Skip to main content
SmoothGlue Logo

Authentication

ReferencePublicUpdated 2026-04-08

Authentication​

All API requests require a Bearer token from Keycloak.

Obtain a token​

curl -s -X POST \
  "https://keycloak.<your-domain>/realms/smoothglue/protocol/openid-connect/token" \
  -d "grant_type=client_credentials" \
  -d "client_id=api-client" \
  -d "client_secret=<your-secret>" \
  | jq -r '.access_token'

Pass the token as a header on all API requests:

Authorization: Bearer <token>

Token scopes​

ScopeDescription
platform:readRead-only access to platform state
platform:writeModify platform configuration
compliance:readAccess compliance reports and SBOM data
deployments:writeTrigger deployments and sync operations

Base URL​

https://console.<your-domain>/api/v1

All responses are JSON. All timestamps are ISO 8601 UTC.