@turnkey/http 1.0.1 → 1.1.1

package/dist/__generated__/services/coordinator/public/v1/public_api.swagger.json

@@ -1,20 +1,61 @@
 {
     "swagger": "2.0",
     "info": {
-        "title": "Turnkey Public API",
+        "title": "API Reference",
+        "description": "Review our [API Introduction](../api-introduction) to get started.",
         "version": "1.0",
-        "contact": {
-            "name": "Turnkey Engineering",
-            "url": "https://turnkey.io/contact",
-            "email": "eng@turnkey.io"
-        }
+        "contact": {}
     },
     "tags": [
         {
             "name": "PublicApiService"
+        },
+        {
+            "name": "Organizations",
+            "description": "An Organization is the highest level of hierarchy in Turnkey. It can contain many Users, Private Keys, and Policies managed by a Root Quorum. The Root Quorum consists of a set of Users with a consensus threshold. This consensus threshold must be reached by Quorum members in order for any actions to take place.\n\nSee [Root Quorum](../managing-users/root-quorum) for more information"
+        },
+        {
+            "name": "Invitations",
+            "description": "Invitations allow you to invite Users into your Organization via email. Alternatively, Users can be added directly without an Invitation if their ApiKey or Authenticator credentials are known ahead of time.\n\nSee [Users](./api#tag/Users) for more information"
+        },
+        {
+            "name": "Policies",
+            "description": "Policies allow for deep customization of the security of your Organization. They can be used to grant permissions or restrict usage of Users and Private Keys. The Policy Engine analyzes all of your Policies on each request to determine whether an Activity is allowed.\n\nSee [Policy Overview](../managing-policies/overview) for more information"
+        },
+        {
+            "name": "Private Keys",
+            "description": "Private Keys are cryptographic public / private key pairs that can be used for cryptocurrency needs or more generalized encryption. Think of Private Keys as your own programmable wallet. Turnkey securely holds all Private Key materials for you, but only you can access them."
+        },
+        {
+            "name": "Private Key Tags",
+            "description": "Private Key Tags allow you to easily group and permission Private Keys through Policies."
+        },
+        {
+            "name": "Users",
+            "description": "Users are responsible for any action taken within an Organization. They can have ApiKey or Auuthenticator credentials, allowing you to onboard teammates to the Organization, or create API-only Users to run as part of your infrastructure."
+        },
+        {
+            "name": "User Tags",
+            "description": "User Key Tags allow you to easily group and permission Users through Policies."
+        },
+        {
+            "name": "Authenticators",
+            "description": "Authenticators are WebAuthN hardware devices, such as a Macbook TouchID or Yubikey, that can be used to authenticate requests."
+        },
+        {
+            "name": "API Keys",
+            "description": "API Keys are used to authenticate requests\n\nSee our [CLI](https://github.com/tkhq/tkcli) for instructions on generating API Keys"
+        },
+        {
+            "name": "Activities",
+            "description": "Activities encapsulate all the possible actions that can be taken with Turnkey. Some examples include adding a new user, creating a private key, and signing a transaction.\n\nActivities that modify your Organization are processed asynchronously. To confirm processing is complete and retrieve the Activity results, these activities must be polled until that status has been updated to a finalized state: `COMPLETED` when the activity is successful or `FAILED` when the activity has failed"
+        },
+        {
+            "name": "Consensus",
+            "description": "Policies can enforce consensus requirements for Activities. For example, adding a new user requires two admins to approve the request.\n\nActivities that have been proposed, but don't yet meet the Consesnsus requirements will have the status: `REQUIRES_CONSENSUS`. Activities in this state can be approved or rejected using the unique fingerprint generated when an Activity is created."
