Tako: Supported Okta API Endpoints - fctr-id/okta-ai-agent GitHub Wiki

Comprehensive coverage of 107+ Okta GET API endpoints with intelligent multi-agent coordination

📊 At a Glance

Metric	Value
Total Endpoints	107+
Entity Categories	25+
HTTP Methods	GET (Read-Only)

🔍 Entity Details

Application (2 endpoints)

Also known as: app, integration, client
Operations: list, get
Methods: GET

📋 Endpoint Details
This entity category supports 2 endpoints with operations: list, get. Each endpoint includes comprehensive documentation, parameter validation, and intelligent dependency resolution as part of Tako's multi-agent architecture.

Application Assignment (4 endpoints)

Also known as: app assignment, user app assignment, group app assignment
Operations: list_group_assignments, get_group_assignment, list_user_assignments, get_user_assignment
Methods: GET

📋 Endpoint Details
This entity category supports 4 endpoints with operations: list_group_assignments, get_group_assignment, list_user_assignments, get_user_assignment. Each endpoint includes comprehensive documentation, parameter validation, and intelligent dependency resolution as part of Tako's multi-agent architecture.

Application Connection (2 endpoints)

Also known as: provisioning connection
Operations: get_default, get_jwks
Methods: GET

📋 Endpoint Details
This entity category supports 2 endpoints with operations: get_default, get_jwks. Each endpoint includes comprehensive documentation, parameter validation, and intelligent dependency resolution as part of Tako's multi-agent architecture.

Application Credential (8 endpoints)

Also known as: app credential, key, secret, certificate, csr, jwk
Operations: list_csrs, get_csr, list_keys, get_key, list_jwks, get_jwk, list_secrets, get_secret
Methods: GET

📋 Endpoint Details
This entity category supports 8 endpoints with operations: list_csrs, get_csr, list_keys, get_key, list_jwks, get_jwk, list_secrets, get_secret. Each endpoint includes comprehensive documentation, parameter validation, and intelligent dependency resolution as part of Tako's multi-agent architecture.

Application Feature (2 endpoints)

Also known as: app feature, provisioning feature
Operations: list, get
Methods: GET

Application Federated Claim (2 endpoints)

Also known as: federated claim, token claim
Operations: list, get
Methods: GET

Application Grant (2 endpoints)

Also known as: app grant, consent grant
Operations: list, get
Methods: GET

Application SSO (1 endpoint)

Also known as: sso settings, saml metadata
Operations: get_saml_metadata
Methods: GET

📋 Endpoint Details
This entity category supports 1 endpoint with operations: get_saml_metadata. Each endpoint includes comprehensive documentation, parameter validation, and intelligent dependency resolution as part of Tako's multi-agent architecture.

Auth Server (2 endpoints)

Also known as: authorization server, oauth server
Operations: list, get
Methods: GET

Authenticator (2 endpoints)

Also known as: mfa, factor, 2fa
Operations: list, get
Methods: GET

Brand (2 endpoints)

Also known as: branding, custom brand
Operations: list, get
Methods: GET

Custom Domain (2 endpoints)

Also known as: domain, custom url
Operations: list, get
Methods: GET

Device (2 endpoints)

Also known as: devices, managed device
Operations: list, get
Methods: GET

Device Assurance Policy (2 endpoints)

Also known as: device policy, compliance policy
Operations: list, get
Methods: GET

Event Hook (2 endpoints)

Also known as: webhook, hook
Operations: list, get
Methods: GET

Feature (2 endpoints)

Also known as: org feature, feature flag
Operations: list, get
Methods: GET

Group (4 endpoints)

Also known as: groups
Operations: list, get, list_assigned_apps, list_members
Methods: GET

📋 Endpoint Details
This entity category supports 4 endpoints with operations: list, get, list_assigned_apps, list_members. Each endpoint includes comprehensive documentation, parameter validation, and intelligent dependency resolution as part of Tako's multi-agent architecture.

Group Owner (1 endpoint)

Also known as: group ownership
Operations: list
Methods: GET

📋 Endpoint Details
This entity category supports 1 endpoint with operations: list. Each endpoint includes comprehensive documentation, parameter validation, and intelligent dependency resolution as part of Tako's multi-agent architecture.

Group Rule (2 endpoints)

Also known as: dynamic group
Operations: list, get
Methods: GET

Log Stream (2 endpoints)

Also known as: log streaming
Operations: list, get
Methods: GET

Network Zone (2 endpoints)

Also known as: zone, ip zone
Operations: list, get
Methods: GET

Okta Application Settings (1 endpoint)

Also known as: first party app settings
Operations: get
Methods: GET

📋 Endpoint Details
This entity category supports 1 endpoint with operations: get. Each endpoint includes comprehensive documentation, parameter validation, and intelligent dependency resolution as part of Tako's multi-agent architecture.

Policy (7 endpoints)

Also known as: policies, sign on policy, password policy, mfa policy
Operations: list, get, list_apps, list_resources, get_resource_mapping, list_rules, get_rule
Methods: GET

📋 Endpoint Details
This entity category supports 7 endpoints with operations: list, get, list_apps, list_resources, get_resource_mapping, list_rules, get_rule. Each endpoint includes comprehensive documentation, parameter validation, and intelligent dependency resolution as part of Tako's multi-agent architecture.

