Clerk — API

Clerk Backend APIv2026-05-12 Read the vendor's spec ↗

256 endpoints
16 deprecated
5 versions archived since Aug 28, 2026
Last checked Oct 16, 2026

The Clerk REST Backend API, meant to be accessed by backend servers.

first call

$ curl "https://api.clerk.com/v1/jwks" \
  -H "Authorization: Bearer $TOKEN"

Set $TOKEN first, then paste.

Base URL: https://api.clerk.com/v1
Authenticate: Bearer token in the Authorization header Secret key, obtained under "API Keys" in the Clerk Dashboard.
Shape: GET81
POST96
PUT10
PATCH29
DELETE40

What it covers

Users 37 The user object represents a user that has successfully signed up to your application.
Billing 12 Billing-related endpoints for managing statements and payment attempts.
Organizations 12 Organizations are used to group members under a common entity and provide shared access to resources.
Instance Settings 11 Modify the settings of your instance.
Directories 10 create, read, update, delete
Scim Directories 10 create, read, update, delete
Machines 9 A Machine represents a machine/server/service which can be used in machine-to-machine authentication.
Api Keys 8 Endpoints for managing API Keys
Oauth Applications 8 OAuth applications contain data for clients using Clerk as an OAuth2 identity provider.
Sessions 8 The Session object is an abstraction over an HTTP session.
Email Addresses 7 A user can be associated with one or more email addresses, which allows them to be contacted via email.
Enterprise Connections 7 An Enterprise Connection holds configuration data required for facilitating an enterprise SSO flow between your Clerk instance and an identity provider.

30 more areas

Organization Invitations 7 Invite users to an organization.
Organization Roles 7 Manage custom roles in an organization.
Phone Numbers 7 A user can be associated with one or more phone numbers, which allows them to be contacted via SMS.
Role Sets 7 Role sets define collections of roles that can be assigned to organization members.
Allow List / Block List 6 Allow-lists and Block-lists allow you to control who can sign up or sign in to your application, by restricting access based on the user's email address or phone number.
Email & Sms Templates 6 Email & SMS templates allow you to customize the theming and wording of emails & SMS messages that are sent by your instance.
Organization Domains 6 Manage organization domains.
Organization Memberships 6 Manage member roles in an organization.
Waitlist Entries 6 Manage waitlist entries.
Invitations 5 Invitations allow you to invite someone to sign up to your application, via email.
Jwt Templates 5 JWT Templates allow you to generate custom authentication tokens tied to authenticated sessions, enabling you to integrate with third-party services.
Organization Permissions 5 Manage organization permissions that define what members can do within an organization.
Saml Connections 5 A SAML Connection holds configuration data required for facilitating a SAML SSO flow between your Clerk Instance (SP) and a particular SAML IdP.
Domains 4 Domains represent each instance's URLs and DNS setup.
M2m Tokens 4 Machine to Machine Tokens are used to manage authentication between Machines.
Redirect Urls 4 Redirect URLs are whitelisted URLs that facilitate secure authentication flows in native applications (e.g. React Native, Expo).
Beta Features 3 Modify instance settings that are currently in beta.
Clients 3 The Client object tracks sessions, as well as the state of any sign in and sign up attempts, for a given device.
Sso Bypass 3 The SSO bypass allowlist names users who may sign in with an email code when their enterprise identity provider is unreachable.
Webhooks 3 You can configure webhooks to be notified about various events that happen on your instance.
Actor Tokens 2 Allow your users to sign in on behalf of other users.
Admin Portal Link Tokens 2 create
Agent Tasks 2 Tasks that allow creating user sessions for agent-based interactions.
Sign Ups 2 Sign-up objects track the progress of a sign-up attempt and store any field collected from user input.
Sign In Tokens 2 Sign-in tokens are JWTs that can be used to sign in to an application without specifying any credentials.
Jwks 1 Retrieve the JSON Web Key Set which can be used to verify the token signatures of the instance.
Miscellaneous 1 Various endpoints that do not belong in any particular category.
Oauth Access Tokens 1 Endpoints for managing OAuth Access Tokens, which are credentials to access protected resources on behalf of a user.
Proxy Checks 1 Check if a user is using a proxy.
Testing Tokens 1 Tokens meant for use by end-to-end test suites in requests to the Frontend API, so as to bypass bot detection measures.

Open an endpoint for a runnable command, its inputs and what it returns.

