Clerk — API

Clerk Backend APIv2026-08-20 Read the vendor's spec ↗

259 endpoints
16 deprecated
7 versions archived since Aug 28, 2026
Last checked Oct 26, 2026

The Clerk REST Backend API, meant to be accessed by backend servers.

first call

$ curl "https://api.clerk.com/v1/jwks" \
  -H "Authorization: Bearer $TOKEN"

Set $TOKEN first, then paste.

Base URL: https://api.clerk.com/v1
Authenticate: Bearer token in the Authorization header Secret key, obtained under "API Keys" in the Clerk Dashboard.
Shape: GET83
POST97
PUT10
PATCH29
DELETE40

What it covers

Users 38 The user object represents a user that has successfully signed up to your application.
Billing 12 Billing-related endpoints for managing statements and payment attempts.
Directories 12 create, read, update, delete
Organizations 12 Organizations are used to group members under a common entity and provide shared access to resources.
Instance Settings 11 Modify the settings of your instance.
Scim Directories 10 create, read, update, delete
Machines 9 A Machine represents a machine/server/service which can be used in machine-to-machine authentication.
Api Keys 8 Endpoints for managing API Keys
Oauth Applications 8 OAuth applications contain data for clients using Clerk as an OAuth2 identity provider.
Sessions 8 The Session object is an abstraction over an HTTP session.
Email Addresses 7 A user can be associated with one or more email addresses, which allows them to be contacted via email.
Enterprise Connections 7 An Enterprise Connection holds configuration data required for facilitating an enterprise SSO flow between your Clerk instance and an identity provider.

30 more areas

Organization Invitations 7 Invite users to an organization.
Organization Roles 7 Manage custom roles in an organization.
Phone Numbers 7 A user can be associated with one or more phone numbers, which allows them to be contacted via SMS.
Role Sets 7 Role sets define collections of roles that can be assigned to organization members.
Allow List / Block List 6 Allow-lists and Block-lists allow you to control who can sign up or sign in to your application, by restricting access based on the user's email address or phone number.
Email & Sms Templates 6 Email & SMS templates allow you to customize the theming and wording of emails & SMS messages that are sent by your instance.
Organization Domains 6 Manage organization domains.
Organization Memberships 6 Manage member roles in an organization.
Waitlist Entries 6 Manage waitlist entries.
Invitations 5 Invitations allow you to invite someone to sign up to your application, via email.
Jwt Templates 5 JWT Templates allow you to generate custom authentication tokens tied to authenticated sessions, enabling you to integrate with third-party services.
Organization Permissions 5 Manage organization permissions that define what members can do within an organization.
Saml Connections 5 A SAML Connection holds configuration data required for facilitating a SAML SSO flow between your Clerk Instance (SP) and a particular SAML IdP.
Domains 4 Domains represent each instance's URLs and DNS setup.
M2m Tokens 4 Machine to Machine Tokens are used to manage authentication between Machines.
Redirect Urls 4 Redirect URLs are whitelisted URLs that facilitate secure authentication flows in native applications (e.g. React Native, Expo).
Beta Features 3 Modify instance settings that are currently in beta.
Clients 3 The Client object tracks sessions, as well as the state of any sign in and sign up attempts, for a given device.
Sso Bypass 3 The SSO bypass allowlist names users who may sign in with an email code when their enterprise identity provider is unreachable.
Webhooks 3 You can configure webhooks to be notified about various events that happen on your instance.
Actor Tokens 2 Allow your users to sign in on behalf of other users.
Admin Portal Link Tokens 2 create
Agent Tasks 2 Tasks that allow creating user sessions for agent-based interactions.
Sign Ups 2 Sign-up objects track the progress of a sign-up attempt and store any field collected from user input.
Sign In Tokens 2 Sign-in tokens are JWTs that can be used to sign in to an application without specifying any credentials.
Jwks 1 Retrieve the JSON Web Key Set which can be used to verify the token signatures of the instance.
Miscellaneous 1 Various endpoints that do not belong in any particular category.
Oauth Access Tokens 1 Endpoints for managing OAuth Access Tokens, which are credentials to access protected resources on behalf of a user.
Proxy Checks 1 Check if a user is using a proxy.
Testing Tokens 1 Tokens meant for use by end-to-end test suites in requests to the Frontend API, so as to bypass bot detection measures.

