API Reference

This section provides the complete API reference for Hydden.Control. All endpoints use JSON for request and response bodies and require authentication unless otherwise noted.

Base URL

https://{your-tenant}.hydden.io/api/v1

Authentication

All API requests require a valid Bearer token in the Authorization header:

Authorization: Bearer {access_token}

Available Endpoints

Identity Data

Resource	Description
Accounts	Manage user accounts, attributes, and risk calculations
Applications	Manage applications and their associated accounts
Groups	Manage security and distribution groups
Owners	Manage identity owners and organizational relationships

Access Governance

Resource	Description
Campaigns	Create and manage access review campaigns
Campaign Rules	Define automated decision rules for campaigns
Policies	Create and manage access policies
Roles	Manage discovered roles and role mining

Operations

Resource	Description
Jobs	Monitor background tasks and operations
Sync	Trigger and monitor data synchronization

Configuration

Resource	Description
Settings	Manage integration and AI settings
AI Assistant	Interact with the AI-powered assistant

Pagination

Most list endpoints support cursor-based pagination:

GET /api/v1/accounts?limit=50&after=cursor-token

Parameter	Type	Description
limit	number	Number of items per page (default: 50)
after	string	Cursor for the next page

Responses include pagination info:

{
  "data": [...],
  "pageInfo": {
    "hasNextPage": true,
    "endCursor": "next-cursor-token"
  }
}

Error Handling

All endpoints return standard HTTP status codes:

Status Code	Description
200	Success
201	Created
204	No Content
400	Bad Request - Invalid parameters
401	Unauthorized - Authentication required
403	Forbidden - Insufficient permissions
404	Not Found
409	Conflict - Resource conflict
429	Too Many Requests - Rate limited
500	Internal Server Error

Error responses include details:

{
  "error": {
    "code": "VALIDATION_ERROR",
    "message": "Description of the error"
  }
}

Rate Limiting

API requests are rate-limited to ensure fair usage. If you exceed the limit, you'll receive a 429 status code. Wait before retrying.

Related Topics

• Integration Settings - Configure API access
• Platform Users - User roles and permissions