stytch-openapi.yml

# Generated from Postman collection
# and hand-edited from there. Good luck!
openapi: 3.1.0
info:
  title: "Stytch B2B API [Last Updated: 2024-02-14]"
  description: >-
    Stytch’s B2B API is designed to address the unique authentication and user
    management needs of organization-based applications at every stage of
    growth.
  version: 1.0.0
servers:
  - description: Test environment
    url: https://test.stytch.com
  - description: Live environment
    url: https://api.stytch.com
components:
  schemas:
    ActiveSCIMConnection:
      type: object
      properties:
        connection_id:
          type: string
        display_name:
          type: string
        bearer_token_last_four:
          type: string
        bearer_token_expires_at:
          type: string
          format: date-time
      required:
        - connection_id
        - display_name
        - bearer_token_last_four

    ActiveSSOConnection:
      type: object
      properties:
        connection_id:
          type: string
        display_name:
          type: string
        identity_provider:
          type: string
      required:
        - connection_id
        - display_name
        - identity_provider

    AmazonOAuthFactor:
      type: object
      properties:
        id:
          type: string
        provider_subject:
          type: string
        email_id:
          type: string
      required:
        - id
        - provider_subject

    AppleOAuthFactor:
      type: object
      properties:
        id:
          type: string
        provider_subject:
          type: string
        email_id:
          type: string
      required:
        - id
        - provider_subject

    AuthenticatorAppFactor:
      type: object
      properties:
        totp_id:
          type: string
      required:
        - totp_id

    AuthenticationFactor:
      type: object
      properties:
        type:
          type: string
          description: >
            The type of authentication factor. Possible values include `magic_link`, `otp`, `oauth`, `password`, `email_otp`, `sso`, etc.
        delivery_method:
          type: string
          description: >
            The method used to deliver the authentication factor. Possible values depend on the `type`.
        last_authenticated_at:
          type: string
          format: date-time
          description: >
            The timestamp when the factor was last authenticated.
        created_at:
          type: string
          format: date-time
          description: >
            The timestamp when the factor was initially authenticated.
        updated_at:
          type: string
          format: date-time
          description: >
            The timestamp when the factor was last updated.
        email_factor:
          $ref: "#/components/schemas/EmailFactor"
        phone_number_factor:
          $ref: "#/components/schemas/PhoneNumberFactor"
        google_oauth_factor:
          $ref: "#/components/schemas/GoogleOAuthFactor"
        microsoft_oauth_factor:
          $ref: "#/components/schemas/MicrosoftOAuthFactor"
        apple_oauth_factor:
          $ref: "#/components/schemas/AppleOAuthFactor"
        amazon_oauth_factor:
          $ref: "#/components/schemas/AmazonOAuthFactor"
        webauthn_factor:
          $ref: "#/components/schemas/WebAuthnFactor"
        authenticator_app_factor:
          $ref: "#/components/schemas/AuthenticatorAppFactor"
        github_oauth_factor:
          $ref: "#/components/schemas/GithubOAuthFactor"
        recovery_code_factor:
          $ref: "#/components/schemas/RecoveryCodeFactor"
        facebook_oauth_factor:
          $ref: "#/components/schemas/FacebookOAuthFactor"
        crypto_wallet_factor:
          $ref: "#/components/schemas/CryptoWalletFactor"
        bitbucket_oauth_factor:
          $ref: "#/components/schemas/BitbucketOAuthFactor"
        coinbase_oauth_factor:
          $ref: "#/components/schemas/CoinbaseOAuthFactor"
        discord_oauth_factor:
          $ref: "#/components/schemas/DiscordOAuthFactor"
        figma_oauth_factor:
          $ref: "#/components/schemas/FigmaOAuthFactor"
        git_lab_oauth_factor:
          $ref: "#/components/schemas/GitLabOAuthFactor"
        instagram_oauth_factor:
          $ref: "#/components/schemas/InstagramOAuthFactor"
        linked_in_oauth_factor:
          $ref: "#/components/schemas/LinkedInOAuthFactor"
        shopify_oauth_factor:
          $ref: "#/components/schemas/ShopifyOAuthFactor"
        slack_oauth_factor:
          $ref: "#/components/schemas/SlackOAuthFactor"
        snapchat_oauth_factor:
          $ref: "#/components/schemas/SnapchatOAuthFactor"
        spotify_oauth_factor:
          $ref: "#/components/schemas/SpotifyOAuthFactor"
        steam_oauth_factor:
          $ref: "#/components/schemas/SteamOAuthFactor"
        tik_tok_oauth_factor:
          $ref: "#/components/schemas/TikTokOAuthFactor"
        twitch_oauth_factor:
          $ref: "#/components/schemas/TwitchOAuthFactor"
        twitter_oauth_factor:
          $ref: "#/components/schemas/TwitterOAuthFactor"
        embeddable_magic_link_factor:
          $ref: "#/components/schemas/EmbeddableMagicLinkFactor"
        biometric_factor:
          $ref: "#/components/schemas/BiometricFactor"
        saml_sso_factor:
          $ref: "#/components/schemas/SAMLSSOFactor"
        oidc_sso_factor:
          $ref: "#/components/schemas/OIDCSSOFactor"
        salesforce_oauth_factor:
          $ref: "#/components/schemas/SalesforceOAuthFactor"
        yahoo_oauth_factor:
          $ref: "#/components/schemas/YahooOAuthFactor"
        hubspot_oauth_factor:
          $ref: "#/components/schemas/HubspotOAuthFactor"
        slack_oauth_exchange_factor:
          $ref: "#/components/schemas/SlackOAuthExchangeFactor"
        hubspot_oauth_exchange_factor:
          $ref: "#/components/schemas/HubspotOAuthExchangeFactor"
        github_oauth_exchange_factor:
          $ref: "#/components/schemas/GithubOAuthExchangeFactor"
        google_oauth_exchange_factor:
          $ref: "#/components/schemas/GoogleOAuthExchangeFactor"
        impersonated_factor:
          $ref: "#/components/schemas/ImpersonatedFactor"
        oauth_access_token_exchange_factor:
          $ref: "#/components/schemas/OAuthAccessTokenExchangeFactor"
      required:
        - type
        - delivery_method

    BiometricFactor:
      type: object
      properties:
        biometric_registration_id:
          type: string
      required:
        - biometric_registration_id

    BitbucketOAuthFactor:
      type: object
      properties:
        id:
          type: string
        provider_subject:
          type: string
        email_id:
          type: string
      required:
        - id
        - provider_subject

    CoinbaseOAuthFactor:
      type: object
      properties:
        id:
          type: string
        provider_subject:
          type: string
        email_id:
          type: string
      required:
        - id
        - provider_subject

    Connection:
      type: object
      properties:
        organization_id:
          type: string
        connection_id:
          type: string
        external_organization_id:
          type: string
        external_connection_id:
          type: string
        display_name:
          type: string
        status:
          type: string
        external_connection_implicit_role_assignments:
          type: array
          items:
            $ref: "#/components/schemas/ConnectionImplicitRoleAssignment"
        external_group_implicit_role_assignments:
          type: array
          items:
            $ref: "#/components/schemas/GroupImplicitRoleAssignment"
      required:
        - organization_id
        - connection_id
        - external_organization_id
        - external_connection_id
        - display_name
        - status
        - external_connection_implicit_role_assignments
        - external_group_implicit_role_assignments

    ConnectionImplicitRoleAssignment:
      type: object
      properties:
        role_id:
          type: string
          description: >
            The unique identifier of the RBAC Role, provided by the developer and intended to be human-readable.
      required:
        - role_id

    CryptoWalletFactor:
      type: object
      properties:
        crypto_wallet_id:
          type: string
        crypto_wallet_address:
          type: string
        crypto_wallet_type:
          type: string
      required:
        - crypto_wallet_id
        - crypto_wallet_address
        - crypto_wallet_type

    DiscordOAuthFactor:
      type: object
      properties:
        id:
          type: string
        provider_subject:
          type: string
        email_id:
          type: string
      required:
        - id
        - provider_subject

    DiscoveredOrganization:
      type: object
      properties:
        member_authenticated:
          type: boolean
          description: >
            Indicates whether the Member has all of the factors needed to fully authenticate to this Organization.
            If false, the Member may need to complete an MFA step or complete a different primary authentication
            flow. See the `primary_required` and `mfa_required` fields for more details on each.
        organization:
          $ref: "#/components/schemas/Organization"
          description: The [Organization object](https://stytch.com/docs/b2b/api/organization-object).
        membership:
          $ref: "#/components/schemas/Membership"
          description: Information about the membership.
        primary_required:
          $ref: "#/components/schemas/PrimaryRequired"
          description: Information about the primary authentication requirements of the Organization.
        mfa_required:
          $ref: "#/components/schemas/MfaRequired"
          description: Information about the MFA requirements of the Organization and the Member's options for fulfilling MFA.
      required:
        - member_authenticated

    EmailFactor:
      type: object
      properties:
        email_id:
          type: string
          description: >
            The globally unique UUID of the Member's email.
        email_address:
          type: string
          description: >
            The email address of the Member.
      required:
        - email_id
        - email_address

    EmailImplicitRoleAssignment:
      type: object
      properties:
        domain:
          type: string
        role_id:
          type: string
      required:
        - domain
        - role_id

    EmbeddableMagicLinkFactor:
      type: object
      properties:
        embedded_id:
          type: string
      required:
        - embedded_id

    ErrorResponse:
      type: object
      properties:
        error_message:
          type: string
        error_type:
          type: string
        error_url:
          type: string
        request_id:
          type: string
        status_code:
          type: integer

    FacebookOAuthFactor:
      type: object
      properties:
        id:
          type: string
        provider_subject:
          type: string
        email_id:
          type: string
      required:
        - id
        - provider_subject

    FigmaOAuthFactor:
      type: object
      properties:
        id:
          type: string
        provider_subject:
          type: string
        email_id:
          type: string
      required:
        - id
        - provider_subject

    GitLabOAuthFactor:
      type: object
      properties:
        id:
          type: string
        provider_subject:
          type: string
        email_id:
          type: string
      required:
        - id
        - provider_subject

    GithubOAuthExchangeFactor:
      type: object
      properties:
        email_id:
          type: string
      required:
        - email_id

    GithubOAuthFactor:
      type: object
      properties:
        id:
          type: string
        provider_subject:
          type: string
        email_id:
          type: string
      required:
        - id
        - provider_subject

    GoogleOAuthExchangeFactor:
      type: object
      properties:
        email_id:
          type: string
      required:
        - email_id

    GoogleOAuthFactor:
      type: object
      properties:
        id:
          type: string
          description: >
            The unique ID of an OAuth registration.
        provider_subject:
          type: string
          description: >
            The unique identifier for the User within a given OAuth provider.
        email_id:
          type: string
          description: >
            The globally unique UUID of the Member's email.
      required:
        - id
        - provider_subject

    GroupImplicitRoleAssignment:
      type: object
      properties:
        role_id:
          type: string
          description: >
            The unique identifier of the RBAC Role, provided by the developer and intended to be human-readable.
        group:
          type: string
          description: >
            The name of the group that grants the specified role assignment.
      required:
        - role_id
        - group

    HubspotOAuthExchangeFactor:
      type: object
      properties:
        email_id:
          type: string
      required:
        - email_id

    HubspotOAuthFactor:
      type: object
      properties:
        id:
          type: string
        provider_subject:
          type: string
        email_id:
          type: string
      required:
        - id
        - provider_subject

    ImpersonatedFactor:
      type: object
      properties:
        impersonator_id:
          type: string
        impersonator_email_address:
          type: string
      required:
        - impersonator_id
        - impersonator_email_address

    InstagramOAuthFactor:
      type: object
      properties:
        id:
          type: string
        provider_subject:
          type: string
        email_id:
          type: string
      required:
        - id
        - provider_subject

    JWK:
      type: object
      properties:
        kty:
          type: string
          description: Key type.
        use:
          type: string
          description: Public key use.
        key_ops:
          type: array
          items:
            type: string
          description: Key operations.
        alg:
          type: string
          description: Algorithm.
        kid:
          type: string
          description: Key ID.
        x5c:
          type: array
          items:
            type: string
          description: X.509 certificate chain.
        n:
          type: string
          description: RSA modulus.
        e:
          type: string
          description: RSA public exponent.
      required:
        - kty
        - kid

    LinkedInOAuthFactor:
      type: object
      properties:
        id:
          type: string
        provider_subject:
          type: string
        email_id:
          type: string
      required:
        - id
        - provider_subject

    Member:
      type: object
      properties:
        organization_id:
          type: string
          description: >-
            Globally unique UUID that identifies a specific Organization.
        member_id:
          type: string
          description: >-
            Globally unique UUID that identifies a specific Member.
        email_address:
          type: string
          description: The email address of the Member.
        status:
          type: string
          description: >-
            The status of the Member. The possible values are: `pending`, `invited`, `active`, or `deleted`.
        name:
          type: string
          description: The name of the Member.
        sso_registrations:
          type: array
          items:
            $ref: "#/components/schemas/SSORegistration"
        is_breakglass:
          type: boolean
          description: >-
            Identifies the Member as a break glass user for emergency access.
        member_password_id:
          type: string
          description: >-
            Globally unique UUID that identifies a Member's password.
        oauth_registrations:
          type: array
          items:
            $ref: "#/components/schemas/OAuthRegistration"
        email_address_verified:
          type: boolean
          description: >-
            Whether or not the Member's email address is verified.
        mfa_phone_number_verified:
          type: boolean
          description: >-
            Whether or not the Member's phone number is verified.
        is_admin:
          type: boolean
          description: >-
            Whether or not the Member has the `stytch_admin` Role.
        totp_registration_id:
          type: string
          description: >-
            Globally unique UUID that identifies a Member's TOTP registration.
        retired_email_addresses:
          type: array
          items:
            $ref: "#/components/schemas/RetiredEmail"
        mfa_enrolled:
          type: boolean
          description: >-
            Whether the Member is enrolled in MFA.
        mfa_phone_number:
          type: string
          description: >-
            The Member's phone number. A Member may only have one phone number.
        default_mfa_method:
          type: string
          description: >-
            The default MFA method for the Member.
        roles:
          type: array
          items:
            $ref: "#/components/schemas/MemberRole"
        trusted_metadata:
          type: object
          additionalProperties: true
          description: >-
            An arbitrary JSON object for storing application-specific data or identity-provider-specific data.
        untrusted_metadata:
          type: object
          additionalProperties: true
          description: >-
            An arbitrary JSON object of application-specific data.
        created_at:
          type: string
          format: date-time
          description: >-
            The timestamp of the Member's creation.
        updated_at:
          type: string
          format: date-time
          description: >-
            The timestamp of when the Member was last updated.
        scim_registration:
          $ref: "#/components/schemas/SCIMRegistration"
        external_id:
          type: string
          description: >-
            The ID of the member given by the identity provider.
      required:
        - organization_id
        - member_id
        - email_address
        - status
        - name
        - sso_registrations
        - is_breakglass
        - member_password_id
        - oauth_registrations
        - email_address_verified
        - mfa_phone_number_verified
        - is_admin
        - totp_registration_id
        - retired_email_addresses
        - mfa_enrolled
        - mfa_phone_number
        - default_mfa_method
        - roles