Open an endpoint for a runnable command, its inputs and what it returns.

Users 38

Billing 12

DELETE /billing/subscription_items/{subscription_item_id} Cancel a subscription item

Loading…
DELETE /billing/subscription_items/{subscription_item_id}/discounts/{discount_id} Remove a discount from a subscription item

Loading…
GET /billing/plans List all billing plans

Loading…
GET /billing/prices List all billing prices

Loading…
GET /billing/statements List all billing statements

Loading…
GET /billing/statements/{statementID} Retrieve a billing statement

Loading…
GET /billing/statements/{statementID}/payment_attempts List payment attempts for a billing statement

Loading…
GET /billing/subscription_items List all subscription items

Loading…
POST /billing/prices Create a custom billing price

Loading…
POST /billing/subscription_items/{subscription_item_id}/discounts Apply a discount to a subscription item

Loading…
POST /billing/subscription_items/{subscription_item_id}/extend_free_trial Extend free trial for a subscription item

Loading…
POST /billing/subscription_items/{subscription_item_id}/price_transition Create a price transition for a subscription item

Loading…

Directories 12

DELETE /directories/{directory_id} Delete a directory

Loading…
DELETE /directories/{directory_id}/group_role_mappings/{mapping_id} Delete a directory group role mapping

Loading…
GET /directories List all directories

Loading…
GET /directories/{directory_id} Retrieve a directory

Loading…
GET /directories/{directory_id}/group_role_mappings List directory group role mappings

Loading…
GET /directories/{directory_id}/groups/{group_id} Retrieve a directory group

Loading…
GET /directories/{directory_id}/groups/{group_id}/members List directory group members

Loading…
PATCH /directories/{directory_id} Update a directory

Loading…
POST /directories Create a directory

Loading…
POST /directories/{directory_id}/group_role_mappings Create a directory group role mapping

Loading…
POST /directories/{directory_id}/rotate_api_key Rotate a directory's API key

Loading…
PUT /directories/{directory_id}/group_role_mappings Replace directory group role mappings

Loading…

Organizations 12

DELETE /organizations/{organization_id} Delete an organization

Loading…
DELETE /organizations/{organization_id}/logo Delete the organization's logo.

Loading…
GET /organizations Get a list of organizations for an instance

Loading…
GET /organizations/{organization_id} Retrieve an organization by ID or slug

Loading…
GET /organizations/{organization_id}/billing/credits Retrieve an organization's credit balance

Loading…
GET /organizations/{organization_id}/billing/subscription Retrieve an organization's billing subscription

Loading…
PATCH /organizations/{organization_id} Update an organization

Loading…
PATCH /organizations/{organization_id}/metadata Merge and update metadata for an organization

Loading…
POST /organizations Create an organization

Loading…
POST /organizations/{organization_id}/billing/credits Adjust an organization's credit balance

Loading…
PUT /organizations/{organization_id}/logo Upload a logo for the organization

Loading…
PUT /organizations/{organization_id}/metadata Replace metadata for an organization

Loading…

Instance Settings 11

GET /instance Fetch the current instance

Loading…
GET /instance/communication Get instance communication settings

Loading…
GET /instance/oauth_application_settings Get OAuth application settings

Loading…
GET /instance/organization_settings Get instance organization settings

Loading…
GET /instance/protect Get instance protect settings

Loading…
PATCH /instance Update instance settings

Loading…
PATCH /instance/communication Update instance communication settings

Loading…
PATCH /instance/oauth_application_settings Update OAuth application settings

