For developers
An identity API, not a login widget.
Scoped API keys, an OpenAPI schema, and endpoints designed to be called directly — Oidot is built to be integrated with code, not just clicked through in a dashboard.
Built to be called, not just clicked
Every capability in the Oidot platform — authentication, session management, access control — is exposed as an API first. The admin console is a client of the same endpoints your code would call, not a separate system with more capability than the API.
Scoped, rotatable API keys mean a script or service can authenticate without a person's password ever being involved, and the platform's OpenAPI schema is generated from the same source that serves it.
Features
Scoped, rotatable API keys
Machine credentials scoped to exactly what a given integration needs, rotatable without downtime.
OpenAPI schema
An auto-generated schema of every endpoint, kept in sync with what's actually deployed.
Rate limiting
Predictable limits on every endpoint, so a runaway integration fails safely instead of taking the platform down with it.
CSRF protection built in
State-changing endpoints are protected by default — one less thing your integration has to get right.
Read the API-first design
See how the platform's architecture and API surface fit together.