# HTTP API Reference

The HTTP API builds the foundation for our IoT identity provider. The API requires the use of HTTPS as content such as the JWT and AT must not be transported over an insecure connection.

## Token API

The token API is for requesting access tokens issued by our IoT identity provider.

{% content-ref url="http-api-reference/token-api" %}
[token-api](http-api-reference/token-api)
{% endcontent-ref %}

## IdP API

The IdP API is used to validate issued access tokens with our IoT identity provider.

{% content-ref url="http-api-reference/idp-api" %}
[idp-api](http-api-reference/idp-api)
{% endcontent-ref %}

## Device API

The device API is used for updating device information registered with our IoT identity provider.

{% content-ref url="http-api-reference/device-api" %}
[device-api](http-api-reference/device-api)
{% endcontent-ref %}
