool arguments, such as `user_id`, `application_id`, or `organization_id`.
- Query parameters preserve Logto names on the wire but use snake_case arguments where needed.
- For create, patch, replace, and action endpoints, pass `body` as an object matching the Logto API request schema.
- Empty responses return `{ success = true, status = <code> }`.
- Use fake tenants, users, apps, and domains in tests and examples.

## Examples

```lua
local users = logto.logto_list_users({
  page = 1,
  page_size = 20,
})
```

```lua
local created = logto.logto_create_user({
  body = {
    primaryEmail = "[email protected]",
    name = "Agent Test",
  },
})
```
Metadata-derived Lua example
local result = app.integrations.logto.add_mfa_verification({})
print(result)

Functions

add_mfa_verification Write

Add a MFA verification to the user, a logto-verification-id in header is required for checking sensitive permissions.

Lua path
app.integrations.logto.add_mfa_verification
Full name
logto.logto_add_mfa_verification
ParameterTypeRequiredDescription
No parameters.
create_one_time_token Write

Create a new one-time token associated with an email address. The token can be used for verification purposes and has an expiration time.

Lua path
app.integrations.logto.create_one_time_token
Full name
logto.logto_add_one_time_tokens
ParameterTypeRequiredDescription
No parameters.
add_organization_application Write

Add an application to the organization.

Lua path
app.integrations.logto.add_organization_application
Full name
logto.logto_add_organization_applications
ParameterTypeRequiredDescription
No parameters.
add_user_members_organization Write

Add users as members to the specified organization with the given user IDs.

Lua path
app.integrations.logto.add_user_members_organization
Full name
logto.logto_add_organization_users
ParameterTypeRequiredDescription
No parameters.
add_user_identity Write

Add an identity (social identity) to the user, a logto-verification-id in header is required for checking sensitive permissions, and a verification record for the social identity is required.

Lua path
app.integrations.logto.add_user_identity
Full name
logto.logto_add_user_identities
ParameterTypeRequiredDescription
No parameters.
add_user_profile Write

Adds user profile data to the current experience interaction. - For `Register`: The profile data provided before the identification request will be used to create a new user account. - For `SignIn` and `Register`: The profile data provided after the user is identified will be used to update the user's profile when the interaction is submitted. - `ForgotPassword`: Not supported.

Lua path
app.integrations.logto.add_user_profile
Full name
logto.logto_add_user_profile
ParameterTypeRequiredDescription
No parameters.
saml_acs_endpoint_social Write

The Assertion Consumer Service (ACS) endpoint for Simple Assertion Markup Language (SAML) social connectors. SAML social connectors are deprecated. Use the SSO SAML connector instead.

Lua path
app.integrations.logto.saml_acs_endpoint_social
Full name
logto.logto_assert_saml
ParameterTypeRequiredDescription
No parameters.
saml_acs_endpoint_sso Write

The Assertion Consumer Service (ACS) endpoint for Simple Assertion Markup Language (SAML) single sign-on (SSO) connectors. This endpoint is used to complete the SAML SSO authentication flow. It receives the SAML assertion response from the identity provider (IdP) and redirects the user to complete the authentication flow.

Lua path
app.integrations.logto.saml_acs_endpoint_sso
Full name
logto.logto_assert_single_sign_on_saml
ParameterTypeRequiredDescription
No parameters.
assign_api_resource_roles_application Write

Assign API resource roles to the specified application. The API resource roles will be added to the existing API resource roles.

Lua path
app.integrations.logto.assign_api_resource_roles_application
Full name
logto.logto_assign_application_roles
ParameterTypeRequiredDescription
No parameters.
add_organization_application_role Write

Add a role to the application in the organization.

Lua path
app.integrations.logto.add_organization_application_role
Full name
logto.logto_assign_organization_roles_to_application
ParameterTypeRequiredDescription
No parameters.
assign_roles_applications_organization Write

Assign roles to applications in the specified organization.

Lua path
app.integrations.logto.assign_roles_applications_organization
Full name
logto.logto_assign_organization_roles_to_applications
ParameterTypeRequiredDescription
No parameters.
assign_roles_user_organization Write

Assign roles to a user in the specified organization with the provided data.

Lua path
app.integrations.logto.assign_roles_user_organization
Full name
logto.logto_assign_organization_roles_to_user
ParameterTypeRequiredDescription
No parameters.
assign_roles_organization_user_members Write

Assign roles to user members of the specified organization.

Lua path
app.integrations.logto.assign_roles_organization_user_members
Full name
logto.logto_assign_organization_roles_to_users
ParameterTypeRequiredDescription
No parameters.
assign_roles_user Write

Assign API resource roles to the user. The roles will be added to the existing roles.

Lua path
app.integrations.logto.assign_roles_user
Full name
logto.logto_assign_user_roles
ParameterTypeRequiredDescription
No parameters.
bind_mfa_verification_by_verificationid Write

Bind new MFA verification to the user profile using the verificationId.

Lua path
app.integrations.logto.bind_mfa_verification_by_verificationid
Full name
logto.logto_bind_mfa_verification
ParameterTypeRequiredDescription
No parameters.
bind_passkey_sign Write

Bind a WebAuthn credential as a passkey for sign-in purposes. Unlike `POST /api/experience/profile/mfa` with `type: WebAuthn`, this endpoint is exclusively for adding a passkey as a sign-in method and does NOT mark the user's optional MFA as enabled.

Lua path
app.integrations.logto.bind_passkey_sign
Full name
logto.logto_bind_passkey
ParameterTypeRequiredDescription
No parameters.
check_if_password_meets_password_policy Write

Check if a password meets the password policy in the sign-in experience settings.

Lua path
app.integrations.logto.check_if_password_meets_password_policy
Full name
logto.logto_check_password_with_default_sign_in_experience
ParameterTypeRequiredDescription
No parameters.
cleanup_stale_domains Write

Clean up custom domains that have been inactive (not verified) for a specified number of days. This uses Cloudflare as the source of truth to determine domain activity.

Lua path
app.integrations.logto.cleanup_stale_domains
Full name
logto.logto_cleanup_domains
ParameterTypeRequiredDescription
No parameters.
create_and_send_mfa_verification_code Write

Create a new MFA verification code and send it to the user's bound identifier (email or phone). This endpoint automatically uses the user's bound email address or phone number from their profile for MFA verification. The user must be identified before calling this endpoint.

Lua path
app.integrations.logto.create_and_send_mfa_verification_code
Full name
logto.logto_create_and_send_mfa_verification_code
ParameterTypeRequiredDescription
No parameters.
create_and_send_verification_code Write

Create a new `CodeVerification` record and sends the code to the specified identifier. The code verification can be used to verify the given identifier.

Lua path
app.integrations.logto.create_and_send_verification_code
Full name
logto.logto_create_and_send_verification_code
ParameterTypeRequiredDescription
No parameters.
create_application Write

Create a new application with the given data.

Lua path
app.integrations.logto.create_application
Full name
logto.logto_create_application
ParameterTypeRequiredDescription
No parameters.
add_custom_domain_application Write

Add a custom domain to the application. You'll need to setup DNS record later.

Lua path
app.integrations.logto.add_custom_domain_application
Full name
logto.logto_create_application_protected_app_metadata_custom_domain
ParameterTypeRequiredDescription
No parameters.
add_application_secret Write

Add a new secret for the application.

Lua path
app.integrations.logto.add_application_secret
Full name
logto.logto_create_application_secret
ParameterTypeRequiredDescription
No parameters.
grant_list_organization_access_user_application Write

Grant a list of organization access of a user for a application by application id and user id. The user must be a member of all the organizations. Only third-party application needs to be granted access to organizations, all the other applications can request for all the organizations' access by default.

Lua path
app.integrations.logto.grant_list_organization_access_user_application
Full name
logto.logto_create_application_user_consent_organization
ParameterTypeRequiredDescription
No parameters.
create_connector Write

Create a connector with the given data.

Lua path
app.integrations.logto.create_connector
Full name
logto.logto_create_connector
ParameterTypeRequiredDescription
No parameters.
get_connector_authorization_uri Write

Get authorization URI for specified connector by providing redirect URI and randomly generated state.

Lua path
app.integrations.logto.get_connector_authorization_uri
Full name
logto.logto_create_connector_authorization_uri
ParameterTypeRequiredDescription
No parameters.
test_passwordless_connector Write

Test a passwordless (email or SMS) connector by sending a test message to the given phone number or email address.

Lua path
app.integrations.logto.test_passwordless_connector
Full name
logto.logto_create_connector_test
ParameterTypeRequiredDescription
No parameters.
create_custom_profile_field Write

Create a custom profile field.

Lua path
app.integrations.logto.create_custom_profile_field
Full name
logto.logto_create_custom_profile_field
ParameterTypeRequiredDescription
No parameters.
batch_create_custom_profile_fields Write

Create multiple custom profile fields in a single request (max 20 items).

Lua path
app.integrations.logto.batch_create_custom_profile_fields
Full name
logto.logto_create_custom_profile_fields_batch
ParameterTypeRequiredDescription
No parameters.
create_domain Write

Create a new domain with the given data. The maximum domain number is 1, once created, can not be modified, you'll have to delete and recreate one.

Lua path
app.integrations.logto.create_domain
Full name
logto.logto_create_domain
ParameterTypeRequiredDescription
No parameters.
create_enterprise_sso_verification Write

Create a new EnterpriseSSO verification record and return the provider's authorization URI for the given connector.

Lua path
app.integrations.logto.create_enterprise_sso_verification
Full name
logto.logto_create_enterprise_sso_verification
ParameterTypeRequiredDescription
No parameters.
create_hook Write

Create a new hook with the given data.

Lua path
app.integrations.logto.create_hook
Full name
logto.logto_create_hook
ParameterTypeRequiredDescription
No parameters.
test_hook Write

Test the specified hook with the given events and config.

Lua path
app.integrations.logto.test_hook
Full name
logto.logto_create_hook_test
ParameterTypeRequiredDescription
No parameters.
create_new_password_identity_verification Write

Create a NewPasswordIdentity verification record for the new user registration use. The verification record includes a unique user identifier and a password that can be used to create a new user account.

Lua path
app.integrations.logto.create_new_password_identity_verification
Full name
logto.logto_create_new_password_identity_verification
ParameterTypeRequiredDescription
No parameters.
create_or_replace_authenticator_app Write

Create or replace the user's TOTP MFA verification with a new authenticator app binding. If the user already has a TOTP verification, it will be replaced; otherwise, a new one will be created. Requires a logto-verification-id header for sensitive permission checks, a valid TOTP secret, and a valid TOTP code generated from the secret.

Lua path
app.integrations.logto.create_or_replace_authenticator_app
Full name
logto.logto_create_or_replace_totp_mfa_verification
ParameterTypeRequiredDescription
No parameters.
create_organization Write

Create a new organization with the given data.

Lua path
app.integrations.logto.create_organization
Full name
logto.logto_create_organization
ParameterTypeRequiredDescription
No parameters.
create_organization_invitation Write

Create an organization invitation and optionally send it via email. The tenant should have an email connector configured if you want to send the invitation via email at this point.