    Membership:
      type: object
      properties:
        type:
          type: string
          description: >
            Either `active_member`, `pending_member`, `invited_member`, `eligible_to_join_by_email_domain`, or
            `eligible_to_join_by_oauth_tenant`
        details:
          type: object
          additionalProperties: true
          description: An object containing additional metadata about the membership, if available.
        member:
          $ref: "#/components/schemas/Member"
          description: >
            The [Member object](https://stytch.com/docs/b2b/api/member-object) if one already exists, or null if one
            does not.
      required:
        - type

    MemberOptions:
      type: object
      properties:
        mfa_phone_number:
          type: string
          description: The Member's MFA phone number.
        totp_registration_id:
          type: string
          description: The Member's MFA TOTP registration ID.
      required:
        - mfa_phone_number
        - totp_registration_id

    MemberRole:
      type: object
      properties:
        role_id:
          type: string
          description: >-
            The unique identifier of the RBAC Role.
        sources:
          type: array
          items:
            $ref: "#/components/schemas/MemberRoleSource"
      required:
        - role_id
        - sources

    MemberRoleSource:
      type: object
      properties:
        type:
          type: string
          description: >-
            The type of role assignment.
        details:
          type: object
          additionalProperties: true
          description: >-
            Additional metadata about the source assignment.
      required:
        - type

    MemberSession:
      type: object
      properties:
        member_session_id:
          type: string
          description: Globally unique UUID that identifies a specific Session.
        member_id:
          type: string
          description: Globally unique UUID that identifies a specific Member.
        started_at:
          type: string
          format: date-time
          description: >
            The timestamp when the Session was created. Values conform to the RFC 3339 standard and are expressed in UTC.
        last_accessed_at:
          type: string
          format: date-time
          description: >
            The timestamp when the Session was last accessed. Values conform to the RFC 3339 standard and are expressed in UTC.
        expires_at:
          type: string
          format: date-time
          description: >
            The timestamp when the Session expires. Values conform to the RFC 3339 standard and are expressed in UTC.
        authentication_factors:
          type: array
          items:
            $ref: "#/components/schemas/AuthenticationFactor"
          description: An array of different authentication factors that comprise a Session.
        organization_id:
          type: string
          description: >
            Globally unique UUID that identifies a specific Organization. The `organization_id` is critical to perform operations on an Organization.
        roles:
          type: array
          items:
            type: string
          description: A list of roles assigned to the Member in the Session.
        custom_claims:
          type: object
          additionalProperties: true
          description: >
            The custom claims map for a Session. Claims can be added to a session during a Sessions authenticate call.
      required:
        - member_session_id
        - member_id
        - started_at
        - last_accessed_at
        - expires_at
        - authentication_factors
        - organization_id
        - roles

    MfaRequired:
      type: object
      properties:
        member_options:
          $ref: "#/components/schemas/MemberOptions"
          description: Information about the Member's options for completing MFA.
        secondary_auth_initiated:
          type: string
          description: >
            If null, indicates that no secondary authentication has been initiated. If equal to "sms_otp", indicates
            that the Member has a phone number, and a one time passcode has been sent to the Member's phone number.
            No secondary authentication will be initiated during calls to the discovery authenticate or list
            organizations endpoints, even if the Member has a phone number.

    MicrosoftOAuthFactor:
      type: object
      properties:
        id:
          type: string
          description: >
            The unique ID of an OAuth registration.
        provider_subject:
          type: string
          description: >
            The unique identifier for the User within a given OAuth provider.
        email_id:
          type: string
          description: >
            The globally unique UUID of the Member's email.
      required:
        - id
        - provider_subject

    OAuthAccessTokenExchangeFactor:
      type: object
      properties:
        client_id:
          type: string
      required:
        - client_id

    OAuthRegistration:
      type: object
      properties:
        provider_type:
          type: string
          description: >-
            Denotes the OAuth identity provider the user has authenticated with.
        provider_subject:
          type: string
          description: >-
            The unique identifier for the User within a given OAuth provider.
        member_oauth_registration_id:
          type: string
          description: >-
            The unique ID of an OAuth registration.
        profile_picture_url:
          type: string
          description: >-
            If available, the URL of the User's profile picture set in the OAuth provider.
        locale:
          type: string
          description: >-
            If available, the Member's locale set in the OAuth provider.
      required:
        - provider_type
        - provider_subject
        - member_oauth_registration_id

    OIDCConnection:
      type: object
      properties:
        organization_id:
          type: string
        connection_id:
          type: string
        status:
          type: string
        display_name:
          type: string
        redirect_url:
          type: string
        client_id:
          type: string
        client_secret:
          type: string
        issuer:
          type: string
        authorization_url:
          type: string
        token_url:
          type: string
        userinfo_url:
          type: string
        jwks_url:
          type: string
        identity_provider:
          type: string
        custom_scopes:
          type: string
        attribute_mapping:
          type: object
          additionalProperties: true
      required:
        - organization_id
        - connection_id
        - status
        - display_name
        - redirect_url
        - client_id
        - client_secret
        - issuer
        - authorization_url
        - token_url
        - userinfo_url
        - jwks_url
        - identity_provider
        - custom_scopes

    OIDCProviderInfo:
      type: object
      properties:
        provider_subject:
          type: string
        id_token:
          type: string
        access_token:
          type: string
        access_token_expires_at:
          type: string
          format: date-time
        scopes:
          type: array
          items:
            type: string
        connection_id:
          type: string
        refresh_token:
          type: string
      required:
        - provider_subject
        - id_token
        - access_token
        - access_token_expires_at
        - scopes
        - connection_id

    OIDCSSOFactor:
      type: object
      properties:
        id:
          type: string
        provider_id:
          type: string
        external_id:
          type: string
      required:
        - id
        - provider_id
        - external_id

    Organization:
      type: object
      properties:
        allowed_auth_methods:
          type: array
          items:
            type: string
            enum:
              - sso
              - magic_link
              - email_otp
              - password
              - google_oauth
              - microsoft_oauth
              - slack_oauth
              - github_oauth
              - hubspot_oauth
          description: >-
            An array of allowed authentication methods.
            This list is enforced when auth_methods is set to RESTRICTED.
            The list's accepted values are: sso, magic_link, email_otp, password, google_oauth, microsoft_oauth, slack_oauth, github_oauth, and hubspot_oauth.
        allowed_mfa_methods:
          type: array
          items:
            type: string
            enum:
              - sms_otp
              - totp
          description: >-
            An array of allowed MFA authentication methods.
            This list is enforced when mfa_methods is set to RESTRICTED.
            The list's accepted values are: sms_otp and totp.
        allowed_oauth_tenants:
          type: object
          additionalProperties: true
          description: >-
            A map of allowed OAuth tenants.
            If this field is not passed in, the Organization will not allow JIT provisioning by OAuth Tenant.
            Allowed keys are "slack", "hubspot", and "github".
        auth_methods:
          type: string
          enum:
            - ALL_ALLOWED
            - RESTRICTED
          description: >-
            The setting that controls which authentication methods can be used by Members of an Organization.
            The accepted values are:

            ALL_ALLOWED – the default setting which allows all authentication methods to be used.

            RESTRICTED – only methods that comply with allowed_auth_methods can be used for authentication.
            This setting does not apply to Members with is_breakglass set to true.
        claimed_email_domains:
          type: array
          items:
            type: string
          description: A list of email domains that are claimed by the Organization.
        created_at:
          type: string
          format: date-time
          description: >-
            The timestamp of the Organization's creation.
            Values conform to the RFC 3339 standard and are expressed in UTC, e.g. 2021-12-29T12:33:09Z.
        email_allowed_domains:
          type: array
          items:
            type: string
          description: >-
            An array of email domains that allow invites or JIT provisioning for new Members.
            This list is enforced when either email_invites or email_jit_provisioning is set to RESTRICTED.

            Common domains such as gmail.com are not allowed. See the common email domains resource for the full list.
        email_invites:
          type: string
          enum:
            - ALL_ALLOWED
            - RESTRICTED
            - NOT_ALLOWED
          description: >-
            The authentication setting that controls how a new Member can be invited to an organization by email.
            The accepted values are: 

            ALL_ALLOWED – any new Member can be invited to join via email.

            RESTRICTED – only new Members with verified emails that comply with email_allowed_domains can be invited via email.

            NOT_ALLOWED – disable email invites.
        email_jit_provisioning:
          type: string
          enum:
            - RESTRICTED
            - NOT_ALLOWED
          description: >-
            The authentication setting that controls how a new Member can be provisioned by authenticating via Email Magic Link or OAuth.
            The accepted values are:

            RESTRICTED – only new Members with verified emails that comply with email_allowed_domains can be provisioned upon authentication via Email Magic Link or OAuth.

            NOT_ALLOWED – disable JIT provisioning via Email Magic Link and OAuth.
        mfa_methods:
          type: string
          enum:
            - ALL_ALLOWED
            - RESTRICTED
          description: >-
            The setting that controls which MFA methods can be used by Members of an Organization.
            The accepted values are:

            ALL_ALLOWED – the default setting which allows all authentication methods to be used.

            RESTRICTED – only methods that comply with allowed_mfa_methods can be used for authentication.
            This setting does not apply to Members with is_breakglass set to true.
        mfa_policy:
          type: string
          enum:
            - REQUIRED_FOR_ALL
            - OPTIONAL
          description: >-
            The setting that controls the MFA policy for all Members in the Organization.
            The accepted values are:

            REQUIRED_FOR_ALL – All Members within the Organization will be required to complete MFA every time they wish to log in.
            However, any active Session that existed prior to this setting change will remain valid.

            OPTIONAL – The default value.
            The Organization does not require MFA by default for all Members.
            Members will be required to complete MFA only if their mfa_enrolled status is set to true.
        oauth_tenant_jit_provisioning:
          type: string
          enum:
            - RESTRICTED
            - NOT_ALLOWED
          description: >-
            The authentication setting that controls how a new Member can JIT provision into an organization by tenant.
            The accepted values are:

            RESTRICTED – only new Members with tenants in allowed_oauth_tenants can JIT provision via tenant.

            NOT_ALLOWED – disable JIT provisioning by OAuth Tenant.
        organization_id:
          type: string
          description: >-
            Globally unique UUID that identifies a specific Organization.
            The organization_id is critical to perform operations on an Organization, so be sure to preserve this value.
            You may also use the organization_slug here as a convenience.
        organization_logo_url:
          type: string
          description: >-
            The image URL of the Organization logo.
        organization_name:
          type: string
          description: >-
            The name of the Organization. Must be between 1 and 128 characters in length.
        organization_slug:
          type: string
          description: >-
            The unique URL slug of the Organization.
            The slug only accepts alphanumeric characters and the following reserved characters: - . _ ~.
            Must be between 2 and 128 characters in length.
            Wherever an organization_id is expected in a path or request parameter, you may also use the organization_slug as a convenience.
        rbac_email_implicit_role_assignments:
          type: array
          items:
            $ref: "#/components/schemas/EmailImplicitRoleAssignment"
          description: >-
            Implicit role assignments based off of email domains.
            For each domain-Role pair, all Members whose email addresses have the specified email domain will be granted the associated Role, regardless of their login method.
            See the RBAC guide for more information about role assignment.
        scim_active_connection:
          $ref: "#/components/schemas/ActiveSCIMConnection"
        sso_active_connections:
          type: array
          items:
            $ref: "#/components/schemas/ActiveSSOConnection"
          description: An array of active SAML Connection references or OIDC Connection references.
        sso_default_connection_id:
          type: string
          description: The default connection used for SSO when there are multiple active connections.
        sso_jit_provisioning:
          type: string
          enum:
            - ALL_ALLOWED
            - RESTRICTED
            - NOT_ALLOWED
          description: >-
            The authentication setting that controls the JIT provisioning of Members when authenticating via SSO.
            The accepted values are:

            ALL_ALLOWED – new Members will be automatically provisioned upon successful authentication via any of the Organization's sso_active_connections.

            RESTRICTED – only new Members with SSO logins that comply with sso_jit_provisioning_allowed_connections can be provisioned upon authentication.

            NOT_ALLOWED – disable JIT provisioning via SSO.
        sso_jit_provisioning_allowed_connections:
          type: array
          items:
            type: string
          description: >-
            An array of connection_ids that reference SAML Connection objects.
            Only these connections will be allowed to JIT provision Members via SSO when sso_jit_provisioning is set to RESTRICTED.
        trusted_metadata:
          type: object
          additionalProperties: true
          description: >-
            An arbitrary JSON object for storing application-specific data or identity-provider-specific data.
        updated_at:
          type: string
          format: date-time
          description: >-
            The timestamp of when the Organization was last updated.
            Values conform to the RFC 3339 standard and are expressed in UTC, e.g. 2021-12-29T12:33:09Z.
      required:
        - allowed_auth_methods
        - allowed_mfa_methods
        - auth_methods
        - claimed_email_domains
        - email_allowed_domains
        - email_invites
        - email_jit_provisioning
        - mfa_methods
        - mfa_policy
        - oauth_tenant_jit_provisioning
        - organization_id
        - organization_logo_url
        - organization_name
        - organization_slug
        - rbac_email_implicit_role_assignments
        - sso_active_connections
        - sso_jit_provisioning
        - sso_jit_provisioning_allowed_connections

    PhoneNumberFactor:
      type: object
      properties:
        phone_id:
          type: string
          description: >
            The globally unique UUID of the Member's phone number.
        phone_number:
          type: string
          description: >
            The phone number of the Member.
      required:
        - phone_id
        - phone_number

    PrimaryRequired:
      type: object
      properties:
        allowed_auth_methods:
          type: array
          items:
            type: string
          description: >
            Details the auth method that the member must also complete to fulfill the primary authentication
            requirements of the Organization. For example, a value of `[magic_link]` indicates that the Member must
            also complete a magic link authentication step. If you have an intermediate session token, you must pass
            it into that primary authentication step.
      required:
        - allowed_auth_methods

    RBACPolicy:
      type: object
      properties:
        roles:
          type: array
          items:
            $ref: "#/components/schemas/RBACPolicyRole"
          description: An array of [Role objects](https://stytch.com/docs/b2b/api/rbac-role-object).
        resources:
          type: array
          items:
            $ref: "#/components/schemas/RBACPolicyResource"
          description: An array of [Resource objects](https://stytch.com/docs/b2b/api/rbac-resource-object).
        scopes:
          type: array
          items:
            $ref: "#/components/schemas/RBACPolicyScope"
      required:
        - roles
        - resources
        - scopes

    RBACPolicyResource:
      type: object
      properties:
        resource_id:
          type: string
          description: >
            A unique identifier of the RBAC Resource, provided by the developer and intended to be human-readable.

