Aegis Developer Portal

Developer Search

Press ⌘K or Ctrl+K to jump through guides and public API docs for user-owned master key and scoped credential flows.

API Reference

Aegis Platform API

Connect RPC surface for the Aegis zero-knowledge platform. Operations are tagged as `public` (integrator-facing) or `private` (internal/elevated).

This explorer lists public operations and documents the model where users control master keys while platform services enforce policy and scoped access.

Developer Home

POSTpublicIdentityGatewayServiceAuth Required

Create Session

/aegis.v1.IdentityGatewayService/CreateSession

Authentication

This endpoint requires a bearer access token. Use short-lived tokens and send them only in the Authorization header.

Keep tokens short-lived and rotate them frequently.
Never include tokens in query parameters or logs.
Use least-privilege scope grants for the caller.
Preserve user data ownership boundaries: authenticate and authorize access without transmitting plaintext master key material.

Security Schemes

BearerAuthscopes: token must still be policy-allowlisted.

Parameters

Name	In	Required	Description
Connect-Protocol-Version	header	yes	-
Connect-Timeout-Ms	header	no	-

Request Body (Example)

{
  "deviceId": "string",
  "authMethod": "string",
  "riskSignal": {
    "ip": "string",
    "countryCode": "string",
    "region": "string",
    "city": "string",
    "asn": "string",
    "deviceFingerprint": "string",
    "riskScore": 0,
    "latitude": 0,
    "longitude": 0,
    "occurredAtUnix": null
  }
}

Responses

200

Success

{
  "sessionId": "string",
  "expiresInSeconds": null,
  "stepUpRequired": true
}

default

Error

{
  "code": "string",
  "message": "string",
  "details": [
    {
      "type": "string",
      "value": "string",
      "debug": {}
    }
  ]
}

# gnostic-sample-create-session
curl --request POST ${AEGIS_BASE_URL:-https://api.aegis.com}/aegis.v1.IdentityGatewayService/CreateSession --header 'Content-Type: application/json' --header 'Connect-Protocol-Version: 1' --header 'Authorization: Bearer <AEGIS_TOKEN>' --data @create-session.json