Lua path
app.integrations.logto.create_organization_invitation
Full name
logto.logto_create_organization_invitation
ParameterTypeRequiredDescription
No parameters.
resend_invitation_message Write

Resend the invitation message to the invitee.

Lua path
app.integrations.logto.resend_invitation_message
Full name
logto.logto_create_organization_invitation_message
ParameterTypeRequiredDescription
No parameters.
add_organization_jit_email_domain Write

Add a new email domain for just-in-time provisioning of users in the organization.

Lua path
app.integrations.logto.add_organization_jit_email_domain
Full name
logto.logto_create_organization_jit_email_domain
ParameterTypeRequiredDescription
No parameters.
add_organization_jit_default_roles Write

Add new organization roles that will be assigned to users during just-in-time provisioning.

Lua path
app.integrations.logto.add_organization_jit_default_roles
Full name
logto.logto_create_organization_jit_role
ParameterTypeRequiredDescription
No parameters.
add_organization_jit_sso_connectors Write

Add new enterprise SSO connectors for just-in-time provisioning of users in the organization.

Lua path
app.integrations.logto.add_organization_jit_sso_connectors
Full name
logto.logto_create_organization_jit_sso_connector
ParameterTypeRequiredDescription
No parameters.
create_organization_role Write

Create a new organization role with the given data.

Lua path
app.integrations.logto.create_organization_role
Full name
logto.logto_create_organization_role
ParameterTypeRequiredDescription
No parameters.
assign_resource_scopes_organization_role Write

Assign resource scopes to the specified organization role

Lua path
app.integrations.logto.assign_resource_scopes_organization_role
Full name
logto.logto_create_organization_role_resource_scope
ParameterTypeRequiredDescription
No parameters.
assign_organization_scopes_organization_role Write

Assign organization scopes to the specified organization role

Lua path
app.integrations.logto.assign_organization_scopes_organization_role
Full name
logto.logto_create_organization_role_scope
ParameterTypeRequiredDescription
No parameters.
create_organization_scope Write

Create a new organization scope with the given data.

Lua path
app.integrations.logto.create_organization_scope
Full name
logto.logto_create_organization_scope
ParameterTypeRequiredDescription
No parameters.
create_password_verification_record Write

Create and verify a new Password verification record. The verification record can only be created if the provided user credentials are correct.

Lua path
app.integrations.logto.create_password_verification_record
Full name
logto.logto_create_password_verification
ParameterTypeRequiredDescription
No parameters.
create_api_resource Write

Create an API resource in the current tenant.

Lua path
app.integrations.logto.create_api_resource
Full name
logto.logto_create_resource
ParameterTypeRequiredDescription
No parameters.
create_api_resource_scope Write

Create a new scope (permission) for an API resource.

Lua path
app.integrations.logto.create_api_resource_scope
Full name
logto.logto_create_resource_scope
ParameterTypeRequiredDescription
No parameters.
create_role Write

Create a new role with the given data.

Lua path
app.integrations.logto.create_role
Full name
logto.logto_create_role
ParameterTypeRequiredDescription
No parameters.
assign_role_applications Write

Assign a role to a list of applications. The role must have the type `Application`.

Lua path
app.integrations.logto.assign_role_applications
Full name
logto.logto_create_role_application
ParameterTypeRequiredDescription
No parameters.
assign_role_users Write

Assign a role to a list of users. The role must have the type `User`.

Lua path
app.integrations.logto.assign_role_users
Full name
logto.logto_create_role_user
ParameterTypeRequiredDescription
No parameters.
create_saml_application Write

Create a new SAML application with the given configuration. A default signing certificate with 3 years lifetime will be automatically created.

Lua path
app.integrations.logto.create_saml_application
Full name
logto.logto_create_saml_application
ParameterTypeRequiredDescription
No parameters.
create_saml_application_secret Write

Create a new signing certificate for the SAML application.

Lua path
app.integrations.logto.create_saml_application_secret
Full name
logto.logto_create_saml_application_secret
ParameterTypeRequiredDescription
No parameters.
handle_saml_authentication_request_post_binding Write

Process SAML authentication request using HTTP POST binding.

Lua path
app.integrations.logto.handle_saml_authentication_request_post_binding
Full name
logto.logto_create_saml_authn
ParameterTypeRequiredDescription
No parameters.
create_passkey_sign_webauthn_authentication Write

Create WebAuthn authentication options for passkey sign-in. The user will be resolved later by the credential during verification.

Lua path
app.integrations.logto.create_passkey_sign_webauthn_authentication
Full name
logto.logto_create_sign_in_passkey_authentication
ParameterTypeRequiredDescription
No parameters.
create_passkey_sign_webauthn_authentication_with_identifier Write

Create WebAuthn authentication options for passkey sign-in with an identifier. The identifier is used to look up the user's WebAuthn credentials and generate non-discoverable authentication options.

Lua path
app.integrations.logto.create_passkey_sign_webauthn_authentication_with_identifier
Full name
logto.logto_create_sign_in_passkey_authentication_with_identifier
ParameterTypeRequiredDescription
No parameters.
create_social_verification Write

Create a new SocialVerification record and return the provider's authorization URI for the given connector.

Lua path
app.integrations.logto.create_social_verification
Full name
logto.logto_create_social_verification
ParameterTypeRequiredDescription
No parameters.
create_sso_connector Write

Create an new SSO connector instance for a given provider.

Lua path
app.integrations.logto.create_sso_connector
Full name
logto.logto_create_sso_connector
ParameterTypeRequiredDescription
No parameters.
create_new_subject_token Write

Create a new subject token for the use of impersonating the user.

Lua path
app.integrations.logto.create_new_subject_token
Full name
logto.logto_create_subject_token
ParameterTypeRequiredDescription
No parameters.
create_totp_secret Write

Create a new TOTP verification record and generate a new TOTP secret for the user. This secret can be used to bind a new TOTP verification to the user's profile. The verification record must be verified before the secret can be used to bind a new TOTP verification to the user's profile.

Lua path
app.integrations.logto.create_totp_secret
Full name
logto.logto_create_totp_secret
ParameterTypeRequiredDescription
No parameters.
create_user Write

Create a new user with the given data.

Lua path
app.integrations.logto.create_user
Full name
logto.logto_create_user
ParameterTypeRequiredDescription
No parameters.
upload_asset Write

Upload a user asset.

Lua path
app.integrations.logto.upload_asset
Full name
logto.logto_create_user_asset
ParameterTypeRequiredDescription
No parameters.
create_mfa_verification_user Write

Create a new MFA verification for a given user ID.

Lua path
app.integrations.logto.create_mfa_verification_user
Full name
logto.logto_create_user_mfa_verification
ParameterTypeRequiredDescription
No parameters.
add_personal_access_token Write

Add a new personal access token for the user.

Lua path
app.integrations.logto.add_personal_access_token
Full name
logto.logto_create_user_personal_access_token
ParameterTypeRequiredDescription
No parameters.
create_record_by_password Write

Create a verification record by verifying the password.

Lua path
app.integrations.logto.create_record_by_password
Full name
logto.logto_create_verification_by_password
ParameterTypeRequiredDescription
No parameters.
create_social_verification_record Write

Create a social verification record and return the authorization URI.

Lua path
app.integrations.logto.create_social_verification_record
Full name
logto.logto_create_verification_by_social
ParameterTypeRequiredDescription
No parameters.
create_record_by_verification_code Write

Create a verification record and send the code to the specified identifier. The code verification can be used to verify the given identifier.

Lua path
app.integrations.logto.create_record_by_verification_code
Full name
logto.logto_create_verification_by_verification_code
ParameterTypeRequiredDescription
No parameters.
request_and_send_verification_code Write

Request a verification code for the provided identifier (email/phone). if you're using email as the identifier, you need to setup your email connector first. if you're using phone as the identifier, you need to setup your SMS connector first.

Lua path
app.integrations.logto.request_and_send_verification_code
Full name
logto.logto_create_verification_code
ParameterTypeRequiredDescription
No parameters.
create_webauthn_authentication_verification Write

Create a new WebAuthn authentication verification record based on the user's existing WebAuthn credential. This verification record can be used to verify the user's WebAuthn credential.

Lua path
app.integrations.logto.create_webauthn_authentication_verification
Full name
logto.logto_create_web_authn_authentication_verification
ParameterTypeRequiredDescription
No parameters.
create_webauthn_registration_verification Write

Create a new WebAuthn registration verification record. The verification record can be used to bind a new WebAuthn credential to the user's profile.

Lua path
app.integrations.logto.create_webauthn_registration_verification
Full name
logto.logto_create_web_authn_registration_verification
ParameterTypeRequiredDescription
No parameters.
delete_application Write

Delete application by ID.

Lua path
app.integrations.logto.delete_application
Full name
logto.logto_delete_application
ParameterTypeRequiredDescription
No parameters.
delete_application_legacy_secret Write

Delete the legacy secret for the application and replace it with a new internal secret. Note: This operation does not "really" delete the legacy secret because it is still needed for internal validation. We may remove the display of the legacy secret (the `secret` field in the application response) in the future.

Lua path
app.integrations.logto.delete_application_legacy_secret
Full name
logto.logto_delete_application_legacy_secret
ParameterTypeRequiredDescription
No parameters.
remove_custom_domain Write

Remove custom domain from the specified application.

Lua path
app.integrations.logto.remove_custom_domain
Full name
logto.logto_delete_application_protected_app_metadata_custom_domain
ParameterTypeRequiredDescription
No parameters.
remove_api_resource_role_from_application Write

Remove a API resource role from the specified application.

Lua path
app.integrations.logto.remove_api_resource_role_from_application
Full name
logto.logto_delete_application_role
ParameterTypeRequiredDescription
No parameters.
delete_application_secret Write

Delete a secret for the application by name.

Lua path
app.integrations.logto.delete_application_secret
Full name
logto.logto_delete_application_secret
ParameterTypeRequiredDescription
No parameters.
revoke_user_access_organization_application Write

Revoke a user's access to an organization for a application by application id, user id and organization id.

Lua path
app.integrations.logto.revoke_user_access_organization_application
Full name
logto.logto_delete_application_user_consent_organization
ParameterTypeRequiredDescription
No parameters.
delete_captcha_provider Write

Delete the captcha provider.

Lua path
app.integrations.logto.delete_captcha_provider
Full name
logto.logto_delete_captcha_provider
ParameterTypeRequiredDescription
No parameters.
delete_connector Write

Delete connector by ID.

Lua path
app.integrations.logto.delete_connector
Full name
logto.logto_delete_connector
ParameterTypeRequiredDescription
No parameters.
delete_custom_phrase Write

Delete custom phrases for the specified language tag.

Lua path
app.integrations.logto.delete_custom_phrase
Full name
logto.logto_delete_custom_phrase
ParameterTypeRequiredDescription
No parameters.
delete_custom_profile_field_by_name Write

Delete a custom profile field by name.