         }
     ],
-    "host": "coordinator-beta.turnkey.io",
+    "host": "api.turnkey.com",
     "schemes": ["https"],
     "consumes": ["application/json"],
     "produces": ["application/json"],
@@ -31,17 +72,6 @@
                             "$ref": "#/definitions/v1ActivityResponse"
                         }
                     },
-                    "403": {
-                        "description": "Returned when the user does not have permission to access the resource.",
-                        "schema": {}
-                    },
-                    "404": {
-                        "description": "Returned when the resource does not exist.",
-                        "schema": {
-                            "type": "string",
-                            "format": "string"
-                        }
-                    },
                     "default": {
                         "description": "An unexpected error response.",
                         "schema": {
@@ -74,17 +104,6 @@
                             "$ref": "#/definitions/v1GetAuthenticatorResponse"
                         }
                     },
-                    "403": {
-                        "description": "Returned when the user does not have permission to access the resource.",
-                        "schema": {}
-                    },
-                    "404": {
-                        "description": "Returned when the resource does not exist.",
-                        "schema": {
-                            "type": "string",
-                            "format": "string"
-                        }
-                    },
                     "default": {
                         "description": "An unexpected error response.",
                         "schema": {
@@ -117,17 +136,6 @@
                             "$ref": "#/definitions/v1GetAuthenticatorsResponse"
                         }
                     },
-                    "403": {
-                        "description": "Returned when the user does not have permission to access the resource.",
-                        "schema": {}
-                    },
-                    "404": {
-                        "description": "Returned when the resource does not exist.",
-                        "schema": {
-                            "type": "string",
-                            "format": "string"
-                        }
-                    },
                     "default": {
                         "description": "An unexpected error response.",
                         "schema": {
@@ -160,17 +168,6 @@
                             "$ref": "#/definitions/v1GetOrganizationResponse"
                         }
                     },
-                    "403": {
-                        "description": "Returned when the user does not have permission to access the resource.",
-                        "schema": {}
-                    },
-                    "404": {
-                        "description": "Returned when the resource does not exist.",
-                        "schema": {
-                            "type": "string",
-                            "format": "string"
-                        }
-                    },
                     "default": {
                         "description": "An unexpected error response.",
                         "schema": {
@@ -203,17 +200,6 @@
                             "$ref": "#/definitions/v1GetPolicyResponse"
                         }
                     },
-                    "403": {
-                        "description": "Returned when the user does not have permission to access the resource.",
-                        "schema": {}
-                    },
-                    "404": {
-                        "description": "Returned when the resource does not exist.",
-                        "schema": {
-                            "type": "string",
-                            "format": "string"
-                        }
-                    },
                     "default": {
                         "description": "An unexpected error response.",
                         "schema": {
@@ -246,17 +232,6 @@
                             "$ref": "#/definitions/v1GetPrivateKeyResponse"
                         }
                     },
-                    "403": {
-                        "description": "Returned when the user does not have permission to access the resource.",
-                        "schema": {}
-                    },
-                    "404": {
-                        "description": "Returned when the resource does not exist.",
-                        "schema": {
-                            "type": "string",
-                            "format": "string"
-                        }
-                    },
                     "default": {
                         "description": "An unexpected error response.",
                         "schema": {
@@ -289,17 +264,6 @@
                             "$ref": "#/definitions/v1GetUserResponse"
                         }
                     },
-                    "403": {
-                        "description": "Returned when the user does not have permission to access the resource.",
-                        "schema": {}
-                    },
-                    "404": {
-                        "description": "Returned when the resource does not exist.",
-                        "schema": {
-                            "type": "string",
-                            "format": "string"
-                        }
-                    },
                     "default": {
                         "description": "An unexpected error response.",
                         "schema": {
@@ -332,17 +296,6 @@
                             "$ref": "#/definitions/v1GetActivitiesResponse"
                         }
                     },
-                    "403": {
-                        "description": "Returned when the user does not have permission to access the resource.",
-                        "schema": {}
-                    },
-                    "404": {
-                        "description": "Returned when the resource does not exist.",
-                        "schema": {
-                            "type": "string",
-                            "format": "string"
-                        }
-                    },
                     "default": {
                         "description": "An unexpected error response.",
                         "schema": {
@@ -375,17 +328,6 @@
                             "$ref": "#/definitions/v1GetPoliciesResponse"
                         }
                     },
-                    "403": {
-                        "description": "Returned when the user does not have permission to access the resource.",
-                        "schema": {}