            A `resource_id` is not allowed to start with `stytch`, which is a special prefix used for Stytch
            default Resources with reserved  `resource_id`s. These include:

            * `stytch.organization`
            * `stytch.member`
            * `stytch.sso`
            * `stytch.self`

            Check out the
            [guide on Stytch default Resources](https://stytch.com/docs/b2b/guides/rbac/stytch-default) for a more
            detailed explanation.
        description:
          type: string
          description: The description of the RBAC Resource.
        actions:
          type: array
          items:
            type: string
          description: >
            A list of all possible actions for a provided Resource.

            Reserved `actions` that are predefined by Stytch include:

            * `*`
            * For the `stytch.organization` Resource:
              * `update.info.name`
              * `update.info.slug`
              * `update.info.untrusted_metadata`
              * `update.info.email_jit_provisioning`
              * `update.info.logo_url`
              * `update.info.email_invites`
              * `update.info.allowed_domains`
              * `update.info.default_sso_connection`
              * `update.info.sso_jit_provisioning`
              * `update.info.mfa_policy`
              * `update.info.implicit_roles`
              * `delete`
            * For the `stytch.member` Resource:
              * `create`
              * `update.info.name`
              * `update.info.untrusted_metadata`
              * `update.info.mfa-phone`
              * `update.info.delete.mfa-phone`
              * `update.settings.is-breakglass`
              * `update.settings.mfa_enrolled`
              * `update.settings.roles`
              * `search`
              * `delete`
            * For the `stytch.sso` Resource:
              * `create`
              * `update`
              * `delete`
            * For the `stytch.self` Resource:
              * `update.info.name`
              * `update.info.untrusted_metadata`
              * `update.info.mfa-phone`
              * `update.info.delete.mfa-phone`
              * `update.info.delete.password`
              * `update.settings.mfa_enrolled`
              * `delete`
      required:
        - resource_id
        - description
        - actions

    RBACPolicyRole:
      type: object
      properties:
        role_id:
          type: string
          description: >
            The unique identifier of the RBAC Role, provided by the developer and intended to be human-readable.

            Reserved `role_id`s that are predefined by Stytch include:

            * `stytch_member`
            * `stytch_admin`

            Check out the [guide on Stytch default Roles](https://stytch.com/docs/b2b/guides/rbac/stytch-default)
            for a more detailed explanation.
        description:
          type: string
          description: The description of the RBAC Role.
        permissions:
          type: array
          items:
            $ref: "#/components/schemas/RBACPolicyRolePermission"
          description: >
            A list of permissions that link a [Resource](https://stytch.com/docs/b2b/api/rbac-resource-object) to a
            list of actions.
      required:
        - role_id
        - description
        - permissions

    RBACPolicyRolePermission:
      type: object
      properties:
        resource_id:
          type: string
          description: >
            A unique identifier of the RBAC Resource, provided by the developer and intended to be human-readable.

            A `resource_id` is not allowed to start with `stytch`, which is a special prefix used for Stytch
            default Resources with reserved  `resource_id`s. These include:

            * `stytch.organization`
            * `stytch.member`
            * `stytch.sso`
            * `stytch.self`

            Check out the
            [guide on Stytch default Resources](https://stytch.com/docs/docs/b2b/guides/rbac/stytch-default) for a
            more detailed explanation.
        actions:
          type: array
          items:
            type: string
          description: >
            A list of permitted actions the Scope is required to take with the provided Resource. You can use `*` as
            a wildcard to require a Scope permission to use all possible actions related to the Resource.
      required:
        - resource_id
        - actions

    RBACPolicyScope:
      type: object
      properties:
        scope:
          type: string
          description: The scope identifier.
        description:
          type: string
          description: The description of the scope.
        permissions:
          type: array
          items:
            $ref: "#/components/schemas/RBACPolicyScopePermission"
          description: The permissions associated with this scope.
      required:
        - scope
        - description
        - permissions

    RBACPolicyScopePermission:
      type: object
      properties:
        resource_id:
          type: string
          description: The ID of the resource this permission applies to.
        actions:
          type: array
          items:
            type: string
          description: The actions allowed for this resource.
      required:
        - resource_id
        - actions

    RecoveryCodeFactor:
      type: object
      properties:
        totp_recovery_code_id:
          type: string
      required:
        - totp_recovery_code_id

    RetiredEmail:
      type: object
      properties:
        email_id:
          type: string
          description: >-
            The globally unique UUID of a Member's email.
        email_address:
          type: string
          description: >-
            The email address of the Member.
      required:
        - email_id
        - email_address

    SAMLConnection:
      type: object
      properties:
        organization_id:
          type: string
        connection_id:
          type: string
        status:
          type: string
        idp_entity_id:
          type: string
        display_name:
          type: string
        idp_sso_url:
          type: string
        acs_url:
          type: string
        audience_uri:
          type: string
        signing_certificates:
          type: array
          items:
            $ref: "#/components/schemas/X509Certificate"
        verification_certificates:
          type: array
          items:
            $ref: "#/components/schemas/X509Certificate"
        saml_connection_implicit_role_assignments:
          type: array
          items:
            $ref: "#/components/schemas/SAMLConnectionImplicitRoleAssignment"
        saml_group_implicit_role_assignments:
          type: array
          items:
            $ref: "#/components/schemas/SAMLGroupImplicitRoleAssignment"
        alternative_audience_uri:
          type: string
        identity_provider:
          type: string
        nameid_format:
          type: string
        alternative_acs_url:
          type: string
        idp_initiated_auth_disabled:
          type: boolean
        attribute_mapping:
          type: object
          additionalProperties: true
      required:
        - organization_id
        - connection_id
        - status
        - idp_entity_id
        - display_name
        - idp_sso_url
        - acs_url
        - audience_uri
        - signing_certificates
        - verification_certificates
        - saml_connection_implicit_role_assignments
        - saml_group_implicit_role_assignments
        - alternative_audience_uri
        - identity_provider
        - nameid_format
        - alternative_acs_url
        - idp_initiated_auth_disabled

    SAMLConnectionImplicitRoleAssignment:
      type: object
      properties:
        role_id:
          type: string
          description: >
            The unique identifier of the RBAC Role, provided by the developer and intended to be human-readable.
      required:
        - role_id

    SAMLGroupImplicitRoleAssignment:
      type: object
      properties:
        role_id:
          type: string
          description: >
            The unique identifier of the RBAC Role, provided by the developer and intended to be human-readable.
        group:
          type: string
          description: >
            The name of the group that grants the specified role assignment.
      required:
        - role_id
        - group

    SAMLSSOFactor:
      type: object
      properties:
        id:
          type: string
        provider_id:
          type: string
        external_id:
          type: string
      required:
        - id
        - provider_id
        - external_id

    SalesforceOAuthFactor:
      type: object
      properties:
        id:
          type: string
        provider_subject:
          type: string
        email_id:
          type: string
      required:
        - id
        - provider_subject

    SCIMRegistration:
      type: object
      properties:
        connection_id:
          type: string
          description: >-
            The ID of the SCIM connection.
        registration_id:
          type: string
          description: >-
            The unique ID of a SCIM Registration.
        external_id:
          type: string
          description: >-
            The ID of the member given by the identity provider.
        scim_attributes:
          type: object
          additionalProperties: true
          description: >-
            An object for storing SCIM attributes brought over from the identity provider.
      required:
        - connection_id
        - registration_id

    ShopifyOAuthFactor:
      type: object
      properties:
        id:
          type: string
        provider_subject:
          type: string
        email_id:
          type: string
      required:
        - id
        - provider_subject

    SlackOAuthExchangeFactor:
      type: object
      properties:
        email_id:
          type: string
      required:
        - email_id

    SlackOAuthFactor:
      type: object
      properties:
        id:
          type: string
        provider_subject:
          type: string
        email_id:
          type: string
      required:
        - id
        - provider_subject

    SnapchatOAuthFactor:
      type: object
      properties:
        id:
          type: string
        provider_subject:
          type: string
        email_id:
          type: string
      required:
        - id
        - provider_subject

    SpotifyOAuthFactor:
      type: object
      properties:
        id:
          type: string
        provider_subject:
          type: string
        email_id:
          type: string
      required:
        - id
        - provider_subject

    SSORegistration:
      type: object
      properties:
        connection_id:
          type: string
          description: >
            Globally unique UUID that identifies a specific SSO `connection_id` for a Member.
        external_id:
          type: string
          description: >
            The ID of the member given by the identity provider.
        registration_id:
          type: string
          description: >
            The unique ID of an SSO Registration.
        sso_attributes:
          type: object
          additionalProperties: true
          description: >
            An object for storing SSO attributes brought over from the identity provider.
      required:
        - connection_id
        - external_id
        - registration_id

    SteamOAuthFactor:
      type: object
      properties:
        id:
          type: string
        provider_subject:
          type: string
        email_id:
          type: string
      required:
        - id
        - provider_subject

    TikTokOAuthFactor:
      type: object
      properties:
        id:
          type: string
        provider_subject:
          type: string
        email_id:
          type: string
      required:
        - id
        - provider_subject

    TwitchOAuthFactor:
      type: object
      properties:
        id:
          type: string
        provider_subject:
          type: string
        email_id:
          type: string
      required:
        - id
        - provider_subject

    TwitterOAuthFactor:
      type: object
      properties:
        id:
          type: string
        provider_subject:
          type: string
        email_id:
          type: string
      required:
        - id
        - provider_subject

    WebAuthnFactor:
      type: object
      properties:
        webauthn_registration_id:
          type: string
        domain:
          type: string
        user_agent:
          type: string
      required:
        - webauthn_registration_id
        - domain

    WebhookPayload:
      type: object
      properties:
        action:
          type: string
          enum:
            - CREATE
            - UPDATE
            - DELETE
        event_id:
          type: string
        id:
          type: string
        object_type:
          type: string
        project_id:
          type: string
        source:
          type: string
          enum:
            - DASHBOARD
            - DIRECT
            - SCIM
        timestamp:
          type: string
          format: date-time
        # Optional fields that may be included depending on the event
        member:
          $ref: "#/components/schemas/Member"
        oidc_connection:
          $ref: "#/components/schemas/OIDCConnection"
        organization:
          $ref: "#/components/schemas/Organization"
        saml_connection:
          $ref: "#/components/schemas/SAMLConnection"
        scim_group:
          type: object
          properties:
            connection_id:
              type: string
            group_id:
              type: string
            group_name:
              type: string
            organization_id:
              type: string
      required:
        - action
        - event_id
        - id
        - object_type
        - project_id
        - source
        - timestamp

    X509Certificate:
      type: object
      properties:
        certificate_id:
          type: string
        certificate:
          type: string
        issuer:
          type: string
        created_at:
          type: string
          format: date-time
        expires_at:
          type: string
          format: date-time
        updated_at:
          type: string
          format: date-time
      required:
        - certificate_id
        - certificate
        - issuer

    YahooOAuthFactor:
      type: object
      properties:
        id:
          type: string
        provider_subject:
          type: string
        email_id:
          type: string
      required:
        - id
        - provider_subject

securitySchemes:
  noauthAuth:
    type: http
    scheme: noauth
  basicAuth:
    type: http
    scheme: basic
security:
  - basicAuth: []
paths:
  /v1/b2b/organizations:
    post:
      operationId: organizations/create
      tags:
        - organizations
      summary: Create an Organization
      requestBody:
        content:
          application/json:
            schema:
              type: object
              example: >-
                {
                    "organization_name": "Your Org Name",
                    "organization_slug": "your-org-slug"
                }

                // For all available parameters see
                https://stytch.com/docs/b2b/api/create-organization
      responses:
        "200":
          description: Successful response
          content:
            application/json:
              schema:
                type: object
                properties:
                  request_id:
                    type: string
                  status_code:
                    type: integer
                  organization:
                    $ref: "#/components/schemas/Organization"
                required:
                  - request_id
                  - status_code
                  - organization
        default:
          description: Error response
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v1/b2b/organizations/{organization_id}:
    get:
      operationId: organizations/get
      tags:
        - organizations
      summary: Get an Organization
      parameters:
        - name: organization_id
          in: path
          schema:
            type: string
          required: true
          example: organization-test-309192b4-b07d-454d-ac2c-690125f6ea96
      responses:
        "200":
          description: Successful response
          content:
            application/json:
              schema:
                type: object
                properties:
                  request_id:
                    type: string
                  status_code:
                    type: integer
                  organization:
                    $ref: "#/components/schemas/Organization"
                required:
                  - request_id
                  - status_code
                  - organization
        default:
          description: Error response
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
    put:
      operationId: organizations/update
      tags:
        - organizations
      summary: Update an Organization
      requestBody:
        content:
          application/json:
            schema:
              type: object
              example: >-
                {
                    "organization_name": "New updated name",
                    "email_jit_provisioning": "RESTRICTED",
                    "email_allowed_domains": ["stytch.com"]
                }

                // For all available parameters see
                https://stytch.com/docs/b2b/api/update-organization
      parameters:
        - name: organization_id
          in: path
          schema:
            type: string
          required: true
          example: organization-test-05e98d25-f22f-41bd-a511-a6c270364a88
      responses:
        "200":
          description: Successful response
          content:
            application/json:
              schema:
                type: object
                properties:
                  request_id:
                    type: string
                  status_code:
                    type: integer
                  organization:
                    $ref: "#/components/schemas/Organization"
                required:
                  - request_id
                  - status_code
                  - organization
        default:
          description: Error response
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
    delete:
      operationId: organizations/delete
      tags:
        - organizations
      summary: Delete an Organization
      parameters:
        - name: organization_id
          in: path
          schema:
            type: string
          required: true
          example: organization-test-309192b4-b07d-454d-ac2c-690125f6ea96
      responses:
        "200":
          description: Successful response
          content:
            application/json:
              schema:
                type: object
                properties:
                  request_id:
                    type: string
                  status_code:
                    type: integer
                  organization_id:
                    type: string
                required:
                  - request_id
                  - status_code
                  - organization_id
        default:
          description: Error response
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v1/b2b/organizations/search:
    post:
      operationId: organizations/search
      tags:
        - organizations
      summary: Search for Organizations
      requestBody:
        content:
          application/json:
            schema:
              type: object
              example: >-
                {
                    "limit": 100,
                    "cursor": ""
                }

                // For all available parameters see
                https://stytch.com/docs/b2b/api/search-organizations
      responses:
        "200":
          description: Successful response
          content:
            application/json:
              schema:
                type: object
                properties:
                  request_id:
                    type: string
                  status_code:
                    type: integer
                  results_metadata:
                    type: object
                    properties:
                      next_cursor:
                        type: string
                      total:
                        type: integer
                  organizations:
                    type: array
                    items:
                      $ref: "#/components/schemas/Organization"
                required:
                  - request_id
                  - status_code
                  - results_metadata
                  - organizations
        default:
          description: Error response
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v1/b2b/organizations/{organization_id}/members:
    post:
      operationId: members/create
      tags:
        - members
      summary: Create a Member
      requestBody:
        content:
          application/json:
            schema:
              type: object
              example: >-
                {
                    "email_address": "test@stytch.com"
                }