Users 37

Billing 12

DELETE /billing/subscription_items/{subscription_item_id} Cancel a subscription item

Loading…
DELETE /billing/subscription_items/{subscription_item_id}/discounts/{discount_id} Remove a discount from a subscription item

Loading…
GET /billing/plans List all billing plans

Loading…
GET /billing/prices List all billing prices

Loading…
GET /billing/statements List all billing statements

Loading…
GET /billing/statements/{statementID} Retrieve a billing statement

Loading…
GET /billing/statements/{statementID}/payment_attempts List payment attempts for a billing statement

Loading…
GET /billing/subscription_items List all subscription items

Loading…
POST /billing/prices Create a custom billing price

Loading…
POST /billing/subscription_items/{subscription_item_id}/discounts Apply a discount to a subscription item

Loading…
POST /billing/subscription_items/{subscription_item_id}/extend_free_trial Extend free trial for a subscription item

Loading…
POST /billing/subscription_items/{subscription_item_id}/price_transition Create a price transition for a subscription item

Loading…

Organizations 12

DELETE /organizations/{organization_id} Delete an organization

Loading…
DELETE /organizations/{organization_id}/logo Delete the organization's logo.

Loading…
GET /organizations Get a list of organizations for an instance

Loading…
GET /organizations/{organization_id} Retrieve an organization by ID or slug

Loading…
GET /organizations/{organization_id}/billing/credits Retrieve an organization's credit balance

Loading…
GET /organizations/{organization_id}/billing/subscription Retrieve an organization's billing subscription

Loading…
PATCH /organizations/{organization_id} Update an organization

Loading…
PATCH /organizations/{organization_id}/metadata Merge and update metadata for an organization

Loading…
POST /organizations Create an organization

Loading…
POST /organizations/{organization_id}/billing/credits Adjust an organization's credit balance

Loading…
PUT /organizations/{organization_id}/logo Upload a logo for the organization

Loading…
PUT /organizations/{organization_id}/metadata Replace metadata for an organization

Loading…

Instance Settings 11

GET /instance Fetch the current instance

Loading…
GET /instance/communication Get instance communication settings

Loading…
GET /instance/oauth_application_settings Get OAuth application settings

Loading…
GET /instance/organization_settings Get instance organization settings

Loading…
GET /instance/protect Get instance protect settings

Loading…
PATCH /instance Update instance settings

Loading…
PATCH /instance/communication Update instance communication settings

Loading…
PATCH /instance/oauth_application_settings Update OAuth application settings

Loading…
PATCH /instance/organization_settings Update instance organization settings

Loading…
PATCH /instance/protect Update instance protect settings

Loading…
PATCH /instance/restrictions Update instance restrictions

Loading…

Directories 10

DELETE /directories/{directory_id} Delete a directory

Loading…
DELETE /directories/{directory_id}/group_role_mappings/{mapping_id} Delete a directory group role mapping

Loading…
GET /directories List all directories

Loading…
GET /directories/{directory_id} Retrieve a directory

Loading…
GET /directories/{directory_id}/group_role_mappings List directory group role mappings

Loading…
PATCH /directories/{directory_id} Update a directory

Loading…
POST /directories Create a directory

Loading…
POST /directories/{directory_id}/group_role_mappings Create a directory group role mapping

Loading…
POST /directories/{directory_id}/rotate_api_key Rotate a directory's API key

Loading…
PUT /directories/{directory_id}/group_role_mappings Replace directory group role mappings

Loading…

Scim Directories 10

DELETE /scim_directories/{scim_directory_id} Delete a directory

Loading…
DELETE /scim_directories/{scim_directory_id}/group_role_mappings/{mapping_id} Delete a SCIM group role mapping

Loading…
GET /scim_directories List all directories

Loading…
GET /scim_directories/{scim_directory_id} Retrieve a directory

Loading…
GET /scim_directories/{scim_directory_id}/group_role_mappings List SCIM group role mappings

Loading…
PATCH /scim_directories/{scim_directory_id} Update a directory

Loading…
POST /scim_directories Create a directory

Loading…
POST /scim_directories/{scim_directory_id}/group_role_mappings Create a SCIM group role mapping

Loading…
POST /scim_directories/{scim_directory_id}/rotate_api_key Rotate a directory's API key

Loading…
PUT /scim_directories/{scim_directory_id}/group_role_mappings Replace SCIM group role mappings

Loading…

Machines 9

DELETE /machines/{machine_id} Delete a machine

Loading…
DELETE /machines/{machine_id}/scopes/{other_machine_id} Delete a machine scope

Loading…
GET /machines Get a list of machines for an instance

Loading…
GET /machines/{machine_id} Retrieve a machine

Loading…
GET /machines/{machine_id}/secret_key Retrieve a machine secret key

Loading…
PATCH /machines/{machine_id} Update a machine

Loading…
POST /machines Create a machine

Loading…
POST /machines/{machine_id}/scopes Create a machine scope

Loading…
POST /machines/{machine_id}/secret_key/rotate Rotate a machine's secret key

