canonical: https://jentic.com/apis/phantauth.net/phantauth # PhantAuth PhantAuth is a random user generator and OpenID Connect provider built for testing, described by its authors as Lorem Ipsum for user accounts and authentication. Through its REST endpoints you register test clients, create and read generated users, request tokens for a user, and read grouping resources such as domains, tenants, teams, and fleets. Because the users and tokens are generated on demand, teams use it to exercise sign-in flows and OpenID Connect integrations without standing up a real identity provider or handling real personal data. ## For AI agents Generate test identities with PhantAuth: register test clients, create and read generated users, request user tokens, and read domains, tenants, teams, and fleets. ## Scope Generates disposable test users, clients, tokens, and grouping data for exercising authentication flows. Does not manage real user accounts, secure production sign-in, or store real personal data. ## Capabilities - Register a test client for an OpenID Connect flow - Read a registered test client by its identifier - Create a generated test user - Read a generated user by username - Request a token for a user for a given kind - Read grouping resources: domains, tenants, teams, and fleets ## Use cases ### Exercise a sign-in flow with generated users Test an application's login without a real identity provider. The agent creates generated users and reads them back, so a sign-in flow can be driven end to end against disposable accounts instead of real ones. Example prompt: Create a generated test user and read it back so a sign-in flow can be exercised against a disposable account. ### Register clients for OIDC integration tests Set up the client side of an OpenID Connect test. The agent registers a test client and reads it back, so an integration test has a client to run authorisation flows against. Example prompt: Register a test client and read it back so an OpenID Connect integration test has a client to use. ### Mint tokens for test scenarios Get tokens for generated users to drive downstream tests. The agent requests a token of the required kind for a user, so a test can present it to an application expecting an OpenID Connect token. Example prompt: Request a token of the required kind for a generated user so a downstream test can use it. ### Model grouping structures in tests Represent organisational structure in a test environment. The agent reads generated domains, tenants, teams, and fleets so a multi-tenant application can be tested against realistic-looking groupings without real data. Example prompt: Read the generated domain, tenant, team, or fleet so a multi-tenant test has grouping data to work with. ## Key endpoints | Method | Path | Description | | --- | --- | --- | | POST | `/client` | Register a test client | | GET | `/client/{client_id}` | Read a registered test client | | POST | `/user` | Create a generated test user | | GET | `/user/{username}` | Read a generated user | | GET | `/user/{username}/token/{kind}` | Request a token for a user | ## Key resources - **User** — A generated test account that can be read and issued tokens. - **Client** — A registered test client for running OpenID Connect flows. - **Tenant** — A generated grouping, alongside domains, teams, and fleets, for multi-tenant tests. ## AI readiness This API is usable in Jentic One now. Its AI-readiness score against Jentic's framework shows where it stands today and where improvements would make it even easier for agents to use. - **Score:** 72 / 100 - **Maturity:** AI-Aware - **Dimensions:** - Foundational Compliance: 85 / 100 - Developer Experience & Jentic Compatibility: 58 / 100 - AI-Readiness & Agent Experience: 52 / 100 - Agent Usability: 94 / 100 - Security: 100 / 100 - AI Discoverability: 100 / 100 - **View full report:** https://jentic.com/apis/phantauth.net/phantauth/scorecard - **How the score is calculated:** https://docs.jentic.com/reference/api-readiness-framework/overview/ - **More about the dimensions:** https://docs.jentic.com/reference/api-readiness-framework/specification/#dimensional-model-overview ### Score it yourself Every API in the directory is allowlisted, so you can re-score it with no key required. - **Score your own API:** https://jentic.com/scorecard.md - **Scoring CLI agent skill:** https://github.com/jentic/jentic-api-scorecard/blob/main/skills/jentic-api-scorecard/SKILL.md ```sh npx @jentic/api-scorecard-cli score ``` ## Why Jentic - **Setup:** Using PhantAuth by hand means learning its client, user, token, and grouping endpoints and how the generated data fits together. Through Jentic you install once, import PhantAuth from the Jentic API Directory, and your agent calls it, with no credentials to configure. - **Permission scoping:** PhantAuth spans registering clients, generating users, and issuing tokens, and because Jentic One is self-hosted, your own rules decide which operations the agent may call. You can allow reading generated users while withholding operations that register clients, so the agent reaches only what you approved. - **Credential handling:** PhantAuth needs no API credentials, so Jentic has nothing to hold or inject for it: requests run without keys. That keeps the test tool simple to wire up while your Jentic One instance still governs which operations run. - **Discovery method:** Agents search Jentic by intent, such as generating a test user or requesting a token, and Jentic returns the matching PhantAuth operation with typed inputs, so the agent calls the right one without hard-coding endpoints. ## Related APIs - **Auth0 API** — Manage real users, clients, and tokens for production identity - **Okta API** — Administer users and OpenID Connect apps for real identity - **FusionAuth API** — Run a self-hosted identity provider for real users and apps ## FAQ ### What authentication does PhantAuth use? PhantAuth's endpoints require no authentication: it is a testing tool that generates disposable users and tokens, so there are no API credentials to provision. Through Jentic, your agent calls the endpoints directly. Check PhantAuth's developer documentation for the details of each endpoint. ### Is PhantAuth suitable for production identity? No. PhantAuth generates random test users and tokens for exercising sign-in and OpenID Connect flows, similar to Lorem Ipsum for authentication. Use it in test and staging environments, not for real user accounts. ### What are the rate limits for PhantAuth? The OpenAPI description does not specify rate limits. Check PhantAuth's developer documentation for any limits before generating users or tokens in bulk. ### Is there an MCP server for PhantAuth? You don't need an MCP server to use PhantAuth with your agent. Through Jentic, your agent finds the client, user, and token operations by intent and calls them directly through your own Jentic One instance. ### How do I connect PhantAuth to my agent through Jentic? To run it on your own infrastructure, install Jentic One from its GitHub repo, then import PhantAuth from the Jentic API Directory. Because the endpoints need no credentials, your agent can start generating test users and tokens straight away. ### Can I limit what my agent is allowed to do with PhantAuth? Yes. Because Jentic One is self-hosted, your own rules decide which PhantAuth operations the agent may call, so you can allow reading generated users while withholding operations that register clients. The controls run on your own instance regardless of the tool needing no credentials.