Lua path
app.integrations.logto.delete_custom_profile_field_by_name
Full name
logto.logto_delete_custom_profile_field_by_name
ParameterTypeRequiredDescription
No parameters.
delete_domain Write

Delete domain by ID.

Lua path
app.integrations.logto.delete_domain
Full name
logto.logto_delete_domain
ParameterTypeRequiredDescription
No parameters.
delete_email_template Write

Delete an email template by its ID.

Lua path
app.integrations.logto.delete_email_template
Full name
logto.logto_delete_email_template
ParameterTypeRequiredDescription
No parameters.
delete_email_templates Write

Bulk delete email templates by their language tag and template type.

Lua path
app.integrations.logto.delete_email_templates
Full name
logto.logto_delete_email_templates
ParameterTypeRequiredDescription
No parameters.
revoke_grant_by_id Write

Revoke a specific user application grant by grant ID and remove the related session authorization. A logto-verification-id in header is required for revoking grants.

Lua path
app.integrations.logto.revoke_grant_by_id
Full name
logto.logto_delete_grant_by_id
ParameterTypeRequiredDescription
No parameters.
delete_hook Write

Delete hook by ID.

Lua path
app.integrations.logto.delete_hook
Full name
logto.logto_delete_hook
ParameterTypeRequiredDescription
No parameters.
delete_user_identity Write

Delete an identity (social identity) from the user, a logto-verification-id in header is required for checking sensitive permissions. The request is rejected if it would remove the user's last identifier.

Lua path
app.integrations.logto.delete_user_identity
Full name
logto.logto_delete_identity
ParameterTypeRequiredDescription
No parameters.
delete_jwt_customizer Write

Delete the JWT customizer for the given token type.

Lua path
app.integrations.logto.delete_jwt_customizer
Full name
logto.logto_delete_jwt_customizer
ParameterTypeRequiredDescription
No parameters.
delete_mfa_verification Write

Delete an MFA verification, a logto-verification-id in header is required for checking sensitive permissions.

Lua path
app.integrations.logto.delete_mfa_verification
Full name
logto.logto_delete_mfa_verification
ParameterTypeRequiredDescription
No parameters.
delete_oidc_key Write

Delete an OIDC signing key by key type and key ID.

Lua path
app.integrations.logto.delete_oidc_key
Full name
logto.logto_delete_oidc_key
ParameterTypeRequiredDescription
No parameters.
delete_one_time_token_by_id Write

Delete a one-time token by its ID.

Lua path
app.integrations.logto.delete_one_time_token_by_id
Full name
logto.logto_delete_one_time_token
ParameterTypeRequiredDescription
No parameters.
delete_organization Write

Delete organization by ID.

Lua path
app.integrations.logto.delete_organization
Full name
logto.logto_delete_organization
ParameterTypeRequiredDescription
No parameters.
remove_organization_application Write

Remove an application from the organization.

Lua path
app.integrations.logto.remove_organization_application
Full name
logto.logto_delete_organization_application
ParameterTypeRequiredDescription
No parameters.
remove_organization_application_role Write

Remove a role from the application in the organization.

Lua path
app.integrations.logto.remove_organization_application_role
Full name
logto.logto_delete_organization_application_role
ParameterTypeRequiredDescription
No parameters.
delete_organization_invitation Write

Delete an organization invitation by ID.

Lua path
app.integrations.logto.delete_organization_invitation
Full name
logto.logto_delete_organization_invitation
ParameterTypeRequiredDescription
No parameters.
remove_organization_jit_email_domain Write

Remove an email domain for just-in-time provisioning of users in the organization.

Lua path
app.integrations.logto.remove_organization_jit_email_domain
Full name
logto.logto_delete_organization_jit_email_domain
ParameterTypeRequiredDescription
No parameters.
remove_organization_jit_default_role Write

Remove an organization role that will be assigned to users during just-in-time provisioning.

Lua path
app.integrations.logto.remove_organization_jit_default_role
Full name
logto.logto_delete_organization_jit_role
ParameterTypeRequiredDescription
No parameters.
remove_organization_jit_sso_connector Write

Remove an enterprise SSO connector for just-in-time provisioning of users in the organization.

Lua path
app.integrations.logto.remove_organization_jit_sso_connector
Full name
logto.logto_delete_organization_jit_sso_connector
ParameterTypeRequiredDescription
No parameters.
delete_organization_role Write

Delete organization role by ID.

Lua path
app.integrations.logto.delete_organization_role
Full name
logto.logto_delete_organization_role
ParameterTypeRequiredDescription
No parameters.
remove_resource_scope Write

Remove a resource scope assignment from the specified organization role.

Lua path
app.integrations.logto.remove_resource_scope
Full name
logto.logto_delete_organization_role_resource_scope
ParameterTypeRequiredDescription
No parameters.
remove_organization_scope Write

Remove a organization scope assignment from the specified organization role.

Lua path
app.integrations.logto.remove_organization_scope
Full name
logto.logto_delete_organization_role_scope
ParameterTypeRequiredDescription
No parameters.
delete_organization_scope Write

Delete organization scope by ID.

Lua path
app.integrations.logto.delete_organization_scope
Full name
logto.logto_delete_organization_scope
ParameterTypeRequiredDescription
No parameters.
remove_user_member_from_organization Write

Remove a user's membership from the specified organization.

Lua path
app.integrations.logto.remove_user_member_from_organization
Full name
logto.logto_delete_organization_user
ParameterTypeRequiredDescription
No parameters.
remove_role_from_user_organization Write

Remove a role assignment from a user in the specified organization.

Lua path
app.integrations.logto.remove_role_from_user_organization
Full name
logto.logto_delete_organization_user_role
ParameterTypeRequiredDescription
No parameters.
delete_personal_access_token Write

Delete a token for the user by name.

Lua path
app.integrations.logto.delete_personal_access_token
Full name
logto.logto_delete_personal_access_token_post
ParameterTypeRequiredDescription
No parameters.
delete_primary_email Write

Delete primary email for the user, a logto-verification-id header is required for checking sensitive permissions. The request is rejected if it would remove the user's last identifier.

Lua path
app.integrations.logto.delete_primary_email
Full name
logto.logto_delete_primary_email
ParameterTypeRequiredDescription
No parameters.
delete_primary_phone Write

Delete primary phone for the user, a logto-verification-id header is required for checking sensitive permissions. The request is rejected if it would remove the user's last identifier.

Lua path
app.integrations.logto.delete_primary_phone
Full name
logto.logto_delete_primary_phone
ParameterTypeRequiredDescription
No parameters.
delete_api_resource Write

Delete an API resource by ID.

Lua path
app.integrations.logto.delete_api_resource
Full name
logto.logto_delete_resource
ParameterTypeRequiredDescription
No parameters.
delete_api_resource_scope Write

Delete an API resource scope (permission) from the given resource.

Lua path
app.integrations.logto.delete_api_resource_scope
Full name
logto.logto_delete_resource_scope
ParameterTypeRequiredDescription
No parameters.
delete_role Write

Delete a role with the given ID.

Lua path
app.integrations.logto.delete_role
Full name
logto.logto_delete_role
ParameterTypeRequiredDescription
No parameters.
remove_role_from_application Write

Remove the role from an application with the given ID.

Lua path
app.integrations.logto.remove_role_from_application
Full name
logto.logto_delete_role_application
ParameterTypeRequiredDescription
No parameters.
remove_role_from_user Write

Remove a role from a user with the given ID.

Lua path
app.integrations.logto.remove_role_from_user
Full name
logto.logto_delete_role_user
ParameterTypeRequiredDescription
No parameters.
delete_saml_application Write

Delete a SAML application by ID.

Lua path
app.integrations.logto.delete_saml_application
Full name
logto.logto_delete_saml_application
ParameterTypeRequiredDescription
No parameters.
delete_saml_application_secret Write

Delete a signing certificate of the SAML application. Active certificates cannot be deleted.

Lua path
app.integrations.logto.delete_saml_application_secret
Full name
logto.logto_delete_saml_application_secret
ParameterTypeRequiredDescription
No parameters.
delete_secret Write

Delete a secret by its ID.

Lua path
app.integrations.logto.delete_secret
Full name
logto.logto_delete_secret
ParameterTypeRequiredDescription
No parameters.
bulk_delete_sentinel_activities Write

Remove sentinel activity reports based on the provided target value(identifier).Use this endpoint to unblock users who may be locked out due to too many failed authentication attempts.

Lua path
app.integrations.logto.bulk_delete_sentinel_activities
Full name
logto.logto_delete_sentinel_activities
ParameterTypeRequiredDescription
No parameters.
revoke_session_by_id Write

Revoke a specific user session by its ID, optionally revoking target associated grants and tokens. A logto-verification-id in header is required for revoking sessions.

Lua path
app.integrations.logto.revoke_session_by_id
Full name
logto.logto_delete_session_by_id
ParameterTypeRequiredDescription
No parameters.
delete_sso_connector Write

Delete an SSO connector by ID.

Lua path
app.integrations.logto.delete_sso_connector
Full name
logto.logto_delete_sso_connector
ParameterTypeRequiredDescription
No parameters.
delete_user Write

Delete user with the given ID. Note all associated data will be deleted cascadingly.

Lua path
app.integrations.logto.delete_user
Full name
logto.logto_delete_user
ParameterTypeRequiredDescription
No parameters.
revoke_user_grant Write

Revoke a specific grant and its associated token chain by grant ID. Also removes the matching session authorization entry for this grant from the related active session. The grant must belong to the user.

Lua path
app.integrations.logto.revoke_user_grant
Full name
logto.logto_delete_user_grant
ParameterTypeRequiredDescription
No parameters.
delete_social_identity_from_user Write

Delete a social identity from the user.

Lua path
app.integrations.logto.delete_social_identity_from_user
Full name
logto.logto_delete_user_identity
ParameterTypeRequiredDescription
No parameters.
delete_mfa_verification_user Write

Delete an MFA verification for the user with the given verification ID. The verification ID must be associated with the given user ID.

Lua path
app.integrations.logto.delete_mfa_verification_user
Full name
logto.logto_delete_user_mfa_verification
ParameterTypeRequiredDescription
No parameters.
delete_personal_access_token Write

Delete a token for the user by name using the legacy path parameter. Deprecated: use the POST /delete endpoint instead to avoid url name encoding issues.

Lua path
app.integrations.logto.delete_personal_access_token
Full name
logto.logto_delete_user_personal_access_token
ParameterTypeRequiredDescription
No parameters.
remove_role_from_user Write

Remove an API resource role from the user.

Lua path
app.integrations.logto.remove_role_from_user
Full name
logto.logto_delete_user_role
ParameterTypeRequiredDescription
No parameters.
revoke_user_session Write

Revoke a specific user session by its ID, optionally revoking associated target grants and tokens.

Lua path
app.integrations.logto.revoke_user_session
Full name
logto.logto_delete_user_session
ParameterTypeRequiredDescription
No parameters.
generate_backup_codes Write

Create a new BackupCode verification record with new backup codes generated. This verification record will be used to bind the backup codes to the user's profile.