                // For all available parameters see
                https://stytch.com/docs/b2b/api/create-member
      parameters:
        - name: organization_id
          in: path
          schema:
            type: string
          required: true
          example: organization-test-309192b4-b07d-454d-ac2c-690125f6ea96
      responses:
        "200":
          description: Successful response
          content:
            application/json:
              schema:
                type: object
                properties:
                  request_id:
                    type: string
                  status_code:
                    type: integer
                  member_id:
                    type: string
                  member:
                    $ref: "#/components/schemas/Member"
                  organization:
                    $ref: "#/components/schemas/Organization"
                required:
                  - request_id
                  - status_code
                  - member_id
                  - member
                  - organization
        default:
          description: Error response
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v1/b2b/organizations/{organization_id}/member:
    get:
      operationId: members/get
      tags:
        - members
      summary: Get a Member
      parameters:
        - name: member_id
          in: query
          schema:
            type: string
          description: Get member by ID
          example: member-test-306a1f1d-6869-45ac-9ef5-1d70e68ce49b
        - name: organization_id
          in: path
          schema:
            type: string
          required: true
          example: organization-test-05e98d25-f22f-41bd-a511-a6c270364a88
      responses:
        "200":
          description: Successful response
          content:
            application/json:
              schema:
                type: object
                properties:
                  request_id:
                    type: string
                  status_code:
                    type: integer
                  member_id:
                    type: string
                  member:
                    $ref: "#/components/schemas/Member"
                  organization:
                    $ref: "#/components/schemas/Organization"
                required:
                  - request_id
                  - status_code
                  - member_id
                  - member
                  - organization
        default:
          description: Error response
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v1/b2b/organizations/members/dangerously_get/{member_id}:
    get:
      operationId: members/dangerously_get
      tags:
        - members
      summary: Get a Member (Dangerous)
      parameters:
        - name: member_id
          in: path
          schema:
            type: string
          required: true
          example: member-test-2a475638-7381-48f1-b03e-efcf80cf4544
      responses:
        "200":
          description: Successful response
          content:
            application/json:
              schema:
                type: object
                properties:
                  request_id:
                    type: string
                  status_code:
                    type: integer
                  member_id:
                    type: string
                  member:
                    $ref: "#/components/schemas/Member"
                  organization:
                    $ref: "#/components/schemas/Organization"
                required:
                  - request_id
                  - status_code
                  - member_id
                  - member
                  - organization
        default:
          description: Error response
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v1/b2b/organizations/{organization_id}/members/{member_id}:
    put:
      operationId: members/update
      tags:
        - members
      summary: Update a Member
      requestBody:
        content:
          application/json:
            schema:
              type: object
              example: >-
                {
                    "name": "Test user"
                }

                // For all available parameters see
                https://stytch.com/docs/b2b/api/update-member
      parameters:
        - name: organization_id
          in: path
          schema:
            type: string
          required: true
          example: organization-test-309192b4-b07d-454d-ac2c-690125f6ea96
        - name: member_id
          in: path
          schema:
            type: string
          required: true
          example: member-test-a5a2f9f7-d150-49fb-94b0-adacbae82a70
      responses:
        "200":
          description: Successful response
          content:
            application/json:
              schema:
                type: object
                properties:
                  request_id:
                    type: string
                  status_code:
                    type: integer
                  member_id:
                    type: string
                  member:
                    $ref: "#/components/schemas/Member"
                  organization:
                    $ref: "#/components/schemas/Organization"
                required:
                  - request_id
                  - status_code
                  - member_id
                  - member
                  - organization
        default:
          description: Error response
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
    delete:
      operationId: members/delete
      tags:
        - members
      summary: Delete a Member
      parameters:
        - name: organization_id
          in: path
          schema:
            type: string
          required: true
          example: organization-test-309192b4-b07d-454d-ac2c-690125f6ea96
        - name: member_id
          in: path
          schema:
            type: string
          required: true
          example: member-test-a5a2f9f7-d150-49fb-94b0-adacbae82a70
      responses:
        "200":
          description: Successful response
          content:
            application/json:
              schema:
                type: object
                properties:
                  request_id:
                    type: string
                  status_code:
                    type: integer
                  member_id:
                    type: string
                required:
                  - request_id
                  - status_code
                  - member_id
        default:
          description: Error response
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v1/b2b/organizations/{organization_id}/members/{member_id}/unlink_retired_email:
    post:
      operationId: members/unlink_retired_email
      tags:
        - members
      summary: Unlink Retired Email
      requestBody:
        content:
          application/json:
            schema:
              type: object
      parameters:
        - name: organization_id
          in: path
          schema:
            type: string
          required: true
          example: organization-test-309192b4-b07d-454d-ac2c-690125f6ea96
        - name: member_id
          in: path
          schema:
            type: string
          required: true
          example: member-test-a5a2f9f7-d150-49fb-94b0-adacbae82a70
      responses:
        "200":
          description: Successful response
          content:
            application/json:
              schema:
                type: object
                properties:
                  request_id:
                    type: string
                  status_code:
                    type: integer
                  member_id:
                    type: string
                  organization_id:
                    type: string
                  member:
                    $ref: "#/components/schemas/Member"
                  organization:
                    $ref: "#/components/schemas/Organization"
                required:
                  - request_id
                  - status_code
                  - member_id
                  - organization_id
                  - member
                  - organization
        default:
          description: Error response
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v1/b2b/organizations/{organization_id}/members/{member_id}/reactivate:
    put:
      operationId: members/reactivate
      tags:
        - members
      summary: Reactivate a Member
      requestBody:
        content: {}
      parameters:
        - name: organization_id
          in: path
          schema:
            type: string
          required: true
          example: organization-test-309192b4-b07d-454d-ac2c-690125f6ea96
        - name: member_id
          in: path
          schema:
            type: string
          required: true
          example: member-test-a5a2f9f7-d150-49fb-94b0-adacbae82a70
      responses:
        "200":
          description: Successful response
          content:
            application/json:
              schema:
                type: object
                properties:
                  request_id:
                    type: string
                  status_code:
                    type: integer
                  member_id:
                    type: string
                  member:
                    $ref: "#/components/schemas/Member"
                  organization:
                    $ref: "#/components/schemas/Organization"
                required:
                  - request_id
                  - status_code
                  - member_id
                  - member
                  - organization
        default:
          description: Error response
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v1/b2b/organizations/members/search:
    post:
      operationId: members/search
      tags:
        - members
      summary: Search for Members
      requestBody:
        content:
          application/json:
            schema:
              type: object
              example: >-
                {
                    "organization_ids": ["organization-test-b081f00b-c290-4e6f-8219-2f79942ccc6b"],
                    "limit": 100,
                    "cursor": ""
                }

                // For all available parameters see
                https://stytch.com/docs/b2b/api/search-organizations
      responses:
        "200":
          description: Successful response
          content:
            application/json:
              schema:
                type: object
                properties:
                  request_id:
                    type: string
                  status_code:
                    type: integer
                  results_metadata:
                    type: object
                    properties:
                      next_cursor:
                        type: string
                      total:
                        type: integer
                  members:
                    type: array
                    items:
                      $ref: "#/components/schemas/Member"
                  organizations:
                    type: array
                    items:
                      $ref: "#/components/schemas/Organization"
                required:
                  - request_id
                  - status_code
                  - results_metadata
                  - members
                  - organizations
        default:
          description: Error response
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v1/b2b/organizations/{organization_id}/members/passwords/{member_password_id}:
    delete:
      operationId: members/delete_password
      tags:
        - members
      summary: Delete Member password
      parameters:
        - name: organization_id
          in: path
          schema:
            type: string
          required: true
          example: organization-test-309192b4-b07d-454d-ac2c-690125f6ea96
        - name: member_password_id
          in: path
          schema:
            type: string
          required: true
          example: member-password-test-51861cbc-d3b9-428b-9761-227f5fb12be9
      responses:
        "200":
          description: Successful response
          content:
            application/json:
              schema:
                type: object
                properties:
                  request_id:
                    type: string
                  status_code:
                    type: integer
                  member_id:
                    type: string
                  member:
                    $ref: "#/components/schemas/Member"
                  organization:
                    $ref: "#/components/schemas/Organization"
                required:
                  - request_id
                  - status_code
                  - member_id
                  - member
                  - organization
        default:
          description: Error response
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v1/b2b/organizations/{organization_id}/members/mfa_phone_numbers/{member_id}:
    delete:
      operationId: members/delete_mfa_phone_number
      tags:
        - members
      summary: Delete Member MFA phone number
      parameters:
        - name: organization_id
          in: path
          schema:
            type: string
          required: true
          example: organization-test-309192b4-b07d-454d-ac2c-690125f6ea96
        - name: member_id
          in: path
          schema:
            type: string
          required: true
          example: member-test-a5a2f9f7-d150-49fb-94b0-adacbae82a70
      responses:
        "200":
          description: Successful response
          content:
            application/json:
              schema:
                type: object
                properties:
                  request_id:
                    type: string
                  status_code:
                    type: integer
                  member_id:
                    type: string
                  member:
                    $ref: "#/components/schemas/Member"
                  organization:
                    $ref: "#/components/schemas/Organization"
                required:
                  - request_id
                  - status_code
                  - member_id
                  - member
                  - organization
        default:
          description: Error response
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v1/b2b/organizations/{organization_id}/members/{member_id}/totp:
    delete:
      operationId: members/delete_mfa_totp
      tags:
        - members
      summary: Delete Member MFA TOTP
      parameters:
        - name: organization_id
          in: path
          schema:
            type: string
          required: true
          example: organization-test-309192b4-b07d-454d-ac2c-690125f6ea96
        - name: member_id
          in: path
          schema:
            type: string
          required: true
          example: member-test-a5a2f9f7-d150-49fb-94b0-adacbae82a70
      responses:
        "200":
          description: Successful response
          content:
            application/json:
              schema:
                type: object
                properties:
                  request_id:
                    type: string
                  status_code:
                    type: integer
                  member_id:
                    type: string
                  member:
                    $ref: "#/components/schemas/Member"
                  organization:
                    $ref: "#/components/schemas/Organization"
                required:
                  - request_id
                  - status_code
                  - member_id
                  - member
                  - organization
        default:
          description: Error response
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v1/b2b/rbac/policy:
    get:
      operationId: rbac/get_policy
      tags:
        - rbac
      summary: Get RBAC Policy
      responses:
        "200":
          description: Successful response
          content:
            application/json:
              schema:
                type: object
                properties:
                  request_id:
                    type: string
                    description: >
                      Globally unique UUID that is returned with every API call. This value is important to log for debugging
                      purposes; we may ask for this value to help identify a specific API call when helping you debug an issue.
                  status_code:
                    type: integer
                    description: >
                      The HTTP status code of the response. Stytch follows standard HTTP response status code patterns, e.g.
                      2XX values equate to success, 3XX values are redirects, 4XX are client errors, and 5XX are server errors.
                  policy:
                    $ref: "#/components/schemas/RBACPolicy"
                    description: >
                      The RBAC Policy document that contains all defined Roles and Resources – which are managed in the
                      [Dashboard](https://stytch.com/docs/dashboard/rbac). Read more about these entities and how they work in
                      our [RBAC overview](https://stytch.com/docs/b2b/guides/rbac/overview).
                required:
                  - request_id
                  - status_code
        default:
          description: Error response
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v1/b2b/magic_links/email/login_or_signup:
    post:
      operationId: magic_links/login_or_signup
      tags:
        - magic_links
      summary: Send login or signup email
      requestBody:
        content:
          application/json:
            schema:
              type: object
              example: >-
                {
                    "organization_id": "organization-test-51096cce-277f-4645-b7fd-b7432fc038a9",
                    "email_address": "test@stytch.com"
                }

                // For all available parameters see
                https://stytch.com/docs/b2b/api/send-login-signup-email
      responses:
        "200":
          description: Successful response
          content:
            application/json:
              schema:
                type: object
                properties:
                  request_id:
                    type: string
                    description: >
                      Globally unique UUID that is returned with every API call. This value is important to log for debugging
                      purposes; we may ask for this value to help identify a specific API call when helping you debug an issue.
                  member_id:
                    type: string
                    description: Globally unique UUID that identifies a specific Member.
                  member_created:
                    type: boolean
                    description: >
                      A flag indicating true if a new Member object was created and false if the Member object already
                      existed.
                  member:
                    $ref: "#/components/schemas/Member"
                    description: The Member object
                  organization:
                    $ref: "#/components/schemas/Organization"
                    description: The Organization object
                  status_code:
                    type: integer
                    description: >
                      The HTTP status code of the response. Stytch follows standard HTTP response status code patterns, e.g.
                      2XX values equate to success, 3XX values are redirects, 4XX are client errors, and 5XX are server errors.
                required:
                  - request_id
                  - member_id
                  - member_created
                  - member
                  - organization
                  - status_code
        default:
          description: Error response
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v1/b2b/magic_links/email/invite:
    post:
      operationId: magic_links/invite
      tags:
        - magic_links
      summary: Send invite email
      requestBody:
        content:
          application/json:
            schema:
              type: object
              example: >-
                {
                    "organization_id": "organization-test-51096cce-277f-4645-b7fd-b7432fc038a9",
                    "email_address": "test@stytch.com"
                }

                // For all available parameters see
                https://stytch.com/docs/b2b/api/send-invite-email
      responses:
        "200":
          description: Successful response
          content:
            application/json:
              schema:
                type: object
                properties:
                  request_id:
                    type: string
                    description: >
                      Globally unique UUID that is returned with every API call. This value is important to log for debugging
                      purposes; we may ask for this value to help identify a specific API call when helping you debug an issue.
                  member_id:
                    type: string
                    description: Globally unique UUID that identifies a specific Member.
                  member:
                    $ref: "#/components/schemas/Member"
                    description: The Member object
                  organization:
                    $ref: "#/components/schemas/Organization"
                    description: The Organization object
                  status_code:
                    type: integer
                    description: >
                      The HTTP status code of the response. Stytch follows standard HTTP response status code patterns, e.g.
                      2XX values equate to success, 3XX values are redirects, 4XX are client errors, and 5XX are server errors.
                required:
                  - request_id
                  - member_id
                  - member
                  - organization
                  - status_code
        default:
          description: Error response
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v1/b2b/magic_links/authenticate:
    post:
      operationId: magic_links/authenticate
      tags:
        - magic_links
      summary: Authenticate Magic Link
      requestBody:
        content:
          application/json:
            schema:
              type: object
              example: >-
                {
                    "magic_links_token": "vufHxvOdF7DcKeyZbgmxqYX2lrCGo8Y7c3aTe1XIwVVZ",
                    "session_duration_minutes": 60
                }

