Reference

API endpoints

Issuer endpoints on 0trust.cloud. Portal wrappers on 0trust.codes (same origin as this site when proxied to platform).

OIDC (issuer)

EndpointURL
Issuerhttps://0trust.cloud
Discoveryhttps://0trust.cloud/.well-known/openid-configuration
Authorizehttps://0trust.cloud/auth/authorize
Tokenhttps://0trust.cloud/auth/token
JWKShttps://0trust.cloud/auth/keys
UserInfohttps://0trust.cloud/api/v1/idp/userinfo
Revokehttps://0trust.cloud/auth/revoke
Login (passkey)https://0trust.cloud/auth?return_to=https://0trust.codes/developers

Portal wrappers (session cookies)

MethodPathNotes
GET/api/v1/developer/metaPublic issuer + SDK metadata
POST/api/v1/developer/signupWraps company signup
GET/api/v1/developer/signup/checkSubdomain availability
GET/api/v1/developer/appsList my OIDC clients (auth)
POST/api/v1/developer/appsCreate client (auth)
DELETE/api/v1/developer/apps/{id}Delete client (auth)

Scopes

openid profile email offline_access

Recommended flow

Authorization code + PKCE S256. Validate id_token with JWKS (RS256), check iss, aud, exp, nonce.