Lua path
app.integrations.logto.generate_backup_codes
Full name
logto.logto_generate_backup_codes
ParameterTypeRequiredDescription
No parameters.
generate_backup_codes Write

Generate backup codes for the user.

Lua path
app.integrations.logto.generate_backup_codes
Full name
logto.logto_generate_my_account_backup_codes
ParameterTypeRequiredDescription
No parameters.
generate_totp_secret Write

Generate a TOTP secret for the user.

Lua path
app.integrations.logto.generate_totp_secret
Full name
logto.logto_generate_totp_secret
ParameterTypeRequiredDescription
No parameters.
generate_webauthn_registration_options Write

Generate WebAuthn registration options for the user to register a new WebAuthn device.

Lua path
app.integrations.logto.generate_webauthn_registration_options
Full name
logto.logto_generate_web_authn_registration_options
ParameterTypeRequiredDescription
No parameters.
get_account_center_settings Read

Get the account center settings.

Lua path
app.integrations.logto.get_account_center_settings
Full name
logto.logto_get_account_center_settings
ParameterTypeRequiredDescription
No parameters.
get_active_user_data Read

Get active user data, including daily active user (DAU), weekly active user (WAU) and monthly active user (MAU). It also includes an array of DAU in the past 30 days.

Lua path
app.integrations.logto.get_active_user_data
Full name
logto.logto_get_active_user_counts
ParameterTypeRequiredDescription
No parameters.
get_admin_console_config Read

Get the global configuration object for Logto Console.

Lua path
app.integrations.logto.get_admin_console_config
Full name
logto.logto_get_admin_console_config
ParameterTypeRequiredDescription
No parameters.
get_application Read

Get application details by ID.

Lua path
app.integrations.logto.get_application
Full name
logto.logto_get_application
ParameterTypeRequiredDescription
No parameters.
get_application_level_sign_experience Read

Get application level sign-in experience for a given application. - Only branding properties and terms links customization is supported for now. - Only third-party applications can have the sign-in experience customization for now.

Lua path
app.integrations.logto.get_application_level_sign_experience
Full name
logto.logto_get_application_sign_in_experience
ParameterTypeRequiredDescription
No parameters.
get_backup_codes Read

Get all backup codes for the user with their usage status. Requires identity verification.

Lua path
app.integrations.logto.get_backup_codes
Full name
logto.logto_get_backup_codes
ParameterTypeRequiredDescription
No parameters.
get_captcha_provider Read

Get the captcha provider, you can only have one captcha provider.

Lua path
app.integrations.logto.get_captcha_provider
Full name
logto.logto_get_captcha_provider
ParameterTypeRequiredDescription
No parameters.
get_connector Read

Get connector data by ID

Lua path
app.integrations.logto.get_connector
Full name
logto.logto_get_connector
ParameterTypeRequiredDescription
No parameters.
get_connector_factory Read

Get connector factory by the given ID.

Lua path
app.integrations.logto.get_connector_factory
Full name
logto.logto_get_connector_factory
ParameterTypeRequiredDescription
No parameters.
get_custom_phrases Read

Get custom phrases for the specified language tag.

Lua path
app.integrations.logto.get_custom_phrases
Full name
logto.logto_get_custom_phrase
ParameterTypeRequiredDescription
No parameters.
get_custom_profile_field_by_name Read

Get a custom profile field by name.

Lua path
app.integrations.logto.get_custom_profile_field_by_name
Full name
logto.logto_get_custom_profile_field_by_name
ParameterTypeRequiredDescription
No parameters.
get_domain Read

Get domain details by ID, by calling this API, the domain status will be synced from remote provider.

Lua path
app.integrations.logto.get_domain
Full name
logto.logto_get_domain
ParameterTypeRequiredDescription
No parameters.
get_email_template_by_id Read

Get the email template by its ID.

Lua path
app.integrations.logto.get_email_template_by_id
Full name
logto.logto_get_email_template
ParameterTypeRequiredDescription
No parameters.
get_enabled_sso_connectors_by_given_email_domain Read

Extract the email domain from the provided email address. Returns all the enabled SSO connectors that match the email domain.

Lua path
app.integrations.logto.get_enabled_sso_connectors_by_given_email_domain
Full name
logto.logto_get_enabled_sso_connectors
ParameterTypeRequiredDescription
No parameters.
retrieve_access_token_issued_by_third_party_enterprise_sso_provider Read

This API retrieves the access token issued by a third-party enterprise SSO provider for a given SSO connector ID. Access is only available if token storage is enabled for the corresponding connector. When a user authenticates through a SSO provider, Logto automatically stores the provider's tokens in an encrypted form. You can use this API to securely retrieve the stored access token and use it to access third-party APIs on behalf of the user.

Lua path
app.integrations.logto.retrieve_access_token_issued_by_third_party_enterprise_sso_provider
Full name
logto.logto_get_enterprise_sso_identity_access_token
ParameterTypeRequiredDescription
No parameters.
get_all_active_grants Read

Retrieve all active application grants for the user. A logto-verification-id in header is required for checking grant details.

Lua path
app.integrations.logto.get_all_active_grants
Full name
logto.logto_get_grants
ParameterTypeRequiredDescription
No parameters.
hasura_auth_hook_endpoint Read

The `HASURA_GRAPHQL_AUTH_HOOK` endpoint for Hasura auth. Use this endpoint to integrate Hasura's [webhook authentication flow](https://hasura.io/docs/latest/auth/authentication/webhook/).

Lua path
app.integrations.logto.hasura_auth_hook_endpoint
Full name
logto.logto_get_hasura_auth
ParameterTypeRequiredDescription
No parameters.
get_hook Read

Get hook details by ID.

Lua path
app.integrations.logto.get_hook
Full name
logto.logto_get_hook
ParameterTypeRequiredDescription
No parameters.
get_id_token_claims_configuration Read

Get the ID token extended claims configuration for the tenant. This configuration controls which extended claims (e.g., `custom_data`, `identities`, `roles`, `organizations`, `organization_roles`) are included in ID tokens.

Lua path
app.integrations.logto.get_id_token_claims_configuration
Full name
logto.logto_get_id_token_config
ParameterTypeRequiredDescription
No parameters.
get_public_interaction_data Read

Get the public interaction data.

Lua path
app.integrations.logto.get_public_interaction_data
Full name
logto.logto_get_interaction
ParameterTypeRequiredDescription
No parameters.
get_jwt_customizer Read

Get the JWT customizer for the given token type.

Lua path
app.integrations.logto.get_jwt_customizer
Full name
logto.logto_get_jwt_customizer
ParameterTypeRequiredDescription
No parameters.
get Read

Get log details by ID.

Lua path
app.integrations.logto.get
Full name
logto.logto_get_log
ParameterTypeRequiredDescription
No parameters.
get_config Read

Retrieve the exposed portion of the current user's logto config. This includes MFA states (enabled, skipped, skipMfaOnSignIn) and passkey sign-in binding states (skipped). Passkey is a WebAuthn MFA factor and shares the same account center field access control as MFA.

Lua path
app.integrations.logto.get_config
Full name
logto.logto_get_logto_config
ParameterTypeRequiredDescription
No parameters.
get_mfa_settings Read

Get MFA settings for the user. This endpoint requires the Identities scope. Returns current MFA configuration preferences.

Lua path
app.integrations.logto.get_mfa_settings
Full name
logto.logto_get_mfa_settings
ParameterTypeRequiredDescription
No parameters.
get_mfa_verifications Read

Get MFA verifications for the user.

Lua path
app.integrations.logto.get_mfa_verifications
Full name
logto.logto_get_mfa_verifications
ParameterTypeRequiredDescription
No parameters.
get_new_user_count Read

Get new user count in the past 7 days.

Lua path
app.integrations.logto.get_new_user_count
Full name
logto.logto_get_new_user_counts
ParameterTypeRequiredDescription
No parameters.
get_oidc_keys Read

Get OIDC signing keys by key type. The actual key will be redacted from the result.

Lua path
app.integrations.logto.get_oidc_keys
Full name
logto.logto_get_oidc_keys
ParameterTypeRequiredDescription
No parameters.
get_oidc_session_config Read

Get the OIDC session configuration for the tenant.

Lua path
app.integrations.logto.get_oidc_session_config
Full name
logto.logto_get_oidc_session_config
ParameterTypeRequiredDescription
No parameters.
get_one_time_token_by_id Read

Get a one-time token by its ID.

Lua path
app.integrations.logto.get_one_time_token_by_id
Full name
logto.logto_get_one_time_token
ParameterTypeRequiredDescription
No parameters.
get_organization Read

Get organization details by ID.

Lua path
app.integrations.logto.get_organization
Full name
logto.logto_get_organization
ParameterTypeRequiredDescription
No parameters.
get_organization_invitation Read

Get an organization invitation by ID.

Lua path
app.integrations.logto.get_organization_invitation
Full name
logto.logto_get_organization_invitation
ParameterTypeRequiredDescription
No parameters.
get_organization_role Read

Get organization role details by ID.

Lua path
app.integrations.logto.get_organization_role
Full name
logto.logto_get_organization_role
ParameterTypeRequiredDescription
No parameters.
get_organization_scope Read

Get organization scope details by ID.

Lua path
app.integrations.logto.get_organization_scope
Full name
logto.logto_get_organization_scope
ParameterTypeRequiredDescription
No parameters.
get_profile Read

Get profile for the user.

Lua path
app.integrations.logto.get_profile
Full name
logto.logto_get_profile
ParameterTypeRequiredDescription
No parameters.
get_api_resource Read

Get an API resource details by ID.

Lua path
app.integrations.logto.get_api_resource
Full name
logto.logto_get_resource
ParameterTypeRequiredDescription
No parameters.
get_role Read

Get role details by ID.

Lua path
app.integrations.logto.get_role
Full name
logto.logto_get_role
ParameterTypeRequiredDescription
No parameters.
get_saml_application Read

Get SAML application details by ID.

Lua path
app.integrations.logto.get_saml_application
Full name
logto.logto_get_saml_application
ParameterTypeRequiredDescription
No parameters.
saml_application_callback Read

Handle the OIDC callback for SAML application and generate SAML response.

Lua path
app.integrations.logto.saml_application_callback
Full name
logto.logto_get_saml_application_callback
ParameterTypeRequiredDescription
No parameters.
handle_saml_authentication_request_redirect_binding Read

Process SAML authentication request using HTTP Redirect binding.

Lua path
app.integrations.logto.handle_saml_authentication_request_redirect_binding
Full name
logto.logto_get_saml_authn
ParameterTypeRequiredDescription
No parameters.
get_all_active_sessions Read

Retrieve all non-expired sessions for the user, including session metadata and interaction details when available. A logto-verification-id in header is required for checking sensitive session details.

Lua path
app.integrations.logto.get_all_active_sessions
Full name
logto.logto_get_sessions
ParameterTypeRequiredDescription
No parameters.
get_default_sign_experience_settings Read

Get the default sign-in experience settings.