                // For all available parameters see
                https://stytch.com/docs/b2b/api/authenticate-magic-link
      responses:
        "200":
          description: Successful response
          content:
            application/json:
              schema:
                type: object
                properties:
                  request_id:
                    type: string
                    description: >
                      Globally unique UUID that is returned with every API call. This value is important to log for debugging
                      purposes; we may ask for this value to help identify a specific API call when helping you debug an issue.
                  member_id:
                    type: string
                    description: Globally unique UUID that identifies a specific Member.
                  method_id:
                    type: string
                    description: The email or device involved in the authentication.
                  reset_sessions:
                    type: boolean
                    description: This field is deprecated.
                  organization_id:
                    type: string
                    description: >
                      Globally unique UUID that identifies a specific Organization. The `organization_id` is critical to
                      perform operations on an Organization, so be sure to preserve this value.
                  member:
                    $ref: "#/components/schemas/Member"
                    description: The [Member object](https://stytch.com/docs/b2b/api/member-object)
                  session_token:
                    type: string
                    description: A secret token for a given Stytch Session.
                  session_jwt:
                    type: string
                    description: The JSON Web Token (JWT) for a given Stytch Session.
                  organization:
                    $ref: "#/components/schemas/Organization"
                    description: The [Organization object](https://stytch.com/docs/b2b/api/organization-object).
                  intermediate_session_token:
                    type: string
                    description: >
                      The returned Intermediate Session Token contains an Email Magic Link factor associated with the Member's
                      email address. If this value is non-empty, the member must complete an MFA step to finish logging in to
                      the Organization. The token can be used with the
                      [OTP SMS Authenticate endpoint](https://stytch.com/docs/b2b/api/authenticate-otp-sms),
                      [TOTP Authenticate endpoint](https://stytch.com/docs/b2b/api/authenticate-totp), or
                      [Recovery Codes Recover endpoint](https://stytch.com/docs/b2b/api/recovery-codes-recover) to complete an
                      MFA flow and log in to the Organization. The token has a default expiry of 10 minutes. It can also be
                      used with the
                      [Exchange Intermediate Session endpoint](https://stytch.com/docs/b2b/api/exchange-intermediate-session)
                      to join a specific Organization that allows the factors represented by the intermediate session token;
                      or the
                      [Create Organization via Discovery endpoint](https://stytch.com/docs/b2b/api/create-organization-via-discovery) to create a new Organization and Member. Intermediate Session Tokens have a default expiry of 10 minutes.
                  member_authenticated:
                    type: boolean
                    description: >
                      Indicates whether the Member is fully authenticated. If false, the Member needs to complete an MFA step
                      to log in to the Organization.
                  status_code:
                    type: integer
                    description: >
                      The HTTP status code of the response. Stytch follows standard HTTP response status code patterns, e.g.
                      2XX values equate to success, 3XX values are redirects, 4XX are client errors, and 5XX are server errors.
                  member_session:
                    $ref: "#/components/schemas/MemberSession"
                    description: The [Session object](https://stytch.com/docs/b2b/api/session-object).
                  mfa_required:
                    $ref: "#/components/schemas/MfaRequired"
                    description: Information about the MFA requirements of the Organization and the Member's options for fulfilling MFA.
                  primary_required:
                    $ref: "#/components/schemas/PrimaryRequired"
                    description: Information about the primary authentication requirements of the Organization.
                required:
                  - request_id
                  - member_id
                  - method_id
                  - reset_sessions
                  - organization_id
                  - member
                  - session_token
                  - session_jwt
                  - organization
                  - intermediate_session_token
                  - member_authenticated
                  - status_code
        default:
          description: Error response
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v1/b2b/magic_links/email/discovery/send:
    post:
      operationId: magic_links/send_discovery
      tags:
        - magic_links
      summary: Send discovery email
      requestBody:
        content:
          application/json:
            schema:
              type: object
              example: >-
                {
                    "email_address": "test@stytch.com"
                }

                // For all available parameters see
                https://stytch.com/docs/b2b/api/send-discovery-email
      responses:
        "200":
          description: Successful response
          content:
            application/json:
              schema:
                type: object
                properties:
                  request_id:
                    type: string
                    description: >
                      Globally unique UUID that is returned with every API call. This value is important to log for debugging
                      purposes; we may ask for this value to help identify a specific API call when helping you debug an issue.
                  status_code:
                    type: integer
                    description: >
                      The HTTP status code of the response. Stytch follows standard HTTP response status code patterns, e.g.
                      2XX values equate to success, 3XX values are redirects, 4XX are client errors, and 5XX are server errors.
                required:
                  - request_id
                  - status_code
        default:
          description: Error response
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v1/b2b/magic_links/discovery/authenticate:
    post:
      operationId: magic_links/authenticate_discovery
      tags:
        - magic_links
      summary: Authenticate discovery Magic Link
      requestBody:
        content:
          application/json:
            schema:
              type: object
              example: >-
                {
                    "discovery_magic_links_token": "token_here"
                }

                // For all available parameters see
                https://stytch.com/docs/b2b/api/authenticate-discovery-magic-link
      responses:
        "200":
          description: Successful response
          content:
            application/json:
              schema:
                type: object
                properties:
                  request_id:
                    type: string
                    description: >
                      Globally unique UUID that is returned with every API call. This value is important to log for debugging
                      purposes; we may ask for this value to help identify a specific API call when helping you debug an issue.
                  intermediate_session_token:
                    type: string
                    description: >
                      The Intermediate Session Token. This token does not necessarily belong to a specific instance of a
                      Member, but represents a bag of factors that may be converted to a member session. The token can be used
                      with the [OTP SMS Authenticate endpoint](https://stytch.com/docs/b2b/api/authenticate-otp-sms),
                      [TOTP Authenticate endpoint](https://stytch.com/docs/b2b/api/authenticate-totp), or
                      [Recovery Codes Recover endpoint](https://stytch.com/docs/b2b/api/recovery-codes-recover) to complete an
                      MFA flow and log in to the Organization. The token has a default expiry of 10 minutes. It can also be
                      used with the
                      [Exchange Intermediate Session endpoint](https://stytch.com/docs/b2b/api/exchange-intermediate-session)
                      to join a specific Organization that allows the factors represented by the intermediate session token;
                      or the
                      [Create Organization via Discovery endpoint](https://stytch.com/docs/b2b/api/create-organization-via-discovery) to create a new Organization and Member. Intermediate Session Tokens have a default expiry of 10 minutes.
                  email_address:
                    type: string
                    description: The email address.
                  discovered_organizations:
                    type: array
                    items:
                      $ref: "#/components/schemas/DiscoveredOrganization"
                    description: >
                      An array of `discovered_organization` objects tied to the `intermediate_session_token`, `session_token`,
                      or `session_jwt`. See the
                      [Discovered Organization Object](https://stytch.com/docs/b2b/api/discovered-organization-object) for
                      complete details.

                        Note that Organizations will only appear here under any of the following conditions:
                        1. The end user is already a Member of the Organization.
                        2. The end user is invited to the Organization.
                        3. The end user can join the Organization because:

                            a) The Organization allows JIT provisioning.

                            b) The Organizations' allowed domains list contains the Member's email domain.

                            c) The Organization has at least one other Member with a verified email address with the same
                      domain as the end user (to prevent phishing attacks).
                  status_code:
                    type: integer
                    description: >
                      The HTTP status code of the response. Stytch follows standard HTTP response status code patterns, e.g.
                      2XX values equate to success, 3XX values are redirects, 4XX are client errors, and 5XX are server errors.
                required:
                  - request_id
                  - intermediate_session_token
                  - email_address
                  - discovered_organizations
                  - status_code
        default:
          description: Error response
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v1/b2b/public/oauth/google/start:
    get:
      operationId: oauth/login_google
      tags:
        - oauth
      summary: Login with Google
      security:
        - noauthAuth: []
      parameters:
        - name: public_token
          in: query
          schema:
            type: string
          example: "{{PUBLIC_TOKEN}}"
      responses:
        "302":
          description: Successful response
          content:
            application/json:
              schema:
                type: object
                properties:
                  status_code:
                    type: integer
                    description: >
                      The HTTP status code of the response. Stytch follows standard HTTP response status code patterns, e.g.
                      2XX values equate to success, 3XX values are redirects, 4XX are client errors, and 5XX are server errors.
                  request_id:
                    type: string
                    description: >
                      Globally unique UUID that is returned with every API call. This value is important to log for debugging
                      purposes; we may ask for this value to help identify a specific API call when helping you debug an issue.
                  redirect_url:
                    type: string
                    description: The url to redirect to. This should be done automatically by the browser.
        default:
          description: Error response
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v1/b2b/public/oauth/microsoft/start:
    get:
      operationId: oauth/login_microsoft
      tags:
        - oauth
      summary: Login with Microsoft
      security:
        - noauthAuth: []
      parameters:
        - name: public_token
          in: query
          schema:
            type: string
          example: "{{PUBLIC_TOKEN}}"
      responses:
        "302":
          description: Successful response
          content:
            application/json:
              schema:
                type: object
                properties:
                  status_code:
                    type: integer
                    description: >
                      The HTTP status code of the response. Stytch follows standard HTTP response status code patterns, e.g.
                      2XX values equate to success, 3XX values are redirects, 4XX are client errors, and 5XX are server errors.
                  request_id:
                    type: string
                    description: >
                      Globally unique UUID that is returned with every API call. This value is important to log for debugging
                      purposes; we may ask for this value to help identify a specific API call when helping you debug an issue.
                  redirect_url:
                    type: string
                    description: The url to redirect to. This should be done automatically by the browser.
        default:
          description: Error response
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v1/b2b/public/oauth/hubspot/start:
    get:
      operationId: oauth/login_hubspot
      tags:
        - oauth
      summary: Login with HubSpot
      security:
        - noauthAuth: []
      parameters:
        - name: public_token
          in: query
          schema:
            type: string
          example: "{{PUBLIC_TOKEN}}"
      responses:
        "307":
          description: Successful response
          content:
            application/json:
              schema:
                type: object
                properties:
                  status_code:
                    type: integer
                    description: >
                      The HTTP status code of the response. Stytch follows standard HTTP response status code patterns, e.g.
                      2XX values equate to success, 3XX values are redirects, 4XX are client errors, and 5XX are server errors.
                  request_id:
                    type: string
                    description: >
                      Globally unique UUID that is returned with every API call. This value is important to log for debugging
                      purposes; we may ask for this value to help identify a specific API call when helping you debug an issue.
                  redirect_url:
                    type: string
                    description: The url to redirect to. This should be done automatically by the browser.
        default:
          description: Error response
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v1/b2b/public/oauth/slack/start:
    get:
      operationId: oauth/login_slack
      tags:
        - oauth
      summary: Login with Slack
      security:
        - noauthAuth: []
      parameters:
        - name: public_token
          in: query
          schema:
            type: string
          example: "{{PUBLIC_TOKEN}}"
      responses:
        "307":
          description: Successful response
          content:
            application/json:
              schema:
                type: object
                properties:
                  status_code:
                    type: integer
                    description: >
                      The HTTP status code of the response. Stytch follows standard HTTP response status code patterns, e.g.
                      2XX values equate to success, 3XX values are redirects, 4XX are client errors, and 5XX are server errors.
                  request_id:
                    type: string
                    description: >
                      Globally unique UUID that is returned with every API call. This value is important to log for debugging
                      purposes; we may ask for this value to help identify a specific API call when helping you debug an issue.
                  redirect_url:
                    type: string
                    description: The url to redirect to. This should be done automatically by the browser.
        default:
          description: Error response
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v1/b2b/public/oauth/github/start:
    get:
      operationId: oauth/login_github
      tags:
        - oauth
      summary: Login with GitHub
      security:
        - noauthAuth: []
      parameters:
        - name: public_token
          in: query
          schema:
            type: string
          example: "{{PUBLIC_TOKEN}}"
      responses:
        "307":
          description: Successful response
          content:
            application/json:
              schema:
                type: object
                properties:
                  status_code:
                    type: integer
                    description: >
                      The HTTP status code of the response. Stytch follows standard HTTP response status code patterns, e.g.
                      2XX values equate to success, 3XX values are redirects, 4XX are client errors, and 5XX are server errors.
                  request_id:
                    type: string
                    description: >
                      Globally unique UUID that is returned with every API call. This value is important to log for debugging
                      purposes; we may ask for this value to help identify a specific API call when helping you debug an issue.
                  redirect_url:
                    type: string
                    description: The url to redirect to. This should be done automatically by the browser.
        default:
          description: Error response
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v1/b2b/oauth/authenticate:
    post:
      operationId: oauth/authenticate
      tags:
        - oauth
      summary: Authenticate OAuth
      requestBody:
        content:
          application/json:
            schema:
              type: object
              example: >-
                {
                    "oauth_token": ""
                }

                // For all available parameters see
                https://stytch.com/docs/b2b/api/email-reset
      responses:
        "200":
          description: Successful response
          content:
            application/json:
              schema:
                type: object
                properties:
                  request_id:
                    type: string
                    description: >
                      Globally unique UUID that is returned with every API call. This value is important to log for debugging
                      purposes; we may ask for this value to help identify a specific API call when helping you debug an issue.
                  member_id:
                    type: string
                    description: Globally unique UUID that identifies a specific Member.
                  provider_subject:
                    type: string
                    description: >
                      The unique identifier for the User within a given OAuth provider. Also commonly called the `sub` or
                      "Subject field" in OAuth protocols.
                  provider_type:
                    type: string
                    description: >
                      Denotes the OAuth identity provider that the user has authenticated with, e.g. Google, Microsoft, GitHub
                      etc.
                  session_token:
                    type: string
                    description: A secret token for a given Stytch Session.
                  session_jwt:
                    type: string
                    description: The JSON Web Token (JWT) for a given Stytch Session.
                  member:
                    $ref: "#/components/schemas/Member"
                    description: The [Member object](https://stytch.com/docs/b2b/api/member-object)
                  organization_id:
                    type: string
                    description: >
                      Globally unique UUID that identifies a specific Organization. The `organization_id` is critical to
                      perform operations on an Organization, so be sure to preserve this value.
                  organization:
                    $ref: "#/components/schemas/Organization"
                    description: The [Organization object](https://stytch.com/docs/b2b/api/organization-object).
                  reset_sessions:
                    type: boolean
                    description: This field is deprecated.
                  member_authenticated:
                    type: boolean
                    description: >
                      Indicates whether the Member is fully authenticated. If false, the Member needs to complete an MFA step
                      to log in to the Organization.
                  intermediate_session_token:
                    type: string
                    description: >
                      The returned Intermediate Session Token contains an OAuth factor associated with the Member's email
                      address. If this value is non-empty, the member must complete an MFA step to finish logging in to the
                      Organization. The token can be used with the
                      [OTP SMS Authenticate endpoint](https://stytch.com/docs/b2b/api/authenticate-otp-sms),
                      [TOTP Authenticate endpoint](https://stytch.com/docs/b2b/api/authenticate-totp), or
                      [Recovery Codes Recover endpoint](https://stytch.com/docs/b2b/api/recovery-codes-recover) to complete an
                      MFA flow and log in to the Organization. The token has a default expiry of 10 minutes. It can also be
                      used with the
                      [Exchange Intermediate Session endpoint](https://stytch.com/docs/b2b/api/exchange-intermediate-session)
                      to join a specific Organization that allows the factors represented by the intermediate session token;
                      or the
                      [Create Organization via Discovery endpoint](https://stytch.com/docs/b2b/api/create-organization-via-discovery) to create a new Organization and Member. Intermediate Session Tokens have a default expiry of 10 minutes.
                  status_code:
                    type: integer
                    description: >
                      The HTTP status code of the response. Stytch follows standard HTTP response status code patterns, e.g.
                      2XX values equate to success, 3XX values are redirects, 4XX are client errors, and 5XX are server errors.
                  member_session:
                    $ref: "#/components/schemas/MemberSession"
                    description: The [Session object](https://stytch.com/docs/b2b/api/session-object).
                  provider_values:
                    type: object
                    properties:
                      scopes:
                        type: array
                        items:
                          type: string
                        description: >
                          The OAuth scopes included for a given provider. See each provider's section above to see which scopes
                          are included by default and how to add custom scopes.
                      access_token:
                        type: string
                        description: >
                          The `access_token` that you may use to access the User's data in the provider's API.
                      refresh_token:
                        type: string
                        description: >
                          The `refresh_token` that you may use to obtain a new `access_token` for the User within the provider's
                          API.
                      expires_at:
                        type: string
                        description: The expiration time of the access token.
                      id_token:
                        type: string
                        description: >
                          The `id_token` returned by the OAuth provider. ID Tokens are JWTs that contain structured information
                          about a user. The exact content of each ID Token varies from provider to provider. ID Tokens are
                          returned from OAuth providers that conform to the [OpenID Connect](https://openid.net/foundation/)
                          specification, which is based on OAuth.
                    description: >
                      The `provider_values` object lists relevant identifiers, values, and scopes for a given OAuth provider.
                      For example this object will include a provider's `access_token` that you can use to access the
                      provider's API for a given user.