Loading…
PATCH /instance/organization_settings Update instance organization settings

Loading…
PATCH /instance/protect Update instance protect settings

Loading…
PATCH /instance/restrictions Update instance restrictions

Loading…

Scim Directories 10

DELETE /scim_directories/{scim_directory_id} Delete a directory

Loading…
DELETE /scim_directories/{scim_directory_id}/group_role_mappings/{mapping_id} Delete a SCIM group role mapping

Loading…
GET /scim_directories List all directories

Loading…
GET /scim_directories/{scim_directory_id} Retrieve a directory

Loading…
GET /scim_directories/{scim_directory_id}/group_role_mappings List SCIM group role mappings

Loading…
PATCH /scim_directories/{scim_directory_id} Update a directory

Loading…
POST /scim_directories Create a directory

Loading…
POST /scim_directories/{scim_directory_id}/group_role_mappings Create a SCIM group role mapping

Loading…
POST /scim_directories/{scim_directory_id}/rotate_api_key Rotate a directory's API key

Loading…
PUT /scim_directories/{scim_directory_id}/group_role_mappings Replace SCIM group role mappings

Loading…

Machines 9

DELETE /machines/{machine_id} Delete a machine

Loading…
DELETE /machines/{machine_id}/scopes/{other_machine_id} Delete a machine scope

Loading…
GET /machines Get a list of machines for an instance

Loading…
GET /machines/{machine_id} Retrieve a machine

Loading…
GET /machines/{machine_id}/secret_key Retrieve a machine secret key

Loading…
PATCH /machines/{machine_id} Update a machine

Loading…
POST /machines Create a machine

Loading…
POST /machines/{machine_id}/scopes Create a machine scope

Loading…
POST /machines/{machine_id}/secret_key/rotate Rotate a machine's secret key

Loading…

Api Keys 8

DELETE /api_keys/{apiKeyID} Delete an API Key

Loading…
GET /api_keys Get API Keys

Loading…
GET /api_keys/{apiKeyID} Get an API Key by ID

Loading…
GET /api_keys/{apiKeyID}/secret Get an API Key Secret

Loading…
PATCH /api_keys/{apiKeyID} Update an API Key

Loading…
POST /api_keys Create an API Key

Loading…
POST /api_keys/verify Verify an API Key

Loading…
POST /api_keys/{apiKeyID}/revoke Revoke an API Key

Loading…

Oauth Applications 8

DELETE /oauth_applications/{oauth_application_id} Delete an OAuth application

Loading…
GET /oauth_applications Get a list of OAuth applications for an instance

Loading…
GET /oauth_applications/{oauth_application_id} Retrieve an OAuth application by ID

Loading…
PATCH /oauth_applications/{oauth_application_id} Update an OAuth application

Loading…
POST /oauth_applications Create an OAuth application

Loading…
POST /oauth_applications/{oauth_application_id}/revoke_token Revoke an OAuth application token

Loading…
POST /oauth_applications/{oauth_application_id}/rotate_secret Rotate the client secret of the given OAuth application

Loading…
PUT /oauth_applications/{oauth_application_id}/logo Upload a logo for the OAuth application

Loading…

Sessions 8

GET /sessions List all sessions

Loading…
GET /sessions/{session_id} Retrieve a session

Loading…
GET /sessions/{session_id}/reverifications/{reverification_id} Retrieve a reverification

Loading…
POST /sessions Create a new active session

Loading…
POST /sessions/{session_id}/refresh Refresh a session

Loading…
POST /sessions/{session_id}/revoke Revoke a session

Loading…
POST /sessions/{session_id}/tokens Create a session token

Loading…
POST /sessions/{session_id}/tokens/{template_name} Create a session token from a JWT template