Lua path
app.integrations.logto.get_default_sign_experience_settings
Full name
logto.logto_get_sign_in_exp
ParameterTypeRequiredDescription
No parameters.
get_full_sign_experience Read

Get the full sign-in experience configuration.

Lua path
app.integrations.logto.get_full_sign_experience
Full name
logto.logto_get_sign_in_experience_config
ParameterTypeRequiredDescription
No parameters.
get_localized_phrases Read

Get localized phrases based on the specified language.

Lua path
app.integrations.logto.get_localized_phrases
Full name
logto.logto_get_sign_in_experience_phrases
ParameterTypeRequiredDescription
No parameters.
retrieve_access_token_issued_by_third_party_social_provider Read

This API retrieves the access token issued by a third-party social provider for a given social target. Access is only available if token storage is enabled for the corresponding social connector. When a user authenticates through a social provider, Logto automatically stores the provider's tokens in an encrypted form. You can use this API to securely retrieve the stored access token and use it to access third-party APIs on behalf of the user.

Lua path
app.integrations.logto.retrieve_access_token_issued_by_third_party_social_provider
Full name
logto.logto_get_social_identity_access_token
ParameterTypeRequiredDescription
No parameters.
get_sso_connector Read

Get SSO connector data by ID. In addition to the raw SSO connector data, a copy of fetched or parsed IdP configs and a copy of connector provider's data will be attached.

Lua path
app.integrations.logto.get_sso_connector
Full name
logto.logto_get_sso_connector
ParameterTypeRequiredDescription
No parameters.
health_check Read

The traditional health check API. No authentication needed. > **Note** > Even if 204 is returned, it does not guarantee all the APIs are working properly since they may depend on additional resources or external services.

Lua path
app.integrations.logto.health_check
Full name
logto.logto_get_status
ParameterTypeRequiredDescription
No parameters.
get_swagger_json Read

The endpoint for the current JSON document. The JSON conforms to the [OpenAPI v3.0.1](https://spec.openapis.org/oas/v3.0.1) (a.k.a. Swagger) specification.

Lua path
app.integrations.logto.get_swagger_json
Full name
logto.logto_get_swagger_json
ParameterTypeRequiredDescription
No parameters.
get_application_constants Read

Get the application constants.

Lua path
app.integrations.logto.get_application_constants
Full name
logto.logto_get_system_application_config
ParameterTypeRequiredDescription
No parameters.
get_total_user_count Read

Get total user count in the current tenant.

Lua path
app.integrations.logto.get_total_user_count
Full name
logto.logto_get_total_user_count
ParameterTypeRequiredDescription
No parameters.
get_user Read

Get user data for the given ID.

Lua path
app.integrations.logto.get_user
Full name
logto.logto_get_user
ParameterTypeRequiredDescription
No parameters.
get_service_status Read

Get user assets service status.

Lua path
app.integrations.logto.get_service_status
Full name
logto.logto_get_user_asset_service_status
ParameterTypeRequiredDescription
No parameters.
check_if_user_has_password Read

Check if the user with the given ID has a password set.

Lua path
app.integrations.logto.check_if_user_has_password
Full name
logto.logto_get_user_has_password
ParameterTypeRequiredDescription
No parameters.
retrieve_user_social_identity_and_associated_token_storage Read

This API retrieves the social identity and its associated token set for the specified user from the Logto Secret Vault. The token set will only be available if token storage is enabled for the corresponding social connector.

Lua path
app.integrations.logto.retrieve_user_social_identity_and_associated_token_storage
Full name
logto.logto_get_user_identity
ParameterTypeRequiredDescription
No parameters.
get_user_active_session Read

Retrieve a non-expired session for the user by session ID, including session metadata and interaction details when available.

Lua path
app.integrations.logto.get_user_active_session
Full name
logto.logto_get_user_session
ParameterTypeRequiredDescription
No parameters.
retrieve_user_enterprise_sso_identity_and_associated_token_secret_if_token_storage_is_enabled Read

This API retrieves the user's enterprise SSO identity and associated token set record from the Logto Secret Vault. The token set will only be available if token storage is enabled for the corresponding SSO connector.

Lua path
app.integrations.logto.retrieve_user_enterprise_sso_identity_and_associated_token_secret_if_token_storage_is_enabled
Full name
logto.logto_get_user_sso_identity
ParameterTypeRequiredDescription
No parameters.
get_default_account_center Read

Get the default account center configuration.

Lua path
app.integrations.logto.get_default_account_center
Full name
logto.logto_get_well_known_account_center
ParameterTypeRequiredDescription
No parameters.
get_full_sign_experience Read

Get the full sign-in experience configuration.

Lua path
app.integrations.logto.get_full_sign_experience
Full name
logto.logto_get_well_known_experience
ParameterTypeRequiredDescription
No parameters.
get_experience_api_swagger_json Read

The endpoint for the Experience API JSON document. The JSON conforms to the [OpenAPI v3.0.1](https://spec.openapis.org/oas/v3.0.1) (a.k.a. Swagger) specification.

Lua path
app.integrations.logto.get_experience_api_swagger_json
Full name
logto.logto_get_well_known_experience_openapi_json
ParameterTypeRequiredDescription
No parameters.
get_management_api_swagger_json Read

The endpoint for the Management API JSON document. The JSON conforms to the [OpenAPI v3.0.1](https://spec.openapis.org/oas/v3.0.1) (a.k.a. Swagger) specification.

Lua path
app.integrations.logto.get_management_api_swagger_json
Full name
logto.logto_get_well_known_management_openapi_json
ParameterTypeRequiredDescription
No parameters.
get_user_api_swagger_json Read

The endpoint for the User API JSON document. The JSON conforms to the [OpenAPI v3.0.1](https://spec.openapis.org/oas/v3.0.1) (a.k.a. Swagger) specification.

Lua path
app.integrations.logto.get_user_api_swagger_json
Full name
logto.logto_get_well_known_user_openapi_json
ParameterTypeRequiredDescription
No parameters.
identify_user_current_interaction Write

This API identifies the user based on the verificationId within the current experience interaction: - `SignIn` and `ForgotPassword` interactions: Verifies the user's identity using the provided `verificationId`. - `Register` interaction: Creates a new user account using the profile data from the current interaction. If a verificationId is provided, the profile data will first be updated with the verification record before creating the account. If not, the account is created directly from the sto

Lua path
app.integrations.logto.identify_user_current_interaction
Full name
logto.logto_identify_user
ParameterTypeRequiredDescription
No parameters.
init_new_interaction Write

Init a new experience interaction with the given interaction type. Any existing interaction data will be cleared.

Lua path
app.integrations.logto.init_new_interaction
Full name
logto.logto_init_interaction
ParameterTypeRequiredDescription
No parameters.
get_application_organizations Read

Get the list of organizations that an application is associated with.

Lua path
app.integrations.logto.get_application_organizations
Full name
logto.logto_list_application_organizations
ParameterTypeRequiredDescription
No parameters.
get_application_custom_domains Read

Get custom domains of the specified application, the application type should be protected app.

Lua path
app.integrations.logto.get_application_custom_domains
Full name
logto.logto_list_application_protected_app_metadata_custom_domains
ParameterTypeRequiredDescription
No parameters.
get_application_api_resource_roles Read

Get API resource roles assigned to the specified application with pagination.

Lua path
app.integrations.logto.get_application_api_resource_roles
Full name
logto.logto_list_application_roles
ParameterTypeRequiredDescription
No parameters.
get_application_secrets Read

Get all the secrets for the application.

Lua path
app.integrations.logto.get_application_secrets
Full name
logto.logto_list_application_secrets
ParameterTypeRequiredDescription
No parameters.
list_all_user_consented_organizations_application Read

List all the user consented organizations for a application by application id and user id.

Lua path
app.integrations.logto.list_all_user_consented_organizations_application
Full name
logto.logto_list_application_user_consent_organizations
ParameterTypeRequiredDescription
No parameters.
get_applications Read

Get applications that match the given query with pagination.

Lua path
app.integrations.logto.get_applications
Full name
logto.logto_list_applications
ParameterTypeRequiredDescription
No parameters.
get_connector_factories Read

Get all connector factories data available in Logto.

Lua path
app.integrations.logto.get_connector_factories
Full name
logto.logto_list_connector_factories
ParameterTypeRequiredDescription
No parameters.
get_connectors Read

Get all connectors in the current tenant.

Lua path
app.integrations.logto.get_connectors
Full name
logto.logto_list_connectors
ParameterTypeRequiredDescription
No parameters.
get_all_custom_phrases Read

Get all custom phrases for all languages.

Lua path
app.integrations.logto.get_all_custom_phrases
Full name
logto.logto_list_custom_phrases
ParameterTypeRequiredDescription
No parameters.
get_all_custom_profile_fields Read

Get all custom profile fields.

Lua path
app.integrations.logto.get_all_custom_profile_fields
Full name
logto.logto_list_custom_profile_fields
ParameterTypeRequiredDescription
No parameters.
get_domains Read

Get all of your custom domains.

Lua path
app.integrations.logto.get_domains
Full name
logto.logto_list_domains
ParameterTypeRequiredDescription
No parameters.
get_email_templates Read

Get the list of email templates.

Lua path
app.integrations.logto.get_email_templates
Full name
logto.logto_list_email_templates
ParameterTypeRequiredDescription
No parameters.
get_recent_hook Read

Get recent logs that match the given query for the specified hook with pagination.

Lua path
app.integrations.logto.get_recent_hook
Full name
logto.logto_list_hook_recent_logs
ParameterTypeRequiredDescription
No parameters.
get_hooks Read

Get a list of hooks with optional pagination.

Lua path
app.integrations.logto.get_hooks
Full name
logto.logto_list_hooks
ParameterTypeRequiredDescription
No parameters.
get_all_jwt_customizers Read

Get all JWT customizers for the tenant.

Lua path
app.integrations.logto.get_all_jwt_customizers
Full name
logto.logto_list_jwt_customizers
ParameterTypeRequiredDescription
No parameters.
get Read

Get logs that match the given query with pagination.

Lua path
app.integrations.logto.get
Full name
logto.logto_list_logs
ParameterTypeRequiredDescription
No parameters.
get_one_time_tokens Read

Get a list of one-time tokens, filtering by email and status, with optional pagination.

Lua path
app.integrations.logto.get_one_time_tokens
Full name
logto.logto_list_one_time_tokens
ParameterTypeRequiredDescription
No parameters.
get_organization_application_roles Read

Get roles associated with the application in the organization.

Lua path
app.integrations.logto.get_organization_application_roles
Full name
logto.logto_list_organization_application_roles
ParameterTypeRequiredDescription
No parameters.
get_organization_applications Read

Get applications associated with the organization.

Lua path
app.integrations.logto.get_organization_applications
Full name
logto.logto_list_organization_applications
ParameterTypeRequiredDescription
No parameters.
get_organization_invitations Read

Get organization invitations.

Lua path
app.integrations.logto.get_organization_invitations
Full name
logto.logto_list_organization_invitations
ParameterTypeRequiredDescription
No parameters.
get_organization_jit_email_domains Read

Get email domains for just-in-time provisioning of users in the organization.

