IAM API

IAM

The company’s IAM, for its admins: who may do what in its products, everyone’s API keys, and what was done. Giving a role takes a person signed in to Yet — with a key, it is refused — so a leaked key never hands out more than its person had.

URL base https://acme.yet.com.br/api/settings

Settings respondem no endereço da sua empresa — acme aqui — e aceitam a key de quem administra o Settings.

As descrições dos endpoints estão em inglês.

List access

GET/api/settings/iam/access

Every role given in Cloud — everywhere (*) or in one environment.

Quem: Runs the company’s Settings

Requisição
curl https://acme.yet.com.br/api/settings/iam/access \
  -H "Authorization: Bearer $YET_API_KEY"
Resposta · 200
[
  {
    "email": "bruno@acme.dev",
    "environment": "*",
    "role": "developer",
    "granted_by": "ana@acme.dev",
    "granted_at": "2026-10-23T12:00:00Z"
  }
]

List everyone’s keys

GET/api/settings/iam/keys

Who holds a key, since when, last used when.

Quem: Runs the company’s Settings

Requisição
curl https://acme.yet.com.br/api/settings/iam/keys \
  -H "Authorization: Bearer $YET_API_KEY"

Revoke anyone’s key

DELETE/api/settings/iam/keys/{id}

It stops working at once; its person can make another in their Preferences.

Quem: Runs the company’s Settings

Requisição
curl -X DELETE https://acme.yet.com.br/api/settings/iam/keys/{id} \
  -H "Authorization: Bearer $YET_API_KEY"
Resposta · 200
{
  "ok": true
}

List activity

GET/api/settings/iam/activity

What was done, by whom, and from where — the apps, an SDK, Terraform — the latest first.

Quem: Runs the company’s Settings

Requisição
curl https://acme.yet.com.br/api/settings/iam/activity \
  -H "Authorization: Bearer $YET_API_KEY"
Resposta · 200
[
  {
    "id": 412,
    "at": "2026-10-23T12:00:00Z",
    "actor": "ana@acme.dev",
    "via": "api-key",
    "action": "environment.create",
    "target": "staging",
    "detail": "staging.acme.dev"
  }
]