Loading…

Email Addresses 7

DELETE /email_addresses/{email_address_id} Delete an email address

Loading…
GET /email_addresses/{email_address_id} Retrieve an email address

Loading…
PATCH /email_addresses/{email_address_id} Update an email address

Loading…
POST /email_addresses Create an email address

Loading…
POST /email_addresses/{email_address_id}/attempt_verification Verify a code sent to an email address

Loading…
POST /email_addresses/{email_address_id}/prepare_verification Send a verification code to an email address

Loading…
PUT /users/{user_id}/email_address Replace a user's email address

Loading…

Enterprise Connections 7

DELETE /enterprise_connections/{enterprise_connection_id} Delete an enterprise connection

Loading…
GET /enterprise_connections List enterprise connections

Loading…
GET /enterprise_connections/{enterprise_connection_id} Retrieve an enterprise connection

Loading…
GET /enterprise_connections/{enterprise_connection_id}/test_runs List enterprise connection test runs

Loading…
PATCH /enterprise_connections/{enterprise_connection_id} Update an enterprise connection

Loading…
POST /enterprise_connections Create an enterprise connection

Loading…
POST /enterprise_connections/{enterprise_connection_id}/test_runs Create an enterprise connection test run

Loading…

Organization Invitations 7

GET /organization_invitations Get a list of organization invitations for the current instance

Loading…
GET /organizations/{organization_id}/invitations Get a list of organization invitations

Loading…
GET /organizations/{organization_id}/invitations/pending Get a list of pending organization invitations deprecated

Loading…
GET /organizations/{organization_id}/invitations/{invitation_id} Retrieve an organization invitation by ID

Loading…
POST /organizations/{organization_id}/invitations Create and send an organization invitation

Loading…
POST /organizations/{organization_id}/invitations/bulk Bulk create and send organization invitations

Loading…
POST /organizations/{organization_id}/invitations/{invitation_id}/revoke Revoke a pending organization invitation

Loading…

Organization Roles 7

DELETE /organization_roles/{organization_role_id} Delete an organization role

Loading…
DELETE /organization_roles/{organization_role_id}/permissions/{permission_id} Remove a permission from an organization role

Loading…
GET /organization_roles Get a list of organization roles

Loading…
GET /organization_roles/{organization_role_id} Retrieve an organization role

Loading…
PATCH /organization_roles/{organization_role_id} Update an organization role

Loading…
POST /organization_roles Create an organization role

Loading…
POST /organization_roles/{organization_role_id}/permissions/{permission_id} Assign a permission to an organization role

Loading…

Phone Numbers 7

DELETE /phone_numbers/{phone_number_id} Delete a phone number

Loading…
GET /phone_numbers/{phone_number_id} Retrieve a phone number

Loading…
PATCH /phone_numbers/{phone_number_id} Update a phone number

Loading…
POST /phone_numbers Create a phone number

Loading…
POST /phone_numbers/{phone_number_id}/attempt_verification Verify a code sent to a phone number

Loading…
POST /phone_numbers/{phone_number_id}/prepare_verification Send a verification code to a phone number

Loading…
PUT /users/{user_id}/phone_number Replace a user's phone number

Loading…

Role Sets 7

GET /role_sets Get a list of role sets

Loading…
GET /role_sets/{role_set_key_or_id} Retrieve a role set

Loading…
PATCH /role_sets/{role_set_key_or_id} Update a role set

Loading…
POST /role_sets Create a role set

Loading…
POST /role_sets/{role_set_key_or_id}/replace Replace a role set

Loading…
POST /role_sets/{role_set_key_or_id}/roles Add roles to a role set

Loading…
POST /role_sets/{role_set_key_or_id}/roles/replace Replace a role in a role set

Loading…

Allow List / Block List 6

DELETE /allowlist_identifiers/{identifier_id} Delete identifier from allow-list

Loading…
DELETE /blocklist_identifiers/{identifier_id} Delete identifier from block-list

