OIDC Access Token
Client credentials grant — authorizes all subsequent API calls.
POSThttps://api.transmitsecurity.io/oidc/token
Credentials
No token loaded
—
List Users
Retrieve all users registered in this application.
GEThttps://api.transmitsecurity.io/cis/v1/users
Query Options
Ready
—
Create User
Register a new user in the Mosaic identity store.
POSThttps://api.transmitsecurity.io/cis/v1/users
User Details
Ready
—
Send OTP Email
Sends a 6-digit one-time passcode to the user's email. Expires in 5 minutes.
POSThttps://api.transmitsecurity.io/cis/v1/auth/otp/email
Request
Ready
—
Validate OTP
Submit the 6-digit code from the email. Returns a redirect URL containing the authorization code.
POSThttps://api.transmitsecurity.io/cis/v1/auth/otp/email/validation
Request
Ready
—
Exchange Code → User Token
Exchange the authorization code for the user's access token, ID token and refresh token.
POSThttps://api.transmitsecurity.io/oidc/token
Request
Paste code above
—
Fraud Risk Evaluation
The DRS SDK (loaded from CDN) generates a device session token. That token is sent with the risk trigger call to evaluate login risk in real time.
POSThttps://api.transmitsecurity.io/risk/v1/action/trigger-action?get_recommendation=true
SDK Initialization
Not initialized
—
Risk Evaluation
Initialize SDK first
Report Action Result
Report the login outcome back to Mosaic to enrich the user's risk profile.
POSThttps://api.transmitsecurity.io/risk/v1/action/result
Request
Complete Step 6 first
—