Loading…

Api Keys 8

DELETE /api_keys/{apiKeyID} Delete an API Key

Loading…
GET /api_keys Get API Keys

Loading…
GET /api_keys/{apiKeyID} Get an API Key by ID

Loading…
GET /api_keys/{apiKeyID}/secret Get an API Key Secret

Loading…
PATCH /api_keys/{apiKeyID} Update an API Key

Loading…
POST /api_keys Create an API Key

Loading…
POST /api_keys/verify Verify an API Key

Loading…
POST /api_keys/{apiKeyID}/revoke Revoke an API Key

Loading…

Oauth Applications 8

DELETE /oauth_applications/{oauth_application_id} Delete an OAuth application

Loading…
GET /oauth_applications Get a list of OAuth applications for an instance

Loading…
GET /oauth_applications/{oauth_application_id} Retrieve an OAuth application by ID

Loading…
PATCH /oauth_applications/{oauth_application_id} Update an OAuth application

Loading…
POST /oauth_applications Create an OAuth application

Loading…
POST /oauth_applications/{oauth_application_id}/revoke_token Revoke an OAuth application token

Loading…
POST /oauth_applications/{oauth_application_id}/rotate_secret Rotate the client secret of the given OAuth application

Loading…
PUT /oauth_applications/{oauth_application_id}/logo Upload a logo for the OAuth application

Loading…

Sessions 8

GET /sessions List all sessions

Loading…
GET /sessions/{session_id} Retrieve a session

Loading…
GET /sessions/{session_id}/reverifications/{reverification_id} Retrieve a reverification

Loading…
POST /sessions Create a new active session

Loading…
POST /sessions/{session_id}/refresh Refresh a session

Loading…
POST /sessions/{session_id}/revoke Revoke a session

Loading…
POST /sessions/{session_id}/tokens Create a session token

Loading…
POST /sessions/{session_id}/tokens/{template_name} Create a session token from a JWT template

Loading…

Email Addresses 7

DELETE /email_addresses/{email_address_id} Delete an email address

Loading…
GET /email_addresses/{email_address_id} Retrieve an email address

Loading…
PATCH /email_addresses/{email_address_id} Update an email address

Loading…
POST /email_addresses Create an email address

Loading…
POST /email_addresses/{email_address_id}/attempt_verification Verify a code sent to an email address

Loading…
POST /email_addresses/{email_address_id}/prepare_verification Send a verification code to an email address

Loading…
PUT /users/{user_id}/email_address Replace a user's email address

Loading…

Enterprise Connections 7

DELETE /enterprise_connections/{enterprise_connection_id} Delete an enterprise connection

Loading…
GET /enterprise_connections List enterprise connections

Loading…
GET /enterprise_connections/{enterprise_connection_id} Retrieve an enterprise connection

Loading…
GET /enterprise_connections/{enterprise_connection_id}/test_runs List enterprise connection test runs

Loading…
PATCH /enterprise_connections/{enterprise_connection_id} Update an enterprise connection

Loading…
POST /enterprise_connections Create an enterprise connection

Loading…
POST /enterprise_connections/{enterprise_connection_id}/test_runs Create an enterprise connection test run

Loading…

Organization Invitations 7

GET /organization_invitations Get a list of organization invitations for the current instance

Loading…
GET /organizations/{organization_id}/invitations Get a list of organization invitations

Loading…
GET /organizations/{organization_id}/invitations/pending Get a list of pending organization invitations deprecated

Loading…
GET /organizations/{organization_id}/invitations/{invitation_id} Retrieve an organization invitation by ID

Loading…
POST /organizations/{organization_id}/invitations Create and send an organization invitation

Loading…
POST /organizations/{organization_id}/invitations/bulk Bulk create and send organization invitations

Loading…
POST /organizations/{organization_id}/invitations/{invitation_id}/revoke Revoke a pending organization invitation

Loading…

Organization Roles 7

DELETE /organization_roles/{organization_role_id} Delete an organization role

Loading…
DELETE /organization_roles/{organization_role_id}/permissions/{permission_id} Remove a permission from an organization role

Loading…
GET /organization_roles Get a list of organization roles

Loading…
GET /organization_roles/{organization_role_id} Retrieve an organization role

Loading…
PATCH /organization_roles/{organization_role_id} Update an organization role

Loading…
POST /organization_roles Create an organization role

Loading…
POST /organization_roles/{organization_role_id}/permissions/{permission_id} Assign a permission to an organization role