Loading…
GET /allowlist_identifiers List all identifiers on the allow-list

Loading…
GET /blocklist_identifiers List all identifiers on the block-list

Loading…
POST /allowlist_identifiers Add identifier to the allow-list

Loading…
POST /blocklist_identifiers Add identifier to the block-list

Loading…

Email & Sms Templates 6

GET /templates/{template_type} List all templates deprecated

Loading…
GET /templates/{template_type}/{slug} Retrieve a template deprecated

Loading…
POST /templates/{template_type}/{slug}/preview Preview changes to a template deprecated

Loading…
POST /templates/{template_type}/{slug}/revert Revert a template deprecated

Loading…
POST /templates/{template_type}/{slug}/toggle_delivery Toggle the delivery by Clerk for a template of a given type and slug deprecated

Loading…
PUT /templates/{template_type}/{slug} Update a template for a given type and slug deprecated

Loading…

Organization Domains 6

DELETE /organizations/{organization_id}/domains/{domain_id} Remove a domain from an organization.

Loading…
GET /organization_domains List all organization domains

Loading…
GET /organizations/{organization_id}/domains Get a list of all domains of an organization.

Loading…
PATCH /organizations/{organization_id}/domains/{domain_id} Update an organization domain.

Loading…
POST /organizations/{organization_id}/domains Create a new organization domain.

Loading…
POST /organizations/{organization_id}/domains/{domain_id}/verify_ownership Mark an organization domain's ownership as verified

Loading…

Organization Memberships 6

DELETE /organizations/{organization_id}/memberships/{user_id} Remove a member from an organization

Loading…
GET /organization_memberships Get a list of all organization memberships within an instance.

Loading…
GET /organizations/{organization_id}/memberships Get a list of all members of an organization

Loading…
PATCH /organizations/{organization_id}/memberships/{user_id} Update an organization membership

Loading…
PATCH /organizations/{organization_id}/memberships/{user_id}/metadata Merge and update organization membership metadata

Loading…
POST /organizations/{organization_id}/memberships Create a new organization membership

Loading…

Waitlist Entries 6

DELETE /waitlist_entries/{waitlist_entry_id} Delete a pending waitlist entry

Loading…
GET /waitlist_entries List all waitlist entries

Loading…
POST /waitlist_entries Create a waitlist entry

Loading…
POST /waitlist_entries/bulk Create multiple waitlist entries

Loading…
POST /waitlist_entries/{waitlist_entry_id}/invite Invite a waitlist entry

Loading…
POST /waitlist_entries/{waitlist_entry_id}/reject Reject a waitlist entry

Loading…

Invitations 5

DELETE /invitations/{invitation_id} Delete an invitation

Loading…
GET /invitations List all invitations

Loading…
POST /invitations Create an invitation

Loading…
POST /invitations/bulk Create multiple invitations

Loading…
POST /invitations/{invitation_id}/revoke Revokes an invitation

Loading…

Jwt Templates 5

DELETE /jwt_templates/{template_id} Delete a Template

Loading…
GET /jwt_templates List all templates

Loading…
GET /jwt_templates/{template_id} Retrieve a template

Loading…
PATCH /jwt_templates/{template_id} Update a JWT template

Loading…
POST /jwt_templates Create a JWT template

Loading…

Organization Permissions 5

DELETE /organization_permissions/{permission_id} Delete an organization permission

Loading…
GET /organization_permissions Get a list of all organization permissions

Loading…
GET /organization_permissions/{permission_id} Get an organization permission

Loading…
PATCH /organization_permissions/{permission_id} Update an organization permission

Loading…
POST /organization_permissions Create a new organization permission

Loading…

Saml Connections 5

DELETE /saml_connections/{saml_connection_id} Delete a SAML Connection deprecated

Loading…
GET /saml_connections Get a list of SAML Connections for an instance deprecated

Loading…
GET /saml_connections/{saml_connection_id} Retrieve a SAML Connection by ID deprecated

Loading…
PATCH /saml_connections/{saml_connection_id} Update a SAML Connection deprecated