                        Note that these values will vary based on the OAuth provider in question, e.g. `id_token` is only
                      returned by Microsoft. Google One Tap does not return access tokens or refresh tokens.
                  mfa_required:
                    $ref: "#/components/schemas/MfaRequired"
                    description: Information about the MFA requirements of the Organization and the Member's options for fulfilling MFA.
                  primary_required:
                    $ref: "#/components/schemas/PrimaryRequired"
                    description: Information about the primary authentication requirements of the Organization.
                required:
                  - request_id
                  - member_id
                  - provider_subject
                  - provider_type
                  - session_token
                  - session_jwt
                  - member
                  - organization_id
                  - organization
                  - reset_sessions
                  - member_authenticated
                  - intermediate_session_token
                  - status_code
        default:
          description: Error response
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v1/b2b/public/oauth/google/discovery/start:
    get:
      operationId: oauth/discovery_google
      tags:
        - oauth
      summary: Use Google for discovery
      security:
        - noauthAuth: []
      parameters:
        - name: public_token
          in: query
          schema:
            type: string
          example: "{{PUBLIC_TOKEN}}"
      responses:
        "302":
          description: Successful response
          content:
            application/json:
              schema:
                type: object
                properties:
                  status_code:
                    type: integer
                    description: >
                      The HTTP status code of the response. Stytch follows standard HTTP response status code patterns, e.g.
                      2XX values equate to success, 3XX values are redirects, 4XX are client errors, and 5XX are server errors.
                  request_id:
                    type: string
                    description: >
                      Globally unique UUID that is returned with every API call. This value is important to log for debugging
                      purposes; we may ask for this value to help identify a specific API call when helping you debug an issue.
                  redirect_url:
                    type: string
                    description: The url to redirect to. This should be done automatically by the browser.
        default:
          description: Error response
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v1/b2b/public/oauth/microsoft/discovery/start:
    get:
      operationId: oauth/discovery_microsoft
      tags:
        - oauth
      summary: Use Microsoft for discovery
      security:
        - noauthAuth: []
      parameters:
        - name: public_token
          in: query
          schema:
            type: string
          example: "{{PUBLIC_TOKEN}}"
      responses:
        "302":
          description: Successful response
          content:
            application/json:
              schema:
                type: object
                properties:
                  status_code:
                    type: integer
                    description: >
                      The HTTP status code of the response. Stytch follows standard HTTP response status code patterns, e.g.
                      2XX values equate to success, 3XX values are redirects, 4XX are client errors, and 5XX are server errors.
                  request_id:
                    type: string
                    description: >
                      Globally unique UUID that is returned with every API call. This value is important to log for debugging
                      purposes; we may ask for this value to help identify a specific API call when helping you debug an issue.
                  redirect_url:
                    type: string
                    description: The url to redirect to. This should be done automatically by the browser.
  /v1/b2b/public/oauth/hubspot/discovery/start:
    get:
      operationId: oauth/discovery_hubspot
      tags:
        - oauth
      summary: Use HubSpot for discovery
      security:
        - noauthAuth: []
      parameters:
        - name: public_token
          in: query
          schema:
            type: string
          example: "{{PUBLIC_TOKEN}}"
      responses:
        "307":
          description: Successful response
          content:
            application/json:
              schema:
                type: object
                properties:
                  status_code:
                    type: integer
                    description: >
                      The HTTP status code of the response. Stytch follows standard HTTP response status code patterns, e.g.
                      2XX values equate to success, 3XX values are redirects, 4XX are client errors, and 5XX are server errors.
                  request_id:
                    type: string
                    description: >
                      Globally unique UUID that is returned with every API call. This value is important to log for debugging
                      purposes; we may ask for this value to help identify a specific API call when helping you debug an issue.
                  redirect_url:
                    type: string
                    description: The url to redirect to. This should be done automatically by the browser.
        default:
          description: Error response
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v1/b2b/public/oauth/slack/discovery/start:
    get:
      operationId: oauth/discovery_slack
      tags:
        - oauth
      summary: Use Slack for discovery
      security:
        - noauthAuth: []
      parameters:
        - name: public_token
          in: query
          schema:
            type: string
          example: "{{PUBLIC_TOKEN}}"
      responses:
        "307":
          description: Successful response
          content:
            application/json:
              schema:
                type: object
                properties:
                  status_code:
                    type: integer
                    description: >
                      The HTTP status code of the response. Stytch follows standard HTTP response status code patterns, e.g.
                      2XX values equate to success, 3XX values are redirects, 4XX are client errors, and 5XX are server errors.
                  request_id:
                    type: string
                    description: >
                      Globally unique UUID that is returned with every API call. This value is important to log for debugging
                      purposes; we may ask for this value to help identify a specific API call when helping you debug an issue.
                  redirect_url:
                    type: string
                    description: The url to redirect to. This should be done automatically by the browser.
        default:
          description: Error response
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v1/b2b/public/oauth/github/discovery/start:
    get:
      operationId: oauth/discovery_github
      tags:
        - oauth
      summary: Use GitHub for discovery
      security:
        - noauthAuth: []
      parameters:
        - name: public_token
          in: query
          schema:
            type: string
          example: "{{PUBLIC_TOKEN}}"
      responses:
        "307":
          description: Successful response
          content:
            application/json:
              schema:
                type: object
                properties:
                  status_code:
                    type: integer
                    description: >
                      The HTTP status code of the response. Stytch follows standard HTTP response status code patterns, e.g.
                      2XX values equate to success, 3XX values are redirects, 4XX are client errors, and 5XX are server errors.
                  request_id:
                    type: string
                    description: >
                      Globally unique UUID that is returned with every API call. This value is important to log for debugging
                      purposes; we may ask for this value to help identify a specific API call when helping you debug an issue.
                  redirect_url:
                    type: string
                    description: The url to redirect to. This should be done automatically by the browser.
        default:
          description: Error response
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v1/b2b/oauth/discovery/authenticate:
    post:
      operationId: oauth/authenticate_discovery
      tags:
        - oauth
      summary: Authenticate discovery OAuth
      requestBody:
        content:
          application/json:
            schema:
              type: object
              example:
                discovery_oauth_token: ""
      responses:
        "200":
          description: Successful response
          content:
            application/json:
              schema:
                type: object
                properties:
                  request_id:
                    type: string
                    description: >
                      Globally unique UUID that is returned with every API call. This value is important to log for debugging
                      purposes; we may ask for this value to help identify a specific API call when helping you debug an issue.
                  intermediate_session_token:
                    type: string
                    description: >
                      The Intermediate Session Token. This token does not necessarily belong to a specific instance of a
                      Member, but represents a bag of factors that may be converted to a member session. The token can be used
                      with the [OTP SMS Authenticate endpoint](https://stytch.com/docs/b2b/api/authenticate-otp-sms),
                      [TOTP Authenticate endpoint](https://stytch.com/docs/b2b/api/authenticate-totp), or
                      [Recovery Codes Recover endpoint](https://stytch.com/docs/b2b/api/recovery-codes-recover) to complete an
                      MFA flow and log in to the Organization. The token has a default expiry of 10 minutes. It can also be
                      used with the
                      [Exchange Intermediate Session endpoint](https://stytch.com/docs/b2b/api/exchange-intermediate-session)
                      to join a specific Organization that allows the factors represented by the intermediate session token;
                      or the
                      [Create Organization via Discovery endpoint](https://stytch.com/docs/b2b/api/create-organization-via-discovery) to create a new Organization and Member. Intermediate Session Tokens have a default expiry of 10 minutes.
                  email_address:
                    type: string
                    description: The email address.
                  discovered_organizations:
                    type: array
                    items:
                      $ref: "#/components/schemas/DiscoveredOrganization"
                    description: >
                      An array of `discovered_organization` objects tied to the `intermediate_session_token`, `session_token`,
                      or `session_jwt`. See the
                      [Discovered Organization Object](https://stytch.com/docs/b2b/api/discovered-organization-object) for
                      complete details.

                        Note that Organizations will only appear here under any of the following conditions:
                        1. The end user is already a Member of the Organization.
                        2. The end user is invited to the Organization.
                        3. The end user can join the Organization because:

                            a) The Organization allows JIT provisioning.

                            b) The Organizations' allowed domains list contains the Member's email domain.

                            c) The Organization has at least one other Member with a verified email address with the same
                      domain as the end user (to prevent phishing attacks).
                  provider_type:
                    type: string
                    description: >
                      Denotes the OAuth identity provider that the user has authenticated with, e.g. Google, Microsoft, GitHub
                      etc.
                  provider_tenant_id:
                    type: string
                    description: >
                      The tenant ID returned by the OAuth provider. This is typically used to identify an organization or
                      group within the provider's domain. For example, in HubSpot this is a Hub ID, in Slack this is the
                      Workspace ID, and in GitHub this is an organization ID. This field will only be populated if exactly one
                      tenant ID is returned from a successful OAuth authentication and developers should prefer
                      `provider_tenant_ids` over this since it accounts for the possibility of an OAuth provider yielding
                      multiple tenant IDs.
                  provider_tenant_ids:
                    type: array
                    items:
                      type: string
                    description: >
                      All tenant IDs returned by the OAuth provider. These is typically used to identify organizations or
                      groups within the provider's domain. For example, in HubSpot this is a Hub ID, in Slack this is the
                      Workspace ID, and in GitHub this is an organization ID. Some OAuth providers do not return tenant IDs,
                      some providers are guaranteed to return one, and some may return multiple. This field will always be
                      populated if at least one tenant ID was returned from the OAuth provider and developers should prefer
                      this field over `provider_tenant_id`.
                  full_name:
                    type: string
                    description: The full name of the authenticated end user, if available.
                  status_code:
                    type: integer
                    description: >
                      The HTTP status code of the response. Stytch follows standard HTTP response status code patterns, e.g.
                      2XX values equate to success, 3XX values are redirects, 4XX are client errors, and 5XX are server errors.
                required:
                  - request_id
                  - intermediate_session_token
                  - email_address
                  - discovered_organizations
                  - provider_type
                  - provider_tenant_id
                  - provider_tenant_ids
                  - full_name
                  - status_code
        default:
          description: Error response
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v1/b2b/sessions/jwks/{project_id}:
    get:
      operationId: session/get_jwks
      tags:
        - session
      summary: Get JWKs
      parameters:
        - name: project_id
          in: path
          schema:
            type: string
          required: true
      responses:
        "200":
          description: Successful response
          content:
            application/json:
              schema:
                type: object
                properties:
                  request_id:
                    type: string
                  status_code:
                    type: integer
                  keys:
                    type: array
                    items:
                      $ref: "#/components/schemas/JWK"
                required:
                  - request_id
                  - status_code
                  - keys
        default:
          description: Error response
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v1/b2b/sessions:
    get:
      operationId: session/get
      tags:
        - session
      summary: Get Session
      parameters:
        - name: organization_id
          in: query
          schema:
            type: string
          example: organization-test-51096cce-277f-4645-b7fd-b7432fc038a9
        - name: member_id
          in: query
          schema:
            type: string
          example: member-test-24f7d7fd-4a57-4921-a159-b3cc5f93ce64
      responses:
        "200":
          description: Successful response
          content:
            application/json:
              schema:
                type: object
                properties:
                  request_id:
                    type: string
                  status_code:
                    type: integer
                  member_sessions:
                    type: array
                    items:
                      $ref: "#/components/schemas/MemberSession"
                required:
                  - request_id
                  - status_code
                  - member_sessions
        default:
          description: Error response
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v1/b2b/sessions/authenticate:
    post:
      operationId: session/authenticate
      tags:
        - session
      summary: Authenticate Session
      requestBody:
        content:
          application/json:
            schema:
              type: object
              example: >-
                {
                    "session_token": "E5RqJjUOSf4FSyaY8_A64unM058qhHMYpxXVDGAFt3Rb"
                }

                // For all available parameters see
                https://stytch.com/docs/b2b/api/authenticate-session
      responses:
        "200":
          description: Successful response
          content:
            application/json:
              schema:
                type: object
                properties:
                  request_id:
                    type: string
                  status_code:
                    type: integer
                  member_session:
                    $ref: "#/components/schemas/MemberSession"
                  session_token:
                    type: string
                  session_jwt:
                    type: string
                  member:
                    $ref: "#/components/schemas/Member"
                  organization:
                    $ref: "#/components/schemas/Organization"
                  authorized:
                    type: boolean
                  verdict:
                    type: array
                    items:
                      type: string
                required:
                  - request_id
                  - status_code
                  - member_session
                  - session_token
                  - session_jwt
                  - member
                  - organization
                  - authorized
                  - verdict
        default:
          description: Error response
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v1/b2b/sessions/exchange:
    post:
      operationId: session/exchange
      tags:
        - session
      summary: Exchange session
      requestBody:
        content:
          application/json:
            schema:
              type: object
              example: >-
                {
                    "organization_id": "organization-test-8b40bc71-0147-45e6-8dd7-6602ad4896af",
                    "session_token": "session_token_here"
                }