Loading…

Phone Numbers 7

DELETE /phone_numbers/{phone_number_id} Delete a phone number

Loading…
GET /phone_numbers/{phone_number_id} Retrieve a phone number

Loading…
PATCH /phone_numbers/{phone_number_id} Update a phone number

Loading…
POST /phone_numbers Create a phone number

Loading…
POST /phone_numbers/{phone_number_id}/attempt_verification Verify a code sent to a phone number

Loading…
POST /phone_numbers/{phone_number_id}/prepare_verification Send a verification code to a phone number

Loading…
PUT /users/{user_id}/phone_number Replace a user's phone number

Loading…

Role Sets 7

GET /role_sets Get a list of role sets

Loading…
GET /role_sets/{role_set_key_or_id} Retrieve a role set

Loading…
PATCH /role_sets/{role_set_key_or_id} Update a role set

Loading…
POST /role_sets Create a role set

Loading…
POST /role_sets/{role_set_key_or_id}/replace Replace a role set

Loading…
POST /role_sets/{role_set_key_or_id}/roles Add roles to a role set

Loading…
POST /role_sets/{role_set_key_or_id}/roles/replace Replace a role in a role set

Loading…

Allow List / Block List 6

DELETE /allowlist_identifiers/{identifier_id} Delete identifier from allow-list

Loading…
DELETE /blocklist_identifiers/{identifier_id} Delete identifier from block-list

Loading…
GET /allowlist_identifiers List all identifiers on the allow-list

Loading…
GET /blocklist_identifiers List all identifiers on the block-list

Loading…
POST /allowlist_identifiers Add identifier to the allow-list

Loading…
POST /blocklist_identifiers Add identifier to the block-list

Loading…

Email & Sms Templates 6

GET /templates/{template_type} List all templates deprecated

Loading…
GET /templates/{template_type}/{slug} Retrieve a template deprecated

Loading…
POST /templates/{template_type}/{slug}/preview Preview changes to a template deprecated

Loading…
POST /templates/{template_type}/{slug}/revert Revert a template deprecated

Loading…
POST /templates/{template_type}/{slug}/toggle_delivery Toggle the delivery by Clerk for a template of a given type and slug deprecated

Loading…
PUT /templates/{template_type}/{slug} Update a template for a given type and slug deprecated

Loading…

Organization Domains 6

DELETE /organizations/{organization_id}/domains/{domain_id} Remove a domain from an organization.

Loading…
GET /organization_domains List all organization domains

Loading…
GET /organizations/{organization_id}/domains Get a list of all domains of an organization.

Loading…
PATCH /organizations/{organization_id}/domains/{domain_id} Update an organization domain.

Loading…
POST /organizations/{organization_id}/domains Create a new organization domain.

Loading…
POST /organizations/{organization_id}/domains/{domain_id}/verify_ownership Mark an organization domain's ownership as verified

Loading…

Organization Memberships 6

DELETE /organizations/{organization_id}/memberships/{user_id} Remove a member from an organization

Loading…
GET /organization_memberships Get a list of all organization memberships within an instance.

Loading…
GET /organizations/{organization_id}/memberships Get a list of all members of an organization

Loading…
PATCH /organizations/{organization_id}/memberships/{user_id} Update an organization membership

Loading…
PATCH /organizations/{organization_id}/memberships/{user_id}/metadata Merge and update organization membership metadata

Loading…
POST /organizations/{organization_id}/memberships Create a new organization membership

Loading…

Waitlist Entries 6

DELETE /waitlist_entries/{waitlist_entry_id} Delete a pending waitlist entry

Loading…
GET /waitlist_entries List all waitlist entries

Loading…
POST /waitlist_entries Create a waitlist entry

Loading…
POST /waitlist_entries/bulk Create multiple waitlist entries

Loading…
POST /waitlist_entries/{waitlist_entry_id}/invite Invite a waitlist entry

Loading…
POST /waitlist_entries/{waitlist_entry_id}/reject Reject a waitlist entry

Loading…

Invitations 5

DELETE /invitations/{invitation_id} Delete an invitation

Loading…
GET /invitations List all invitations

Loading…
POST /invitations Create an invitation

Loading…
POST /invitations/bulk Create multiple invitations

Loading…
POST /invitations/{invitation_id}/revoke Revokes an invitation

Loading…

Jwt Templates 5

DELETE /jwt_templates/{template_id} Delete a Template

Loading…
GET /jwt_templates List all templates

Loading…
GET /jwt_templates/{template_id} Retrieve a template

Loading…
PATCH /jwt_templates/{template_id} Update a JWT template

Loading…
POST /jwt_templates Create a JWT template

Loading…

Organization Permissions 5

DELETE /organization_permissions/{permission_id} Delete an organization permission