Lua path
app.integrations.logto.get_organization_jit_email_domains
Full name
logto.logto_list_organization_jit_email_domains
ParameterTypeRequiredDescription
No parameters.
get_organization_jit_default_roles Read

Get organization roles that will be assigned to users during just-in-time provisioning.

Lua path
app.integrations.logto.get_organization_jit_default_roles
Full name
logto.logto_list_organization_jit_roles
ParameterTypeRequiredDescription
No parameters.
get_organization_jit_sso_connectors Read

Get enterprise SSO connectors for just-in-time provisioning of users in the organization.

Lua path
app.integrations.logto.get_organization_jit_sso_connectors
Full name
logto.logto_list_organization_jit_sso_connectors
ParameterTypeRequiredDescription
No parameters.
get_organization_role_resource_scopes Read

Get resource scopes that are assigned to the specified organization role with optional pagination.

Lua path
app.integrations.logto.get_organization_role_resource_scopes
Full name
logto.logto_list_organization_role_resource_scopes
ParameterTypeRequiredDescription
No parameters.
get_organization_role_scopes Read

Get organization scopes that are assigned to the specified organization role with optional pagination.

Lua path
app.integrations.logto.get_organization_role_scopes
Full name
logto.logto_list_organization_role_scopes
ParameterTypeRequiredDescription
No parameters.
get_organization_roles Read

Get organization roles with pagination.

Lua path
app.integrations.logto.get_organization_roles
Full name
logto.logto_list_organization_roles
ParameterTypeRequiredDescription
No parameters.
get_organization_scopes Read

Get organization scopes that match with optional pagination.

Lua path
app.integrations.logto.get_organization_scopes
Full name
logto.logto_list_organization_scopes
ParameterTypeRequiredDescription
No parameters.
get_roles_user_organization Read

Get roles assigned to a user in the specified organization with pagination.

Lua path
app.integrations.logto.get_roles_user_organization
Full name
logto.logto_list_organization_user_roles
ParameterTypeRequiredDescription
No parameters.
get_scopes_user_organization_tailored_by_organization_roles Read

Get scopes assigned to a user in the specified organization tailored by the organization roles. The scopes are derived from the organization roles assigned to the user.

Lua path
app.integrations.logto.get_scopes_user_organization_tailored_by_organization_roles
Full name
logto.logto_list_organization_user_scopes
ParameterTypeRequiredDescription
No parameters.
get_organization_user_members Read

Get users that are members of the specified organization for the given query with pagination.

Lua path
app.integrations.logto.get_organization_user_members
Full name
logto.logto_list_organization_users
ParameterTypeRequiredDescription
No parameters.
get_organizations Read

Get organizations that match the given query with pagination.

Lua path
app.integrations.logto.get_organizations
Full name
logto.logto_list_organizations
ParameterTypeRequiredDescription
No parameters.
get_api_resource_scopes Read

Get scopes (permissions) defined for an API resource.

Lua path
app.integrations.logto.get_api_resource_scopes
Full name
logto.logto_list_resource_scopes
ParameterTypeRequiredDescription
No parameters.
get_api_resources Read

Get API resources in the current tenant with pagination.

Lua path
app.integrations.logto.get_api_resources
Full name
logto.logto_list_resources
ParameterTypeRequiredDescription
No parameters.
get_role_applications Read

Get applications that have the role assigned with pagination.

Lua path
app.integrations.logto.get_role_applications
Full name
logto.logto_list_role_applications
ParameterTypeRequiredDescription
No parameters.
get_role_scopes Read

Get API resource scopes (permissions) linked with a role.

Lua path
app.integrations.logto.get_role_scopes
Full name
logto.logto_list_role_scopes
ParameterTypeRequiredDescription
No parameters.
get_role_users Read

Get users who have the role assigned with pagination.

Lua path
app.integrations.logto.get_role_users
Full name
logto.logto_list_role_users
ParameterTypeRequiredDescription
No parameters.
get_roles Read

Get roles with filters and pagination.

Lua path
app.integrations.logto.get_roles
Full name
logto.logto_list_roles
ParameterTypeRequiredDescription
No parameters.
get_saml_application_metadata Read

Get the SAML metadata XML for the application.

Lua path
app.integrations.logto.get_saml_application_metadata
Full name
logto.logto_list_saml_application_metadata
ParameterTypeRequiredDescription
No parameters.
list_saml_application_secrets Read

Get all signing certificates of the SAML application.

Lua path
app.integrations.logto.list_saml_application_secrets
Full name
logto.logto_list_saml_application_secrets
ParameterTypeRequiredDescription
No parameters.
list_all_supported_sso_connector_provider_details Read

Get a complete list of supported SSO connector providers.

Lua path
app.integrations.logto.list_all_supported_sso_connector_provider_details
Full name
logto.logto_list_sso_connector_providers
ParameterTypeRequiredDescription
No parameters.
list_sso_connectors Read

Get SSO connectors with pagination. In addition to the raw SSO connector data, a copy of fetched or parsed IdP configs and a copy of connector provider's data will be attached.

Lua path
app.integrations.logto.list_sso_connectors
Full name
logto.logto_list_sso_connectors
ParameterTypeRequiredDescription
No parameters.
retrieve_social_identities_enterprise_sso_identities_and_associated_token_secret_if_token_storage_is_enabled_user Read

This API retrieves all identities (social and enterprise SSO) for a user, along with their associated token set records from the Logto Secret Vault. The token sets will only be available if token storage is enabled for the corresponding identity connector.

Lua path
app.integrations.logto.retrieve_social_identities_enterprise_sso_identities_and_associated_token_secret_if_token_storage_is_enabled_user
Full name
logto.logto_list_user_all_identities
ParameterTypeRequiredDescription
No parameters.
get_user_custom_data Read

Get custom data for the given user ID.

Lua path
app.integrations.logto.get_user_custom_data
Full name
logto.logto_list_user_custom_data
ParameterTypeRequiredDescription
No parameters.
get_user_active_grants Read

Retrieve all non-expired grants of the user. Optionally filter by application type via `appType`; when omitted, grants from all application types are returned.

Lua path
app.integrations.logto.get_user_active_grants
Full name
logto.logto_list_user_grants
ParameterTypeRequiredDescription
No parameters.
get_user_config Read

Retrieve the exposed portion of a user's logto config. Includes MFA states (enabled, skipped, skipMfaOnSignIn) and passkey sign-in states (skipped).

Lua path
app.integrations.logto.get_user_config
Full name
logto.logto_list_user_logto_configs
ParameterTypeRequiredDescription
No parameters.
get_user_mfa_verifications Read

Get a user's existing MFA verifications for a given user ID.

Lua path
app.integrations.logto.get_user_mfa_verifications
Full name
logto.logto_list_user_mfa_verifications
ParameterTypeRequiredDescription
No parameters.
get_organizations_user Read

Get all organizations that the user is a member of. In each organization object, the user's roles in that organization are included in the `organizationRoles` array.

Lua path
app.integrations.logto.get_organizations_user
Full name
logto.logto_list_user_organizations
ParameterTypeRequiredDescription
No parameters.
get_personal_access_tokens Read

Get all personal access tokens for the user.

Lua path
app.integrations.logto.get_personal_access_tokens
Full name
logto.logto_list_user_personal_access_tokens
ParameterTypeRequiredDescription
No parameters.
get_roles_user Read

Get API resource roles assigned to the user with pagination.

Lua path
app.integrations.logto.get_roles_user
Full name
logto.logto_list_user_roles
ParameterTypeRequiredDescription
No parameters.
get_user_active_sessions Read

Retrieve all non-expired sessions for the user, including session metadata and interaction details when available.

Lua path
app.integrations.logto.get_user_active_sessions
Full name
logto.logto_list_user_sessions
ParameterTypeRequiredDescription
No parameters.
get_users Read

Get users with filters and pagination. Logto provides a very flexible way to query users. You can filter users by almost any fields with multiple modes. To learn more about the query syntax, please refer to [Advanced user search](https://docs.logto.io/docs/recipes/manage-users/advanced-user-search/).

Lua path
app.integrations.logto.get_users
Full name
logto.logto_list_users
ParameterTypeRequiredDescription
No parameters.
mark_mfa_as_enabled Write

Mark the user's MFA as enabled for the current interaction and persist in DB user configs upon successful submission.

Lua path
app.integrations.logto.mark_mfa_as_enabled
Full name
logto.logto_mark_mfa_enabled
ParameterTypeRequiredDescription
No parameters.
update_api_resource_roles_application Write

Update API resource roles assigned to the specified application. This will replace the existing API resource roles.

Lua path
app.integrations.logto.update_api_resource_roles_application
Full name
logto.logto_replace_application_roles
ParameterTypeRequiredDescription
No parameters.
update_application_level_sign_experience Write

Update application level sign-in experience for the specified application. Create a new sign-in experience if it does not exist. - Only branding properties and terms links customization is supported for now. - Only third-party applications can be customized for now. - Application level sign-in experience customization is optional, if provided, it will override the default branding and terms links.

Lua path
app.integrations.logto.update_application_level_sign_experience
Full name
logto.logto_replace_application_sign_in_experience
ParameterTypeRequiredDescription
No parameters.
grant_list_organization_access_user_application Write

Grant a list of organization access of a user for a application by application id and user id. The user must be a member of all the organizations. Only third-party application needs to be granted access to organizations, all the other applications can request for all the organizations' access by default.

Lua path
app.integrations.logto.grant_list_organization_access_user_application
Full name
logto.logto_replace_application_user_consent_organizations
ParameterTypeRequiredDescription
No parameters.
upsert_custom_phrases Write

Upsert custom phrases for the specified language tag. Upsert means that if the custom phrases already exist, they will be updated. Otherwise, they will be created.

Lua path
app.integrations.logto.upsert_custom_phrases
Full name
logto.logto_replace_custom_phrase
ParameterTypeRequiredDescription
No parameters.
replace_email_templates Write

Create or replace a list of email templates. If an email template with the same language tag and template type already exists, its details will be updated.

Lua path
app.integrations.logto.replace_email_templates
Full name
logto.logto_replace_email_templates
ParameterTypeRequiredDescription
No parameters.
update_one_time_token_status Write

Update the status of a one-time token by its ID. This can be used to mark the token as consumed or expired.

Lua path
app.integrations.logto.update_one_time_token_status
Full name
logto.logto_replace_one_time_token_status
ParameterTypeRequiredDescription
No parameters.
replace_organization_application_roles Write

Replace all roles associated with the application in the organization with the given data.

Lua path
app.integrations.logto.replace_organization_application_roles
Full name
logto.logto_replace_organization_application_roles
ParameterTypeRequiredDescription
No parameters.
replace_organization_applications Write

Replace all applications associated with the organization with the given data.

Lua path
app.integrations.logto.replace_organization_applications
Full name
logto.logto_replace_organization_applications
ParameterTypeRequiredDescription
No parameters.
update_organization_invitation_status Write

Update the status of an organization invitation by ID.

