The whole API,
on one page.

Every operation the engine speaks, rendered from the production schema — 28 queries, 45 mutations. This is the functions half of AXUS ID; sign-in itself is standard OAuth2/OIDC, covered in the OAuth reference. Filter, expand, copy the signature. Permission contexts and declarations are explained in the permission guide; use the app publishing guide for validators.

Talk to it

Send JSON GraphQL over HTTPS with your app’s axus_access_token as the bearer — the only credential the engine accepts. It arrives inside the OAuth token response; browser apps can also go through the /oauth/graphql proxy instead. Endpoint behavior is covered in the OAuth reference.

Live endpoint

https://axusid.thewinelore.com/graphql

Example request

curl --request POST 'https://axusid.thewinelore.com/graphql' \
  --header 'Authorization: Bearer AXUS_ACCESS_TOKEN' \
  --header 'Content-Type: application/json' \
  --data '{"query":"{ checkPermission(auid: \"YOUR_AUID\", permission: \"identity.YOUR_AUID.grants.read\") { allowed reason } }"}'

The whole API,on one page.

Talk to it

Browse the schema

The whole API,
on one page.