Loading…
GET /organization_permissions Get a list of all organization permissions

Loading…
GET /organization_permissions/{permission_id} Get an organization permission

Loading…
PATCH /organization_permissions/{permission_id} Update an organization permission

Loading…
POST /organization_permissions Create a new organization permission

Loading…

Saml Connections 5

DELETE /saml_connections/{saml_connection_id} Delete a SAML Connection deprecated

Loading…
GET /saml_connections Get a list of SAML Connections for an instance deprecated

Loading…
GET /saml_connections/{saml_connection_id} Retrieve a SAML Connection by ID deprecated

Loading…
PATCH /saml_connections/{saml_connection_id} Update a SAML Connection deprecated

Loading…
POST /saml_connections Create a SAML Connection deprecated

Loading…

Domains 4

DELETE /domains/{domain_id} Delete a domain

Loading…
GET /domains List all instance domains

Loading…
PATCH /domains/{domain_id} Update a domain

Loading…
POST /domains Add a domain

Loading…

M2m Tokens 4

GET /m2m_tokens Get M2M Tokens

Loading…
POST /m2m_tokens Create a M2M Token

Loading…
POST /m2m_tokens/verify Verify a M2M Token

Loading…
POST /m2m_tokens/{m2m_token_id}/revoke Revoke a M2M Token

Loading…

Redirect Urls 4

DELETE /redirect_urls/{id} Delete a redirect URL

Loading…
GET /redirect_urls List all redirect URLs

Loading…
GET /redirect_urls/{id} Retrieve a redirect URL

Loading…
POST /redirect_urls Create a redirect URL

Loading…

Beta Features 3

PATCH /beta_features/instance_settings Update instance settings

Loading…
POST /instance/change_domain Update production instance domain

Loading…
PUT /beta_features/domain Update production instance domain deprecated

Loading…

Clients 3

GET /clients List all clients deprecated

Loading…
GET /clients/{client_id} Get a client

Loading…
POST /clients/verify Verify a client

Loading…

Sso Bypass 3

DELETE /sso_bypass_allowlist_users/{userID} Remove a user from the SSO bypass allowlist

Loading…
GET /sso_bypass_allowlist_users List the SSO bypass allowlist

Loading…
POST /sso_bypass_allowlist_users Add a user to the SSO bypass allowlist

Loading…

Webhooks 3

DELETE /webhooks/svix Delete a Svix app

Loading…
POST /webhooks/svix Create a Svix app

Loading…
POST /webhooks/svix_url Create a Svix Dashboard URL

Loading…

Actor Tokens 2

POST /actor_tokens Create actor token

Loading…
POST /actor_tokens/{actor_token_id}/revoke Revoke actor token

Loading…

Admin Portal Link Tokens 2

POST /admin_portal_link_tokens Create an Admin Portal Link Token

Loading…
POST /admin_portal_link_tokens/{adminPortalLinkTokenID}/revoke Revoke an Admin Portal Link Token

Loading…

Agent Tasks 2

POST /agents/tasks Create agent task

Loading…
POST /agents/tasks/{agent_task_id}/revoke Revoke agent task

Loading…

Sign Ups 2

GET /sign_ups/{id} Retrieve a sign-up by ID

Loading…
PATCH /sign_ups/{id} Update a sign-up

Loading…

Jwks 1

GET /jwks Retrieve the JSON Web Key Set of the instance

Loading…

Miscellaneous 1

GET /public/interstitial Returns the markup for the interstitial page

Loading…

Oauth Access Tokens 1

POST /oauth_applications/access_tokens/verify Verify an OAuth Access Token

Loading…

Proxy Checks 1

POST /proxy_checks Verify the proxy configuration for your domain

Loading…

Testing Tokens 1

POST /testing_tokens Retrieve a new testing token

Loading…

Change log

2026-10-05
- +DELETE /invitations/{invitation_id}
- +DELETE /sso_bypass_allowlist_users/{userID}
- +GET /sso_bypass_allowlist_users
- +POST /sso_bypass_allowlist_users
2026-09-21
- +GET /sessions/{session_id}/reverifications/{reverification_id}
2026-09-10
- +DELETE /users/{user_id}/biometric_credentials/{biometric_credential_id}
- +GET /users/{user_id}/biometric_credentials
- ⚠DELETE /users/{user_id}/trusted_devices/{trusted_device_id}
- ⚠GET /users/{user_id}/trusted_devices