Lua path
app.integrations.logto.update_organization_invitation_status
Full name
logto.logto_replace_organization_invitation_status
ParameterTypeRequiredDescription
No parameters.
replace_organization_jit_email_domains Write

Replace all just-in-time provisioning email domains for the organization with the given data.

Lua path
app.integrations.logto.replace_organization_jit_email_domains
Full name
logto.logto_replace_organization_jit_email_domains
ParameterTypeRequiredDescription
No parameters.
replace_organization_jit_default_roles Write

Replace all organization roles that will be assigned to users during just-in-time provisioning with the given data.

Lua path
app.integrations.logto.replace_organization_jit_default_roles
Full name
logto.logto_replace_organization_jit_roles
ParameterTypeRequiredDescription
No parameters.
replace_organization_jit_sso_connectors Write

Replace all enterprise SSO connectors for just-in-time provisioning of users in the organization with the given data.

Lua path
app.integrations.logto.replace_organization_jit_sso_connectors
Full name
logto.logto_replace_organization_jit_sso_connectors
ParameterTypeRequiredDescription
No parameters.
replace_resource_scopes_organization_role Write

Replace all resource scopes that are assigned to the specified organization role with the given resource scopes. This effectively removes all existing organization scope assignments and replaces them with the new ones.

Lua path
app.integrations.logto.replace_resource_scopes_organization_role
Full name
logto.logto_replace_organization_role_resource_scopes
ParameterTypeRequiredDescription
No parameters.
replace_organization_scopes_organization_role Write

Replace all organization scopes that are assigned to the specified organization role with the given organization scopes. This effectively removes all existing organization scope assignments and replaces them with the new ones.

Lua path
app.integrations.logto.replace_organization_scopes_organization_role
Full name
logto.logto_replace_organization_role_scopes
ParameterTypeRequiredDescription
No parameters.
update_roles_user_organization Write

Update roles assigned to a user in the specified organization with the provided data.

Lua path
app.integrations.logto.update_roles_user_organization
Full name
logto.logto_replace_organization_user_roles
ParameterTypeRequiredDescription
No parameters.
replace_organization_user_members Write

Replace all user members for the specified organization with the given users. This effectively removing all existing user memberships in the organization and adding the new users as members.

Lua path
app.integrations.logto.replace_organization_user_members
Full name
logto.logto_replace_organization_users
ParameterTypeRequiredDescription
No parameters.
update_social_identity_user Write

Directly update a social identity of the user.

Lua path
app.integrations.logto.update_social_identity_user
Full name
logto.logto_replace_user_identity
ParameterTypeRequiredDescription
No parameters.
update_roles_user Write

Update API resource roles assigned to the user. This will replace the existing roles.

Lua path
app.integrations.logto.update_roles_user
Full name
logto.logto_replace_user_roles
ParameterTypeRequiredDescription
No parameters.
reset_user_password Write

Reset the user's password. (`ForgotPassword` interaction only)

Lua path
app.integrations.logto.reset_user_password
Full name
logto.logto_reset_user_password
ParameterTypeRequiredDescription
No parameters.
rotate_oidc_keys Write

A new key will be generated and prepend to the list of keys. Only two recent keys will be kept. The oldest key will be automatically removed if there are more than two keys.

Lua path
app.integrations.logto.rotate_oidc_keys
Full name
logto.logto_rotate_oidc_keys
ParameterTypeRequiredDescription
No parameters.
skip_mfa_binding_flow Write

Skip MFA verification binding flow. If the MFA is enabled in the sign-in experience settings and marked as `UserControlled`, the user can skip the MFA verification binding flow by calling this API.

Lua path
app.integrations.logto.skip_mfa_binding_flow
Full name
logto.logto_skip_mfa_binding_flow
ParameterTypeRequiredDescription
No parameters.
skip_additional_mfa_suggestion Write

Mark the optional additional MFA binding suggestion as skipped for the current interaction. When multiple MFA factors are enabled and only an email/phone factor is configured, a suggestion to add another factor may be shown; this endpoint records the choice to skip.

Lua path
app.integrations.logto.skip_additional_mfa_suggestion
Full name
logto.logto_skip_mfa_suggestion
ParameterTypeRequiredDescription
No parameters.
skip_passkey_binding Write

Skip passkey binding flow. The users can temporarily skip the passkey binding flow by calling this API during sign-up. On sign-in, the skip flag will be persisted to user config.

Lua path
app.integrations.logto.skip_passkey_binding
Full name
logto.logto_skip_passkey_binding
ParameterTypeRequiredDescription
No parameters.
submit_interaction Write

Submit the current interaction. - Submit the verified user identity to the OIDC provider for further authentication (SignIn and Register). - Update the user's profile data if any (SignIn and Register). - Reset the password and clear all the interaction records (ForgotPassword).

Lua path
app.integrations.logto.submit_interaction
Full name
logto.logto_submit_interaction
ParameterTypeRequiredDescription
No parameters.
test_jwt_customizer Write

Test the JWT customizer script with the given sample context and sample token payload.

Lua path
app.integrations.logto.test_jwt_customizer
Full name
logto.logto_test_jwt_customizer
ParameterTypeRequiredDescription
No parameters.
update_account_center_settings Write

Update the account center settings with the provided settings.

Lua path
app.integrations.logto.update_account_center_settings
Full name
logto.logto_update_account_center_settings
ParameterTypeRequiredDescription
No parameters.
update_admin_console_config Write

Update the global configuration object for Logto Console. This method performs a partial update.

Lua path
app.integrations.logto.update_admin_console_config
Full name
logto.logto_update_admin_console_config
ParameterTypeRequiredDescription
No parameters.
update_application Write

Update application details by ID with the given data.

Lua path
app.integrations.logto.update_application
Full name
logto.logto_update_application
ParameterTypeRequiredDescription
No parameters.
update_application_custom_data Write

Update the custom data of an application.

Lua path
app.integrations.logto.update_application_custom_data
Full name
logto.logto_update_application_custom_data
ParameterTypeRequiredDescription
No parameters.
update_application_secret Write

Update a secret for the application by name.

Lua path
app.integrations.logto.update_application_secret
Full name
logto.logto_update_application_secret
ParameterTypeRequiredDescription
No parameters.
update_captcha_provider Write

Update the captcha provider with the provided settings.

Lua path
app.integrations.logto.update_captcha_provider
Full name
logto.logto_update_captcha_provider
ParameterTypeRequiredDescription
No parameters.
update_connector Write

Update connector by ID with the given data. This methods performs a partial update.

Lua path
app.integrations.logto.update_connector
Full name
logto.logto_update_connector
ParameterTypeRequiredDescription
No parameters.
update_custom_profile_field_by_name Write

Update a custom profile field by name.

Lua path
app.integrations.logto.update_custom_profile_field_by_name
Full name
logto.logto_update_custom_profile_field_by_name
ParameterTypeRequiredDescription
No parameters.
update_display_order_custom_profile_fields_sign_experience Write

Update the display order of the custom profile fields in Sign-in Experience.

Lua path
app.integrations.logto.update_display_order_custom_profile_fields_sign_experience
Full name
logto.logto_update_custom_profile_fields_sie_order
ParameterTypeRequiredDescription
No parameters.
update_email_template_details Write

Update the details of an email template by its ID.

Lua path
app.integrations.logto.update_email_template_details
Full name
logto.logto_update_email_template_details
ParameterTypeRequiredDescription
No parameters.
update_hook Write

Update hook details by ID with the given data.

Lua path
app.integrations.logto.update_hook
Full name
logto.logto_update_hook
ParameterTypeRequiredDescription
No parameters.
update_signing_key_hook Write

Update the signing key for the specified hook.

Lua path
app.integrations.logto.update_signing_key_hook
Full name
logto.logto_update_hook_signing_key
ParameterTypeRequiredDescription
No parameters.
update_interaction_event Write

Update the current experience interaction event to the given event type. This API is used to switch the interaction event between `SignIn` and `Register`, while keeping all the verification records data.

Lua path
app.integrations.logto.update_interaction_event
Full name
logto.logto_update_interaction_event
ParameterTypeRequiredDescription
No parameters.
update_jwt_customizer Write

Update the JWT customizer for the given token type.

Lua path
app.integrations.logto.update_jwt_customizer
Full name
logto.logto_update_jwt_customizer
ParameterTypeRequiredDescription
No parameters.
update_config Write

Update the exposed portion of the current user's logto config. Supports updating MFA states (enabled, skipped, skipMfaOnSignIn) and passkey sign-in binding states (skipped). Passkey is a WebAuthn MFA factor and shares the same account center field access control as MFA.

Lua path
app.integrations.logto.update_config
Full name
logto.logto_update_logto_config
ParameterTypeRequiredDescription
No parameters.
update_mfa_settings Write

Update MFA settings for the user. This endpoint requires identity verification and the Identities scope. Controls whether MFA verification is required during sign-in when the user has MFA configured.

Lua path
app.integrations.logto.update_mfa_settings
Full name
logto.logto_update_mfa_settings
ParameterTypeRequiredDescription
No parameters.
update_mfa_verification_name Write

Update a MFA verification name, a logto-verification-id in header is required for checking sensitive permissions. Only WebAuthn is supported for now.

Lua path
app.integrations.logto.update_mfa_verification_name
Full name
logto.logto_update_mfa_verification_name
ParameterTypeRequiredDescription
No parameters.
update_oidc_session_config Write

Update the OIDC session configuration for the tenant. This method performs a partial update. If the configuration does not exist, it will be created.

Lua path
app.integrations.logto.update_oidc_session_config
Full name
logto.logto_update_oidc_session_config
ParameterTypeRequiredDescription
No parameters.
update_organization Write

Update organization details by ID with the given data.

Lua path
app.integrations.logto.update_organization
Full name
logto.logto_update_organization
ParameterTypeRequiredDescription
No parameters.
update_organization_role Write

Update organization role details by ID with the given data.

Lua path
app.integrations.logto.update_organization_role
Full name
logto.logto_update_organization_role
ParameterTypeRequiredDescription
No parameters.
update_organization_scope Write

Update organization scope details by ID with the given data.

Lua path
app.integrations.logto.update_organization_scope
Full name
logto.logto_update_organization_scope
ParameterTypeRequiredDescription
No parameters.
update_other_profile Write

Update other profile for the user, only the fields that are passed in will be updated, to update the address, the user must have the address scope.

Lua path
app.integrations.logto.update_other_profile
Full name
logto.logto_update_other_profile
ParameterTypeRequiredDescription
No parameters.
update_password Write

Update password for the user, a logto-verification-id in header is required for checking sensitive permissions.

Lua path
app.integrations.logto.update_password
Full name
logto.logto_update_password
ParameterTypeRequiredDescription
No parameters.
update_personal_access_token Write

Update a token for the user by name.

Lua path
app.integrations.logto.update_personal_access_token
Full name
logto.logto_update_personal_access_token_name
ParameterTypeRequiredDescription
No parameters.
update_primary_email Write

Update primary email for the user, a logto-verification-id in header is required for checking sensitive permissions, and a new identifier verification record is required for the new email ownership verification.