                // For all available parameters see
                https://stytch.com/docs/b2b/api/exchange-session
      responses:
        "200":
          description: Successful response
          content:
            application/json:
              schema:
                type: object
                properties:
                  request_id:
                    type: string
                  status_code:
                    type: integer
                  member_id:
                    type: string
                  session_token:
                    type: string
                  session_jwt:
                    type: string
                  intermediate_session_token:
                    type: string
                  member_authenticated:
                    type: boolean
                  mfa_required:
                    type: boolean
                  primary_required:
                    type: boolean
                  member_session:
                    $ref: "#/components/schemas/MemberSession"
                  member:
                    $ref: "#/components/schemas/Member"
                  organization:
                    $ref: "#/components/schemas/Organization"
                required:
                  - request_id
                  - status_code
                  - member_id
                  - session_token
                  - session_jwt
                  - intermediate_session_token
                  - member_authenticated
                  - mfa_required
                  - primary_required
                  - member_session
                  - member
                  - organization
        default:
          description: Error response
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v1/b2b/sessions/revoke:
    post:
      operationId: session/revoke
      tags:
        - session
      summary: Revoke Session
      requestBody:
        content:
          application/json:
            schema:
              type: object
              example: >-
                {
                    "member_session_id": "member-session-test-e84e3e2d-8e6f-4caf-a29f-df1351239106"
                }

                // For all available parameters see
                https://stytch.com/docs/b2b/api/revoke-session
      responses:
        "200":
          description: Successful response
          content:
            application/json:
              schema:
                type: object
                properties:
                  request_id:
                    type: string
                  status_code:
                    type: integer
                required:
                  - request_id
                  - status_code
        default:
          description: Error response
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v1/b2b/sessions/migrate:
    post:
      operationId: session/migrate
      tags:
        - session
      summary: Migrate Session
      requestBody:
        content:
          application/json:
            schema:
              type: object
      responses:
        "200":
          description: Successful response
          content:
            application/json:
              schema:
                type: object
                properties:
                  request_id:
                    type: string
                  status_code:
                    type: integer
                  member_session:
                    $ref: "#/components/schemas/MemberSession"
                  session_token:
                    type: string
                  session_jwt:
                    type: string
                  member:
                    $ref: "#/components/schemas/Member"
                  organization:
                    $ref: "#/components/schemas/Organization"
                required:
                  - request_id
                  - status_code
                  - member_session
                  - session_token
                  - session_jwt
                  - member
                  - organization
        default:
          description: Error response
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v1/b2b/sso/saml/{organization_id}:
    post:
      operationId: sso/create_saml
      tags:
        - sso
      summary: Create SAML Connection
      requestBody:
        content:
          application/json:
            schema:
              type: object
              example: >-
                {}

                // For all available parameters see
                https://stytch.com/docs/b2b/api/create-saml-connection
      parameters:
        - name: organization_id
          in: path
          schema:
            type: string
          required: true
          example: organization-test-309192b4-b07d-454d-ac2c-690125f6ea96
      responses:
        "200":
          description: Successful response
          content:
            application/json:
              schema:
                type: object
                properties:
                  request_id:
                    type: string
                  status_code:
                    type: integer
                  connection:
                    $ref: "#/components/schemas/SAMLConnection"
                required:
                  - request_id
                  - status_code
                  - connection
        default:
          description: Error response
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v1/b2b/sso/saml/{organization_id}/connections/{connection_id}:
    put:
      operationId: sso/update_saml
      tags:
        - sso
      summary: Update SAML Connection
      requestBody:
        content:
          application/json:
            schema:
              type: object
              example: >-
                {
                    "display_name": "Updated name"
                }

                // For all available parameters see
                https://stytch.com/docs/b2b/api/update-saml-connection
      parameters:
        - name: organization_id
          in: path
          schema:
            type: string
          required: true
          example: organization-test-309192b4-b07d-454d-ac2c-690125f6ea96
        - name: connection_id
          in: path
          schema:
            type: string
          required: true
          example: saml-connection-test-d2df88fc-f062-46d4-a821-9418642fc0ee
      responses:
        "200":
          description: Successful response
          content:
            application/json:
              schema:
                type: object
                properties:
                  request_id:
                    type: string
                  status_code:
                    type: integer
                  connection:
                    $ref: "#/components/schemas/SAMLConnection"
                required:
                  - request_id
                  - status_code
                  - connection
        default:
          description: Error response
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v1/b2b/sso/saml/{organization_id}/connections/{connection_id}/url:
    put:
      operationId: sso/update_saml_by_metadata_url
      tags:
        - sso
      summary: Update SAML Connection by metadata URL
      requestBody:
        content:
          application/json:
            schema:
              type: object
              example:
                metadata_url: ""
      parameters:
        - name: organization_id
          in: path
          schema:
            type: string
          required: true
          example: organization-test-309192b4-b07d-454d-ac2c-690125f6ea96
        - name: connection_id
          in: path
          schema:
            type: string
          required: true
          example: saml-connection-test-d2df88fc-f062-46d4-a821-9418642fc0ee
      responses:
        "200":
          description: Successful response
          content:
            application/json:
              schema:
                type: object
                properties:
                  request_id:
                    type: string
                  status_code:
                    type: integer
                  connection:
                    $ref: "#/components/schemas/SAMLConnection"
                required:
                  - request_id
                  - status_code
                  - connection
        default:
          description: Error response
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v1/b2b/sso/oidc/{organization_id}:
    post:
      operationId: sso/create_oidc
      tags:
        - sso
      summary: Create OIDC Connection
      requestBody:
        content:
          application/json:
            schema:
              type: object
              example: >-
                {}

                // For all available parameters see
                https://stytch.com/docs/b2b/api/create-oidc-connection
      parameters:
        - name: organization_id
          in: path
          schema:
            type: string
          required: true
          example: organization-test-309192b4-b07d-454d-ac2c-690125f6ea96
      responses:
        "200":
          description: Successful response
          content:
            application/json:
              schema:
                type: object
                properties:
                  request_id:
                    type: string
                  status_code:
                    type: integer
                  connection:
                    $ref: "#/components/schemas/OIDCConnection"
                required:
                  - request_id
                  - status_code
                  - connection
        default:
          description: Error response
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v1/b2b/sso/oidc/{organization_id}/connections/{connection_id}:
    put:
      operationId: sso/update_oidc
      tags:
        - sso
      summary: Update OIDC Connection
      requestBody:
        content:
          application/json:
            schema:
              type: object
              example: >-
                {
                    "display_name": "Updated name"
                }

                // For all available parameters see
                https://stytch.com/docs/b2b/api/update-oidc-connection
      parameters:
        - name: organization_id
          in: path
          schema:
            type: string
          required: true
          example: organization-test-309192b4-b07d-454d-ac2c-690125f6ea96
        - name: connection_id
          in: path
          schema:
            type: string
          required: true
          example: oidc-connection-test-fec0bc42-2bea-49ca-a8bd-02ebf72c5abc
      responses:
        "200":
          description: Successful response
          content:
            application/json:
              schema:
                type: object
                properties:
                  request_id:
                    type: string
                  status_code:
                    type: integer
                  connection:
                    $ref: "#/components/schemas/OIDCConnection"
                  warning:
                    type: string
                required:
                  - request_id
                  - status_code
                  - connection
                  - warning
        default:
          description: Error response
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v1/b2b/organizations/{organization_id}/members/{member_id}/oidc_providers:
    get:
      operationId: sso/get_oidc_access_token
      tags:
        - sso
      summary: Get OIDC Access Token
      parameters:
        - name: organization_id
          in: path
          schema:
            type: string
          required: true
          example: organization-test-309192b4-b07d-454d-ac2c-690125f6ea96
        - name: member_id
          in: path
          schema:
            type: string
          required: true
          example: member-test-a5a2f9f7-d150-49fb-94b0-adacbae82a70
        - name: include_refresh_token
          in: query
          schema:
            type: boolean
      responses:
        "200":
          description: Successful response
          content:
            application/json:
              schema:
                type: object
                properties:
                  request_id:
                    type: string
                  status_code:
                    type: integer
                  registrations:
                    type: array
                    items:
                      $ref: "#/components/schemas/OIDCProviderInfo"
        default:
          description: Error response
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v1/b2b/sso/{organization_id}:
    get:
      operationId: sso/get_connections
      tags:
        - sso
      summary: Get SSO Connections
      parameters:
        - name: organization_id
          in: path
          schema:
            type: string
          required: true
          example: organization-test-309192b4-b07d-454d-ac2c-690125f6ea96
      responses:
        "200":
          description: Successful response
          content:
            application/json:
              schema:
                type: object
                properties:
                  request_id:
                    type: string
                  status_code:
                    type: integer
                  saml_connections:
                    type: array
                    items:
                      $ref: "#/components/schemas/SAMLConnection"
                  oidc_connections:
                    type: array
                    items:
                      $ref: "#/components/schemas/OIDCConnection"
                  external_connections:
                    type: array
                    items:
                      $ref: "#/components/schemas/Connection"
                required:
                  - request_id
                  - status_code
                  - saml_connections
                  - oidc_connections
                  - external_connections
        default:
          description: Error response
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v1/b2b/sso/{organization_id}/connections/{connection_id}:
    delete:
      operationId: sso/delete_connection
      tags:
        - sso
      summary: Delete SSO Connection
      parameters:
        - name: organization_id
          in: path
          schema:
            type: string
          required: true
          example: organization-test-309192b4-b07d-454d-ac2c-690125f6ea96
        - name: connection_id
          in: path
          schema:
            type: string
          required: true
          example: saml-connection-test-d2df88fc-f062-46d4-a821-9418642fc0ee
      responses:
        "200":
          description: Successful response
          content:
            application/json:
              schema:
                type: object
                properties:
                  request_id:
                    type: string
                  status_code:
                    type: integer
                  connection_id:
                    type: string
                required:
                  - request_id
                  - status_code
                  - connection_id
        default:
          description: Error response
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v1/public/sso/start:
    get:
      operationId: sso/start
      tags:
        - sso
      summary: Start SSO Authentication
      parameters:
        - name: connection_id
          in: query
          schema:
            type: string
          example: saml-connection-test-1e8a4491-2138-47cd-a579-ebe040f1ff5c
        - name: public_token
          in: query
          schema:
            type: string
          example: "{{PUBLIC_TOKEN}}"
      responses:
        "200":
          description: Successful response
          content:
            application/json:
              schema:
                type: object
                properties:
                  request_id:
                    type: string
                  status_code:
                    type: integer
                  redirect_url:
                    type: string
                required:
                  - request_id
                  - status_code
                  - redirect_url
        default:
          description: Error response
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v1/b2b/sso/authenticate:
    post:
      operationId: sso/complete
      tags:
        - sso
      summary: Complete SSO Authentication
      requestBody:
        content:
          application/json:
            schema:
              type: object
              example: >-
                {
                    "sso_token": "token_here",
                    "session_duration_minutes": 60
                }

                // For all available parameters see
                https://stytch.com/docs/b2b/api/sso-authenticate
      responses:
        "200":
          description: Successful response
          content:
            application/json:
              schema:
                type: object
                properties:
                  request_id:
                    type: string
                  status_code:
                    type: integer
                  member_id:
                    type: string
                  organization_id:
                    type: string
                  member:
                    $ref: "#/components/schemas/Member"
                  organization:
                    $ref: "#/components/schemas/Organization"
                  session_token:
                    type: string
                  session_jwt:
                    type: string
                  intermediate_session_token:
                    type: string
                  member_authenticated:
                    type: boolean
                  mfa_required:
                    type: boolean
                  member_session:
                    $ref: "#/components/schemas/MemberSession"
                  reset_session:
                    type: boolean
                required:
                  - request_id
                  - status_code
                  - member_id
                  - organization_id
                  - member
                  - organization
                  - session_token
                  - session_jwt
                  - intermediate_session_token
                  - member_authenticated
                  - reset_session
        default:
          description: Error response
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v1/b2b/sso/saml/{organization_id}/connections/{connection_id}/verification_certificates/{certificate_id}:
    delete:
      operationId: sso/delete_saml_verification_certificate
      tags:
        - sso
      summary: Delete SAML Verification Certificate
      parameters:
        - name: organization_id
          in: path
          schema:
            type: string
          required: true
          example: organization-test-309192b4-b07d-454d-ac2c-690125f6ea96
        - name: connection_id
          in: path
          schema:
            type: string
          required: true
          example: saml-connection-test-d2df88fc-f062-46d4-a821-9418642fc0ee
        - name: certificate_id
          in: path
          schema:
            type: string
          required: true
          example: saml-signing-key-test-5eb257b6-d45f-476e-9af1-a0aba0848ead
      responses:
        "200":
          description: Successful response
          content:
            application/json:
              schema:
                type: object
                properties:
                  request_id:
                    type: string
                  status_code:
                    type: integer
                  connection:
                    $ref: "#/components/schemas/SAMLConnection"
                required:
                  - request_id
                  - status_code
                  - connection
        default:
          description: Error response
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v1/b2b/sso/external/{organization_id}:
    post:
      operationId: sso/create_external_connection
      tags:
        - sso
      summary: Create External Connection
      requestBody:
        content:
          application/json:
            schema:
              type: object
              example: >-
                {
                    "external_organization_id": "External Org ID",
                    "external_connection_id": "External Org SSO Connection ID"
                }

                // For all available parameters see
                https://stytch.com/docs/b2b/api/create-external-connection
      parameters:
        - name: organization_id
          in: path
          schema:
            type: string
          required: true
          description: >-
            Globally unique UUID that identifies a specific Organization. The
            organization_id is critical to perform operations on an
            Organization, so be sure to preserve this value.
          example: organization-test-309192b4-b07d-454d-ac2c-690125f6ea96
      responses:
        "200":
          description: Successful response
          content:
            application/json:
              schema:
                type: object
                properties:
                  request_id:
                    type: string
                  status_code:
                    type: integer
                  connection:
                    $ref: "#/components/schemas/Connection"
                required:
                  - request_id
                  - status_code
                  - connection
        default:
          description: Error response
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v1/b2b/sso/external/{organization_id}/connections/{connection_id}:
    put:
      operationId: sso/update_external_connection
      tags:
        - sso
      summary: Update External Connection
      requestBody:
        content:
          application/json:
            schema:
              type: object
              example: >-
                {}

                // For all available parameters see
                https://stytch.com/docs/b2b/api/update-external-connection
      parameters:
        - name: organization_id
          in: path
          schema:
            type: string
          required: true
          description: >-
            Globally unique UUID that identifies a specific Organization. The
            organization_id is critical to perform operations on an
            Organization, so be sure to preserve this value.
          example: organization-test-309192b4-b07d-454d-ac2c-690125f6ea96
        - name: connection_id
          in: path
          schema:
            type: string
          required: true
          description: >-
            Globally unique UUID that identifies a specific External SSO
            Connection.
          example: saml-connection-test-d2df88fc-f062-46d4-a821-9418642fc0ee
      responses:
        "200":
          description: Successful response
          content:
            application/json:
              schema:
                type: object
                properties:
                  request_id:
                    type: string
                  status_code:
                    type: integer
                  connection:
                    $ref: "#/components/schemas/Connection"
                required:
                  - request_id
                  - status_code
                  - connection
        default:
          description: Error response
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v1/b2b/discovery/organizations:
    post:
      operationId: discovery/list
      tags:
        - discovery
      summary: List discovered Organizations
      requestBody:
        content:
          application/json:
            schema:
              type: object
              example: >-
                {
                    "intermediate_session_token": "token_here"
                }

