Your API can own
every identity flow.

import { AuthPIAdmin } from "@authpi/admin";

const admin = new AuthPIAdmin({
  apiKey: { id: process.env.AUTHPI_KEY_ID!, secret: process.env.AUTHPI_KEY_SECRET! },
});

const iss = admin.issuer("iss_authpi");

// One model: a tenant, a member, and a scoped machine credential.
const org = await iss.organizations.create({ name: "Acme", type: "business" });

await iss.organization(org.id).invitations.create({
  email: "amir@acme.com",
  role: "member",
});

const key = await iss.organization(org.id).apiKeys.create({
  name: "CI pipeline",
  scopes: ["users:read", "events:read"],
});

// Every change above already emitted an event to your webhooks.

from authpi_admin import AuthPIAdmin

async with AuthPIAdmin(api_key=(KEY_ID, KEY_SECRET)) as admin:
    iss = admin.issuer("iss_authpi")

    # One model: a tenant, a member, and a scoped machine credential.
    org = await iss.organizations.create({"name": "Acme", "type": "business"})

    await iss.organization(org.id).invitations.create({
        "email": "amir@acme.com",
        "role": "member",
    })

    key = await iss.organization(org.id).api_keys.create({
        "name": "CI pipeline",
        "scopes": ["users:read", "events:read"],
    })

    # Every change above already emitted an event to your webhooks.