Lua path
app.integrations.logto.update_primary_email
Full name
logto.logto_update_primary_email
ParameterTypeRequiredDescription
No parameters.
update_primary_phone Write

Update primary phone for the user, a logto-verification-id in header is required for checking sensitive permissions, and a new identifier verification record is required for the new phone ownership verification.

Lua path
app.integrations.logto.update_primary_phone
Full name
logto.logto_update_primary_phone
ParameterTypeRequiredDescription
No parameters.
update_profile Write

Update profile for the user, only the fields that are passed in will be updated. Updating or deleting username requires a logto-verification-id header for checking sensitive permissions. Removing any sign-in identifier, including username, is rejected if it would remove the user's last identifier.

Lua path
app.integrations.logto.update_profile
Full name
logto.logto_update_profile
ParameterTypeRequiredDescription
No parameters.
update_api_resource Write

Update an API resource details by ID with the given data. This method performs a partial update.

Lua path
app.integrations.logto.update_api_resource
Full name
logto.logto_update_resource
ParameterTypeRequiredDescription
No parameters.
set_api_resource_as_default Write

Set an API resource as the default resource for the current tenant. Each tenant can have only one default API resource. If an API resource is set as default, the previously set default API resource will be set as non-default. See [this section](https://docs.logto.io/docs/references/resources/#default-api) for more information.

Lua path
app.integrations.logto.set_api_resource_as_default
Full name
logto.logto_update_resource_is_default
ParameterTypeRequiredDescription
No parameters.
update_api_resource_scope Write

Update an API resource scope (permission) for the given resource. This method performs a partial update.

Lua path
app.integrations.logto.update_api_resource_scope
Full name
logto.logto_update_resource_scope
ParameterTypeRequiredDescription
No parameters.
update_role Write

Update role details. This method performs a partial update.

Lua path
app.integrations.logto.update_role
Full name
logto.logto_update_role
ParameterTypeRequiredDescription
No parameters.
update_saml_application Write

Update SAML application details by ID.

Lua path
app.integrations.logto.update_saml_application
Full name
logto.logto_update_saml_application
ParameterTypeRequiredDescription
No parameters.
update_saml_application_secret Write

Update the status of a signing certificate.

Lua path
app.integrations.logto.update_saml_application_secret
Full name
logto.logto_update_saml_application_secret
ParameterTypeRequiredDescription
No parameters.
update_default_sign_experience_settings Write

Update the default sign-in experience settings with the provided data.

Lua path
app.integrations.logto.update_default_sign_experience_settings
Full name
logto.logto_update_sign_in_exp
ParameterTypeRequiredDescription
No parameters.
update_access_token_social_identity_by_verification_id Write

This API updates the token storage for a social identity by a given social verification ID. It is used to fetch a new access token from the social provider and store it securely in Logto.

Lua path
app.integrations.logto.update_access_token_social_identity_by_verification_id
Full name
logto.logto_update_social_identity_access_token_by_verification_id
ParameterTypeRequiredDescription
No parameters.
update_sso_connector Write

Update an SSO connector by ID. This method performs a partial update.

Lua path
app.integrations.logto.update_sso_connector
Full name
logto.logto_update_sso_connector
ParameterTypeRequiredDescription
No parameters.
update_user Write

Update user data for the given ID. This method performs a partial update.

Lua path
app.integrations.logto.update_user
Full name
logto.logto_update_user
ParameterTypeRequiredDescription
No parameters.
update_user_custom_data Write

Update custom data for the given user ID. This method performs a partial update of the custom data object.

Lua path
app.integrations.logto.update_user_custom_data
Full name
logto.logto_update_user_custom_data
ParameterTypeRequiredDescription
No parameters.
update_user_suspension_status Write

Update user suspension status for the given ID.

Lua path
app.integrations.logto.update_user_suspension_status
Full name
logto.logto_update_user_is_suspended
ParameterTypeRequiredDescription
No parameters.
update_user_config Write

Update the exposed portion of a user's logto config. Supports updating MFA states (enabled, skipped, skipMfaOnSignIn) and passkey sign-in states (skipped). All fields are optional - only provided fields will be updated.

Lua path
app.integrations.logto.update_user_config
Full name
logto.logto_update_user_logto_configs
ParameterTypeRequiredDescription
No parameters.
update_user_password Write

Update user password for the given ID.

Lua path
app.integrations.logto.update_user_password
Full name
logto.logto_update_user_password
ParameterTypeRequiredDescription
No parameters.
update_personal_access_token Write

Update a token for the user by name using the legacy path parameter. Deprecated: use the PATCH /personal-access-tokens endpoint instead to avoid url name encoding issues.

Lua path
app.integrations.logto.update_personal_access_token
Full name
logto.logto_update_user_personal_access_token
ParameterTypeRequiredDescription
No parameters.
update_user_profile Write

Update profile for the given user ID. This method performs a partial update of the profile object.

Lua path
app.integrations.logto.update_user_profile
Full name
logto.logto_update_user_profile
ParameterTypeRequiredDescription
No parameters.
upload_custom_ui_assets Write

Upload a zip file containing custom web assets such as HTML, CSS, and JavaScript files, then replace the default sign-in experience with the custom UI assets.

Lua path
app.integrations.logto.upload_custom_ui_assets
Full name
logto.logto_upload_custom_ui_assets
ParameterTypeRequiredDescription
No parameters.
upsert_id_token_claims_configuration Write

Create or update the ID token extended claims configuration for the tenant. This controls which extended claims are included in ID tokens when the corresponding scopes are requested.

Lua path
app.integrations.logto.upsert_id_token_claims_configuration
Full name
logto.logto_upsert_id_token_config
ParameterTypeRequiredDescription
No parameters.
create_or_update_jwt_customizer Write

Create or update a JWT customizer for the given token type.

Lua path
app.integrations.logto.create_or_update_jwt_customizer
Full name
logto.logto_upsert_jwt_customizer
ParameterTypeRequiredDescription
No parameters.
verify_backup_code Write

Create a new BackupCode verification record and verify the provided backup code against the user's backup codes. The verification record will be marked as verified if the code is correct.

Lua path
app.integrations.logto.verify_backup_code
Full name
logto.logto_verify_backup_code
ParameterTypeRequiredDescription
No parameters.
verify_enterprise_sso_verification Write

Verify the SSO authorization response data and get the user's identity from the SSO provider.

Lua path
app.integrations.logto.verify_enterprise_sso_verification
Full name
logto.logto_verify_enterprise_sso_verification
ParameterTypeRequiredDescription
No parameters.
verify_mfa_verification_code Write

Verify the provided MFA verification code. The verification code must have been sent using the MFA verification code endpoint. This endpoint verifies the code against the user's bound identifier and marks the verification as complete if successful.

Lua path
app.integrations.logto.verify_mfa_verification_code
Full name
logto.logto_verify_mfa_verification_code
ParameterTypeRequiredDescription
No parameters.
verify_one_time_token Write

Verify a one-time token associated with an email address. If the token is valid and not expired, it will be marked as consumed.

Lua path
app.integrations.logto.verify_one_time_token
Full name
logto.logto_verify_one_time_token
ParameterTypeRequiredDescription
No parameters.
verify_one_time_token Write

Verify the provided one-time token against the user's email. If successful, the verification record will be marked as verified.

Lua path
app.integrations.logto.verify_one_time_token
Full name
logto.logto_verify_one_time_token_verification
ParameterTypeRequiredDescription
No parameters.
verify_passkey_sign_webauthn_authentication Write

Verify the passkey sign-in WebAuthn authentication response against the stored authentication challenge. When `verificationId` is provided, it verifies against the challenge generated by the identifier-based authentication endpoint. When omitted, it verifies against the preflight authentication options stored in the interaction. Upon successful verification, the verification record will be marked as verified and the user will be resolved by the credential if not provided earlier.

Lua path
app.integrations.logto.verify_passkey_sign_webauthn_authentication
Full name
logto.logto_verify_sign_in_passkey_authentication
ParameterTypeRequiredDescription
No parameters.
verify_social_verification Write

Verify the social authorization response data and get the user's identity data from the social provider.

Lua path
app.integrations.logto.verify_social_verification
Full name
logto.logto_verify_social_verification
ParameterTypeRequiredDescription
No parameters.
verify_totp_verification Write

Verifies the provided TOTP code against the new created TOTP secret or the existing TOTP secret. If a verificationId is provided, this API will verify the code against the TOTP secret that is associated with the verification record. Otherwise, a new TOTP verification record will be created and verified against the user's existing TOTP secret.

Lua path
app.integrations.logto.verify_totp_verification
Full name
logto.logto_verify_totp_verification
ParameterTypeRequiredDescription
No parameters.
verify_user_password Write

Test if the given password matches the user's password.

Lua path
app.integrations.logto.verify_user_password
Full name
logto.logto_verify_user_password
ParameterTypeRequiredDescription
No parameters.
verify_social_verification_record Write

Verify a social verification record by callback connector data, and save the user information to the record.

Lua path
app.integrations.logto.verify_social_verification_record
Full name
logto.logto_verify_verification_by_social
ParameterTypeRequiredDescription
No parameters.
verify_verification_code Write

Verify the provided verification code against the identifier. If successful, the verification record will be marked as verified.

Lua path
app.integrations.logto.verify_verification_code
Full name
logto.logto_verify_verification_by_verification_code
ParameterTypeRequiredDescription
No parameters.
verify_verification_code Write

Verify a verification code for a specified identifier. if you're using email as the identifier, you need to setup your email connector first. if you're using phone as the identifier, you need to setup your SMS connector first.

Lua path
app.integrations.logto.verify_verification_code
Full name
logto.logto_verify_verification_code
ParameterTypeRequiredDescription
No parameters.
verify_verification_code Write

Verify the provided verification code against the user's identifier. If successful, the verification record will be marked as verified.

Lua path
app.integrations.logto.verify_verification_code
Full name
logto.logto_verify_verification_code_verification
ParameterTypeRequiredDescription
No parameters.
verify_webauthn_authentication_verification Write

Verifies the WebAuthn authentication response against the user's authentication challenge. Upon successful verification, the verification record will be marked as verified.

Lua path
app.integrations.logto.verify_webauthn_authentication_verification
Full name
logto.logto_verify_web_authn_authentication_verification
ParameterTypeRequiredDescription
No parameters.
verify_webauthn_registration Write

Verify the WebAuthn registration by the user's response.

Lua path
app.integrations.logto.verify_webauthn_registration
Full name
logto.logto_verify_web_authn_registration
ParameterTypeRequiredDescription
No parameters.
verify_webauthn_registration_verification Write

Verify the WebAuthn registration response against the user's WebAuthn registration challenge. If the response is valid, the WebAuthn registration record will be marked as verified.

Lua path
app.integrations.logto.verify_webauthn_registration_verification
Full name
logto.logto_verify_web_authn_registration_verification
ParameterTypeRequiredDescription
No parameters.