                // For all available parameters see
                https://stytch.com/docs/b2b/api/list-discovered-organizations
      responses:
        "200":
          description: Successful response
          content:
            application/json:
              schema:
                type: object
        default:
          description: Error response
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v1/b2b/discovery/organizations/create:
    post:
      operationId: discovery/create_organization
      tags:
        - discovery
      summary: Create Organization via Discovery
      requestBody:
        content:
          application/json:
            schema:
              type: object
              example: >-
                {
                    "intermediate_session_token": "token_here",
                    "session_duration_minutes": 60,
                    "organization_name": "Stytch",
                    "organization_slug": "stytch"
                }

                // For all available parameters see
                https://stytch.com/docs/b2b/api/create-organization-via-discovery
      responses:
        "200":
          description: Successful response
          content:
            application/json:
              schema:
                type: object
        default:
          description: Error response
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v1/b2b/discovery/intermediate_sessions/exchange:
    post:
      operationId: discovery/exchange_intermediate_session
      tags:
        - discovery
      summary: Exchange intermediate session
      requestBody:
        content:
          application/json:
            schema:
              type: object
              example: >-
                {
                    "intermediate_session_token": "token_here",
                    "organization_id": "organization-test-39520e41-3912-41e1-9ef0-95388bb8356c"
                }

                // For all available parameters see
                https://stytch.com/docs/b2b/api/exchange-intermediate-session
      responses:
        "200":
          description: Successful response
          content:
            application/json:
              schema:
                type: object
        default:
          description: Error response
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v1/b2b/passwords/authenticate:
    post:
      operationId: passwords/authenticate
      tags:
        - passwords
      summary: Authenticate
      requestBody:
        content:
          application/json:
            schema:
              type: object
              example: >-
                {
                    "organization_id": "organization-test-51096cce-277f-4645-b7fd-b7432fc038a9",
                    "email_address": "test@stytch.com",
                    "password": "123abc"
                }

                // For all available parameters see
                https://stytch.com/docs/b2b/api/passwords-authenticate
      responses:
        "200":
          description: Successful response
          content:
            application/json:
              schema:
                type: object
        default:
          description: Error response
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v1/b2b/passwords/email/reset/start:
    post:
      operationId: passwords/email_reset_start
      tags:
        - passwords
      summary: Password reset by email start
      requestBody:
        content:
          application/json:
            schema:
              type: object
              example: >-
                {
                    "organization_id": "organization-test-51096cce-277f-4645-b7fd-b7432fc038a9",
                    "email_address": "test@stytch.com"
                }

                // For all available parameters see
                https://stytch.com/docs/b2b/api/email-reset-start
      responses:
        "200":
          description: Successful response
          content:
            application/json:
              schema:
                type: object
        default:
          description: Error response
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v1/b2b/passwords/email/reset:
    post:
      operationId: passwords/email_reset
      tags:
        - passwords
      summary: Password reset by email
      requestBody:
        content:
          application/json:
            schema:
              type: object
              example: >-
                {
                    "password_reset_token": "TOKEN_HERE",
                    "password": "123abc"
                }

                // For all available parameters see
                https://stytch.com/docs/b2b/api/email-reset
      responses:
        "200":
          description: Successful response
          content:
            application/json:
              schema:
                type: object
        default:
          description: Error response
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v1/b2b/passwords/existing_password/reset:
    post:
      operationId: passwords/existing_reset
      tags:
        - passwords
      summary: Password reset by existing password
      requestBody:
        content:
          application/json:
            schema:
              type: object
              example: >-
                {
                    "organization_id": "organization-test-51096cce-277f-4645-b7fd-b7432fc038a9",
                    "email_address": "test@stytch.com",
                    "existing_password": "zxcvbn123",
                    "new_password": "123abc"
                }

                // For all available parameters see
                https://stytch.com/docs/b2b/api/existing-reset
      responses:
        "200":
          description: Successful response
          content:
            application/json:
              schema:
                type: object
        default:
          description: Error response
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v1/b2b/passwords/session/reset:
    post:
      operationId: passwords/session_reset
      tags:
        - passwords
      summary: Password reset by session
      requestBody:
        content:
          application/json:
            schema:
              type: object
              example: >-
                {
                    "organization_id": "organization-test-51096cce-277f-4645-b7fd-b7432fc038a9",
                    "password": "123abc",
                    "session_token": "TOKEN"
                }

                // For all available parameters see
                https://stytch.com/docs/b2b/api/passwords-authenticate
      responses:
        "200":
          description: Successful response
          content:
            application/json:
              schema:
                type: object
        default:
          description: Error response
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v1/b2b/passwords/strength_check:
    post:
      operationId: passwords/strength_check
      tags:
        - passwords
      summary: Strength check
      requestBody:
        content:
          application/json:
            schema:
              type: object
              example: >-
                {
                    "email_address": "test@stytch.com",
                    "password": "123abc"
                }

                // For all available parameters see
                https://stytch.com/docs/b2b/api/strength-check
      responses:
        "200":
          description: Successful response
          content:
            application/json:
              schema:
                type: object
        default:
          description: Error response
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v1/b2b/passwords/migrate:
    post:
      operationId: passwords/migrate
      tags:
        - passwords
      summary: Migrate
      requestBody:
        content:
          application/json:
            schema:
              type: object
              example: >-
                {
                    "organization_id": "organization-test-51096cce-277f-4645-b7fd-b7432fc038a9",
                    "email_address": "test@stytch.com",
                    "hash_type": "bcrypt",
                    "hash": "$2a$04$2V5QoDv2NhF7Y/4oKNG.D.Sv1vMOX4ywfpwG7SxGrNo.tSwkgyueO"
                }

                // For all available parameters see
                https://stytch.com/docs/b2b/api/migrate
      responses:
        "200":
          description: Successful response
          content:
            application/json:
              schema:
                type: object
        default:
          description: Error response
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v1/b2b/otps/sms/send:
    post:
      operationId: mfa/sms_send
      tags:
        - mfa
      summary: OTP SMS Send
      requestBody:
        content:
          application/json:
            schema:
              type: object
              example: >-
                {
                    "organization_id": "organization-test-51096cce-277f-4645-b7fd-b7432fc038a9",
                    "member_id": ""
                }

                // For all available parameters see
                https://stytch.com/docs/b2b/api/otp-sms-send
      responses:
        "200":
          description: Successful response
          content:
            application/json:
              schema:
                type: object
        default:
          description: Error response
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v1/b2b/totp/authenticate:
    post:
      operationId: mfa/authenticate
      tags:
        - mfa
      summary: Authenticate
      requestBody:
        content:
          application/json:
            schema:
              type: object
              example: >-
                {
                    "organization_id": "",
                    "member_id": "",
                    "code": ""
                }

                // For all available parameters see
                https://stytch.com/docs/b2b/api/authenticate-otp-sms
      responses:
        "200":
          description: Successful response
          content:
            application/json:
              schema:
                type: object
        default:
          description: Error response
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v1/b2b/otps/sms/authenticate:
    post:
      operationId: mfa/rotate_recovery_codes
      tags:
        - mfa
      summary: Rotate recovery codes
      requestBody:
        content:
          application/json:
            schema:
              type: object
              example: >-
                {
                    "organization_id": "organization-test-51096cce-277f-4645-b7fd-b7432fc038a9",
                    "member_id": "",
                    "code": ""
                }

                // For all available parameters see
                https://stytch.com/docs/b2b/api/authenticate-otp-sms
      responses:
        "200":
          description: Successful response
          content:
            application/json:
              schema:
                type: object
        default:
          description: Error response
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v1/b2b/recovery_codes/rotate:
    post:
      operationId: mfa/recover
      tags:
        - mfa
      summary: Recover
      requestBody:
        content:
          application/json:
            schema:
              type: object
              example: >-
                {
                    "organization_id": "organization-test-51096cce-277f-4645-b7fd-b7432fc038a9",
                    "member_id": ""
                }

                // For all available parameters see
                https://stytch.com/docs/b2b/api/recovery-codes-rotate
      responses:
        "200":
          description: Successful response
          content:
            application/json:
              schema:
                type: object
        default:
          description: Error response
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v1/public/{project_id}/oauth2/token:
    post:
      operationId: m2m/get_token
      tags:
        - m2m
      summary: Get access token
      requestBody:
        content:
          application/json:
            schema:
              type: object
              example:
                client_id: ""
                client_secret: ""
                grant_type: client_credentials
      parameters:
        - name: project_id
          in: path
          schema:
            type: string
          required: true
          example: "{{PROJECT_ID}}"
      responses:
        "200":
          description: Successful response
          content:
            application/json:
              schema:
                type: object
        default:
          description: Error response
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v1/m2m/clients:
    post:
      operationId: m2m/create_client
      tags:
        - m2m
      summary: Create M2M client
      requestBody:
        content:
          application/json:
            schema:
              type: object
              example: {}
      responses:
        "200":
          description: Successful response
          content:
            application/json:
              schema:
                type: object
        default:
          description: Error response
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v1/m2m/clients/{client_id}:
    get:
      operationId: m2m/get_client
      tags:
        - m2m
      summary: Get M2M client
      parameters:
        - name: client_id
          in: path
          schema:
            type: string
          required: true
          example: m2m-client-test-a48cac88-49f5-4d4e-8951-06a2eb5b3ba4
      responses:
        "200":
          description: Successful response
          content:
            application/json:
              schema:
                type: object
        default:
          description: Error response
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
    put:
      operationId: m2m/update_client
      tags:
        - m2m
      summary: Update M2M client
      requestBody:
        content:
          application/json:
            schema:
              type: object
              example:
                client_name: updated name
      parameters:
        - name: client_id
          in: path
          schema:
            type: string
          required: true
          example: m2m-client-test-a48cac88-49f5-4d4e-8951-06a2eb5b3ba4
      responses:
        "200":
          description: Successful response
          content:
            application/json:
              schema:
                type: object
        default:
          description: Error response
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
    delete:
      operationId: m2m/delete_client
      tags:
        - m2m
      summary: Delete M2M client
      parameters:
        - name: client_id
          in: path
          schema:
            type: string
          required: true
          example: m2m-client-test-a48cac88-49f5-4d4e-8951-06a2eb5b3ba4
      responses:
        "200":
          description: Successful response
          content:
            application/json:
              schema:
                type: object
        default:
          description: Error response
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v1/m2m/clients/search:
    post:
      operationId: m2m/search_clients
      tags:
        - m2m
      summary: Search M2M clients
      requestBody:
        content:
          application/json:
            schema:
              type: object
              example: {}
      responses:
        "200":
          description: Successful response
          content:
            application/json:
              schema:
                type: object
        default:
          description: Error response
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v1/m2m/clients/{client_id}/secrets/rotate/start:
    post:
      operationId: m2m/start_secret_rotation
      tags:
        - m2m
      summary: Start secret rotation
      requestBody:
        content: {}
      parameters:
        - name: client_id
          in: path
          schema:
            type: string
          required: true
          example: m2m-client-test-a48cac88-49f5-4d4e-8951-06a2eb5b3ba4
      responses:
        "200":
          description: Successful response
          content:
            application/json:
              schema:
                type: object
        default:
          description: Error response
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v1/m2m/clients/{client_id}/secrets/rotate:
    post:
      operationId: m2m/rotate_secret
      tags:
        - m2m
      summary: Rotate secret
      requestBody:
        content: {}
      parameters:
        - name: client_id
          in: path
          schema:
            type: string
          required: true
          example: m2m-client-test-a48cac88-49f5-4d4e-8951-06a2eb5b3ba4
      responses:
        "200":
          description: Successful response
          content:
            application/json:
              schema:
                type: object
        default:
          description: Error response
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v1/m2m/clients/{client_id}/secrets/rotate/cancel:
    post:
      operationId: m2m/cancel_secret_rotation
      tags:
        - m2m
      summary: Cancel secret rotation
      requestBody:
        content: {}
      parameters:
        - name: client_id
          in: path
          schema:
            type: string
          required: true
          example: m2m-client-test-a48cac88-49f5-4d4e-8951-06a2eb5b3ba4
      responses:
        "200":
          description: Successful response
          content:
            application/json:
              schema:
                type: object
        default:
          description: Error response
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v1/b2b/otps/email/login_or_signup:
    post:
      operationId: email_otp/login_or_signup
      tags:
        - email_otp
      summary: Send login or signup email
      requestBody:
        content:
          application/json:
            schema:
              type: object
              example: >-
                {
                  "organization_id": "",
                  "email_address": ""
                }

                // For all available parameters see
                https://stytch.com/docs/b2b/api/send-login-signup-email-otp
      responses:
        "200":
          description: Successful response
          content:
            application/json:
              schema:
                type: object
        default:
          description: Error response
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v1/b2b/otps/email/authenticate:
    post:
      operationId: email_otp/authenticate
      tags:
        - email_otp
      summary: Authenticate One-time Passcode (OTP)
      requestBody:
        content:
          application/json:
            schema:
              type: object
              example: "{\n  \"organization_id\": \"\",\n  \"member_id\": \"\",\n\t\"code\": \"\"\n}\n// For all available parameters see https://stytch.com/docs/b2b/api/authenticate-email-otp"
      responses:
        "200":
          description: Successful response
          content:
            application/json:
              schema:
                type: object
        default:
          description: Error response
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v1/b2b/otps/email/discovery/send:
    post:
      operationId: email_otp/send_discovery
      tags:
        - email_otp
      summary: Send Discovery Email OTP
      requestBody:
        content:
          application/json:
            schema:
              type: object
              example: >-
                {
                  "email_address": ""
                }

                // For all available parameters see
                https://stytch.com/docs/b2b/api/send-discovery-email-otp
      responses:
        "200":
          description: Successful response
          content:
            application/json:
              schema:
                type: object
        default:
          description: Error response
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v1/b2b/otps/email/discovery/authenticate:
    post:
      operationId: email_otp/authenticate_discovery
      tags:
        - email_otp
      summary: Authenticate Discovery One-Time Passcode (OTP)
      requestBody:
        content:
          application/json:
            schema:
              type: object
              example: >-
                {
                  "email_address": "",
                  "code": ""
                }

                // For all available parameters see
                https://stytch.com/docs/b2b/api/authenticate-discovery-email-otp
      responses:
        "200":
          description: Successful response
          content:
            application/json:
              schema:
                type: object
        default:
          description: Error response
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v1/b2b/impersonation/authenticate:
    post:
      operationId: impersonation/authenticate
      tags:
        - impersonation
      summary: Authenticate Impersonation Token
      requestBody:
        content:
          application/json:
            schema:
              type: object
              example: >-
                {
                  "impersonation_token": ""
                }

                // For all available parameters see
                https://stytch.com/docs/b2b/api/authenticate-impersonation-token
      responses:
        "200":
          description: Successful response
          content:
            application/json:
              schema:
                type: object
        default:
          description: Error response
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"