<SYSTEM>API-Edge-Endpoints: API endpoints reference for Aembit Edge</SYSTEM>

# Aembit Edge API - API Endpoints

> API endpoints reference for Aembit Edge API

# Aembit Edge API - API Endpoints [Section titled “Aembit Edge API - API Endpoints”](#aembit-edge-api---api-endpoints) **Version:** v1 **Base URL:** https\://{tenant}.aembit.io ## Auth [Section titled “Auth”](#auth) ### POST /edge/v1/auth [Section titled “POST /edge/v1/auth”](#post-edgev1auth) **Summary:** Authenticate to the Edge API **Description:** Bootstraps a session with the Aembit Edge API. This endpoint authenticates a Client Workload by \nverifying its identity against a specific Aembit Trust Provider. The Trust Provider must be configured in the \nAembit Console to match the environment where the workload is running. Supported Trust Provider types include\nAWS Metadata Service, AWS Role, GCP Identity Token, GitHub Action ID Token, GitLab Job ID Token, Kubernetes Service Account,\nOIDC ID Token, and Terraform Cloud Identity Token. **Operation ID:** edge-api-auth **Parameters:** * **X-Aembit-ResourceSet** (undefined) *(optional)*: any **Request Body:** * Content-Type: application/json * Schema: any **Responses:** * **‘200’**: Successfully retrieved access token * Content-Type: application/json * Schema: any * **‘400’**: Invalid request or missing parameters * Content-Type: application/json * Schema: any * **‘401’**: Unauthorized * Content-Type: application/json * Schema: any * **‘429’**: Too many authentication requests * Content-Type: application/json * Schema: any * **‘500’**: Internal server error * Content-Type: application/json * Schema: any **cURL Example:** 
```bash
curl -X POST \
  -H "Authorization: Bearer your-access-token" -H "Content-Type: application/json" \
  -d '{"example": "data"}' \
  "https://your-tenant.aembit.io/edge/v1/auth"
```
 ## Credentials [Section titled “Credentials”](#credentials) ### POST /edge/v1/credentials [Section titled “POST /edge/v1/credentials”](#post-edgev1credentials) **Summary:** Get credentials for a Client Workload **Description:** Retrieves credentials for a Client Workload based on configured Access Policies **Operation ID:** edge-api-get-credentials **Parameters:** * **X-Aembit-ResourceSet** (undefined) *(optional)*: any **Request Body:** * Content-Type: application/json * Schema: any **Responses:** * **‘200’**: Credentials returned for specified Client Workload * Content-Type: application/json * Schema: any * **‘400’**: Invalid request or missing parameters * Content-Type: application/json * Schema: any * **‘401’**: Unauthorized access * Content-Type: application/json * Schema: any * **‘403’**: Not applicable for this request * Content-Type: application/json * Schema: any * **‘404’**: No client/server workload or access policy was found. Response will be of type ApiCredentialsResponse with credential type set to Unknown * Content-Type: application/json * Schema: any * **‘429’**: Too many credential requests * Content-Type: application/json * Schema: any * **‘500’**: Internal server error * Content-Type: application/json * Schema: any **cURL Example:** 
```bash
curl -X POST \
  -H "Content-Type: application/json" \
  -d '{"example": "data"}' \
  "https://your-tenant.aembit.io/edge/v1/credentials"
```