Resource Set (8 endpoints)

Also known as: iam resource set
Operations: list, get, list_resources, get_resource, list_bindings, get_binding, list_binding_members, get_binding_member
Methods: GET

📋 Endpoint Details
This entity category supports 8 endpoints with operations: list, get, list_resources, get_resource, list_bindings, get_binding, list_binding_members, get_binding_member. Each endpoint includes comprehensive documentation, parameter validation, and intelligent dependency resolution as part of Tako's multi-agent architecture.

Role Assignment (17 endpoints)

Also known as: roles, permissions, admin role
Operations: list_users_with_roles, list_by_user, get_for_user, list_governance_sources_for_user_role, get_governance_source_for_user_role, list_governance_source_resources_for_user_role, list_app_targets_for_user_role, list_group_targets_for_user_role, get_role_targets_by_assignment_type, list_by_group, get_for_group, list_by_client, get_for_client, list_app_targets_for_group_role, list_group_targets_for_group_role, list_app_targets_for_client_role, list_group_targets_for_client_role
Methods: GET

📋 Endpoint Details
This entity category supports 17 endpoints with operations: list_users_with_roles, list_by_user, get_for_user, list_governance_sources_for_user_role, get_governance_source_for_user_role, list_governance_source_resources_for_user_role, list_app_targets_for_user_role, list_group_targets_for_user_role, get_role_targets_by_assignment_type, list_by_group, get_for_group, list_by_client, get_for_client, list_app_targets_for_group_role, list_group_targets_for_group_role, list_app_targets_for_client_role, list_group_targets_for_client_role. Each endpoint includes comprehensive documentation, parameter validation, and intelligent dependency resolution as part of Tako's multi-agent architecture.

System Log (1 endpoint)

Also known as: logs, audit logs, events
Operations: get
Methods: GET

User (16 endpoints)

Also known as: users, person, account
Operations: list, get, list_app_links, get_app_link, list_groups, list_assigned_roles, get_assigned_role, list_clients, get_client, list_grants_for_user_and_client, get_grant_for_user_and_client, list_refresh_tokens_for_user_and_client, get_refresh_token_for_user_and_client, list_sessions, get_session
Methods: GET

📋 Endpoint Details
This entity category supports 16 endpoints with operations: list, get, list_app_links, get_app_link, list_groups, list_assigned_roles, get_assigned_role, list_clients, get_client, list_grants_for_user_and_client, get_grant_for_user_and_client, list_refresh_tokens_for_user_and_client, get_refresh_token_for_user_and_client, list_sessions, get_session. Each endpoint includes comprehensive documentation, parameter validation, and intelligent dependency resolution as part of Tako's multi-agent architecture.

User Factor (3 endpoints)

Also known as: user mfa, user factor, user authenticator
Operations: list, get, list_security_questions
Methods: GET

📋 Endpoint Details
This entity category supports 3 endpoints with operations: list, get, list_security_questions. Each endpoint includes comprehensive documentation, parameter validation, and intelligent dependency resolution as part of Tako's multi-agent architecture.

User Type (2 endpoints)

Also known as: user profile type
Operations: list, get
Methods: GET

🔧 Technical Implementation

Multi-Agent Architecture

Tako's endpoint support is powered by a sophisticated 5-agent system:

Planning Agent: Analyzes queries and determines optimal endpoint selection
Execution Manager: Coordinates between SQL and API agents based on data availability
SQL Agent: Handles cached data queries for maximum performance
API Agent: Manages real-time Okta API calls with intelligent rate limiting
Results Formatter: Transforms raw data into actionable insights

Context Engineering

Each endpoint includes:

Automatic Variable Injection: Context-aware parameter detection
Dependency Resolution: Smart handling of related endpoint calls
Error Handling: Comprehensive validation and retry logic
Performance Optimization: Intelligent caching and filtering strategies

Security Framework

Read-Only Operations: All endpoints are GET-only for maximum security
Token Management: Secure handling of Okta API tokens
Rate Limiting: Intelligent throttling to prevent API abuse
Audit Logging: Comprehensive tracking of all API interactions

📖 Usage Examples

Basic Query

Show me all users in the Engineering group

Complex Analysis

List all applications assigned to users who have MFA disabled and are in high-privilege groups

Cross-Entity Relationships

Find all inactive users with application assignments and their last login dates

🚀 Getting Started

Ready to explore Tako's comprehensive Okta API coverage? Check out our main documentation for installation and setup instructions.

Key Benefits:

✅ Comprehensive Coverage: 107+ endpoints across 25+ entity categories
✅ Intelligent Orchestration: Multi-agent coordination for optimal performance
✅ Enterprise Security: Read-only operations with comprehensive audit trails
✅ Context-Aware: Advanced parameter injection and dependency resolution
✅ Performance Optimized: Smart caching and 99% token usage reduction

Last updated: August 2025 | Tako v1.0-beta