GAUTH documentation

GAUTH is the Gumpworks authentication service. It gives your applications a single, reliable way to sign users in, manage accounts and issue access tokens.

Use it to add authentication to a new app without building an account system from scratch.

Start here

• Quickstart - create an account, register an app and issue your first token.
• Concepts - accounts, apps, users, tokens and scopes.
• Authentication - the token endpoint and every grant type.
• Management API - manage apps, users, keys and sessions.
• Account creation - create tenants and app users, pure API and URI style.
• Apps - register an app, configure redirects and rotate secrets.
• App users - create and manage the users of your app.
• Keys and rotation - issue, label, rotate and revoke credentials.
• OAuth flow - the browser authorization-code flow.
• Errors and limits - error codes, rate limits and retry guidance.
• Security - how to handle credentials safely.
• Agent skills - a machine-readable manual for agents.

Base URLs

This deployment is served at https://auth.gumpworks.com.

Two kinds of account

• A client account owns applications. You use it to register apps, manage their users and issue credentials.
• An app user belongs to one application. App users sign in through your app and receive a token scoped to their profile.

Copying these docs

Every page has a Copy page button that copies the raw Markdown. The raw file is also linked at the top of each page, so the docs work without JavaScript.

Each code block has its own copy button. The raw Markdown uses plain # headers, - bullets and indented code fences, with no bold or italic markers, so it pastes cleanly into an agent prompt or a terminal.