> ## Documentation Index
> Fetch the complete documentation index at: https://docs.lerian.studio/llms.txt
> Use this file to discover all available pages before exploring further.

# Auth APIs

With the **Auth APIs**, you can authenticate users and applications, refresh tokens, and manage user sessions.

Use these endpoints when a client needs runtime access: issuing tokens, refreshing sessions, retrieving the authenticated profile, checking permissions, or completing MFA login challenges.

## Available Endpoints

***

### Authentication API

Manage access tokens and user sessions:

* [**Request an Access Token**](/en/reference/access-manager/request-access-token) - Authenticate users with password grant or M2M applications with client credentials.
* [**Refresh the Access Token**](/en/reference/access-manager/refresh-token) - Renew expired access tokens using a refresh token.
* [**End User Session**](/en/reference/access-manager/end-user-session) - Revoke active tokens and terminate user sessions.

### Authorization API

Control access permissions:

* [**Validate User Permission**](/en/reference/access-manager/validate-user-permission) - Check if a user has permission to perform a specific action.

### User Information API

Retrieve authenticated user details:

* [**Retrieve User Information**](/en/reference/access-manager/retrieve-user-information) - Get basic information about the authenticated user.
* [**Retrieve User Permissions**](/en/reference/access-manager/retrieve-user-permissions) - List all permissions assigned to the authenticated user.

### MFA Login API

Complete MFA challenges during authentication:

* [**Initiate MFA Challenge**](/en/reference/access-manager/initiate-mfa-challenge) - Start a login challenge for a user with MFA enabled.
* [**Verify MFA Login**](/en/reference/access-manager/verify-mfa-login) - Verify the MFA login passcode and complete authentication.

## Related references

***

* [Identity APIs](/en/reference/access-manager/am-identity-apis) - Manage the users, applications, providers, and MFA settings used by Auth.
* [Access Manager error list](/en/reference/access-manager/access-manager-error-list) - Review Auth error codes.