Loading…
POST /saml_connections Create a SAML Connection deprecated

Loading…

Domains 4

DELETE /domains/{domain_id} Delete a domain

Loading…
GET /domains List all instance domains

Loading…
PATCH /domains/{domain_id} Update a domain

Loading…
POST /domains Add a domain

Loading…

M2m Tokens 4

GET /m2m_tokens Get M2M Tokens

Loading…
POST /m2m_tokens Create a M2M Token

Loading…
POST /m2m_tokens/verify Verify a M2M Token

Loading…
POST /m2m_tokens/{m2m_token_id}/revoke Revoke a M2M Token

Loading…

Redirect Urls 4

DELETE /redirect_urls/{id} Delete a redirect URL

Loading…
GET /redirect_urls List all redirect URLs

Loading…
GET /redirect_urls/{id} Retrieve a redirect URL

Loading…
POST /redirect_urls Create a redirect URL

Loading…

Beta Features 3

PATCH /beta_features/instance_settings Update instance settings

Loading…
POST /instance/change_domain Update production instance domain

Loading…
PUT /beta_features/domain Update production instance domain deprecated

Loading…

Clients 3

GET /clients List all clients deprecated

Loading…
GET /clients/{client_id} Get a client

Loading…
POST /clients/verify Verify a client

Loading…

Sso Bypass 3

DELETE /sso_bypass_allowlist_users/{userID} Remove a user from the SSO bypass allowlist

Loading…
GET /sso_bypass_allowlist_users List the SSO bypass allowlist

Loading…
POST /sso_bypass_allowlist_users Add a user to the SSO bypass allowlist

Loading…

Webhooks 3

DELETE /webhooks/svix Delete a Svix app

Loading…
POST /webhooks/svix Create a Svix app

Loading…
POST /webhooks/svix_url Create a Svix Dashboard URL

Loading…

Actor Tokens 2

POST /actor_tokens Create actor token

Loading…
POST /actor_tokens/{actor_token_id}/revoke Revoke actor token

Loading…

Admin Portal Link Tokens 2

POST /admin_portal_link_tokens Create an Admin Portal Link Token

Loading…
POST /admin_portal_link_tokens/{adminPortalLinkTokenID}/revoke Revoke an Admin Portal Link Token

Loading…

Agent Tasks 2

POST /agents/tasks Create agent task

Loading…
POST /agents/tasks/{agent_task_id}/revoke Revoke agent task

Loading…

Sign Ups 2

GET /sign_ups/{id} Retrieve a sign-up by ID

Loading…
PATCH /sign_ups/{id} Update a sign-up

Loading…

Jwks 1

GET /jwks Retrieve the JSON Web Key Set of the instance

Loading…

Miscellaneous 1

GET /public/interstitial Returns the markup for the interstitial page

Loading…

Oauth Access Tokens 1

POST /oauth_applications/access_tokens/verify Verify an OAuth Access Token

Loading…

Proxy Checks 1

POST /proxy_checks Verify the proxy configuration for your domain

Loading…

Testing Tokens 1

POST /testing_tokens Retrieve a new testing token

Loading…

Change log

2026-10-26
- +GET /directories/{directory_id}/groups/{group_id}
- +GET /directories/{directory_id}/groups/{group_id}/members
- +POST /users/{user_id}/merge
2026-10-05
- +DELETE /invitations/{invitation_id}
- +DELETE /sso_bypass_allowlist_users/{userID}
- +GET /sso_bypass_allowlist_users
- +POST /sso_bypass_allowlist_users
2026-09-21
- +GET /sessions/{session_id}/reverifications/{reverification_id}
2026-09-10
- +DELETE /users/{user_id}/biometric_credentials/{biometric_credential_id}
- +GET /users/{user_id}/biometric_credentials
- ⚠DELETE /users/{user_id}/trusted_devices/{trusted_device_id}
- ⚠GET /users/{user_id}/trusted_devices