-                    },
-                    "404": {
-                        "description": "Returned when the resource does not exist.",
-                        "schema": {
-                            "type": "string",
-                            "format": "string"
-                        }
-                    },
                     "default": {
                         "description": "An unexpected error response.",
                         "schema": {
@@ -418,17 +360,6 @@
                             "$ref": "#/definitions/v1GetPrivateKeysResponse"
                         }
                     },
-                    "403": {
-                        "description": "Returned when the user does not have permission to access the resource.",
-                        "schema": {}
-                    },
-                    "404": {
-                        "description": "Returned when the resource does not exist.",
-                        "schema": {
-                            "type": "string",
-                            "format": "string"
-                        }
-                    },
                     "default": {
                         "description": "An unexpected error response.",
                         "schema": {
@@ -461,17 +392,6 @@
                             "$ref": "#/definitions/v1GetUsersResponse"
                         }
                     },
-                    "403": {
-                        "description": "Returned when the user does not have permission to access the resource.",
-                        "schema": {}
-                    },
-                    "404": {
-                        "description": "Returned when the resource does not exist.",
-                        "schema": {
-                            "type": "string",
-                            "format": "string"
-                        }
-                    },
                     "default": {
                         "description": "An unexpected error response.",
                         "schema": {
@@ -504,17 +424,6 @@
                             "$ref": "#/definitions/v1GetWhoamiResponse"
                         }
                     },
-                    "403": {
-                        "description": "Returned when the user does not have permission to access the resource.",
-                        "schema": {}
-                    },
-                    "404": {
-                        "description": "Returned when the resource does not exist.",
-                        "schema": {
-                            "type": "string",
-                            "format": "string"
-                        }
-                    },
                     "default": {
                         "description": "An unexpected error response.",
                         "schema": {
@@ -532,7 +441,7 @@
                         }
                     }
                 ],
-                "tags": ["Users"]
+                "tags": ["Who am I?"]
             }
         },
         "/public/v1/submit/approve_activity": {
@@ -547,17 +456,6 @@
                             "$ref": "#/definitions/v1ActivityResponse"
                         }
                     },
-                    "403": {
-                        "description": "Returned when the user does not have permission to access the resource.",
-                        "schema": {}
-                    },
-                    "404": {
-                        "description": "Returned when the resource does not exist.",
-                        "schema": {
-                            "type": "string",
-                            "format": "string"
-                        }
-                    },
                     "default": {
                         "description": "An unexpected error response.",
                         "schema": {
@@ -575,7 +473,7 @@
                         }
                     }
                 ],
-                "tags": ["Activities"]
+                "tags": ["Consensus"]
             }
         },
         "/public/v1/submit/create_api_keys": {
@@ -590,17 +488,6 @@
                             "$ref": "#/definitions/v1ActivityResponse"
                         }
                     },
-                    "403": {
-                        "description": "Returned when the user does not have permission to access the resource.",
-                        "schema": {}
-                    },
-                    "404": {
-                        "description": "Returned when the resource does not exist.",
-                        "schema": {
-                            "type": "string",
-                            "format": "string"
-                        }
-                    },
                     "default": {
                         "description": "An unexpected error response.",
                         "schema": {
@@ -618,7 +505,7 @@
                         }
                     }
                 ],
-                "tags": ["Users"]
+                "tags": ["API Keys"]
             }
         },
         "/public/v1/submit/create_api_only_users": {
@@ -633,17 +520,6 @@
                             "$ref": "#/definitions/v1ActivityResponse"
                         }
                     },
-                    "403": {
-                        "description": "Returned when the user does not have permission to access the resource.",
-                        "schema": {}
-                    },
-                    "404": {
-                        "description": "Returned when the resource does not exist.",
-                        "schema": {
-                            "type": "string",
-                            "format": "string"
-                        }
-                    },
                     "default": {
                         "description": "An unexpected error response.",
                         "schema": {
@@ -676,17 +552,6 @@
                             "$ref": "#/definitions/v1ActivityResponse"
                         }
                     },
-                    "403": {
-                        "description": "Returned when the user does not have permission to access the resource.",
-                        "schema": {}
-                    },
-                    "404": {
-                        "description": "Returned when the resource does not exist.",
-                        "schema": {
-                            "type": "string",
-                            "format": "string"
-                        }
-                    },
                     "default": {
                         "description": "An unexpected error response.",
                         "schema": {
@@ -719,17 +584,6 @@
                             "$ref": "#/definitions/v1ActivityResponse"
                         }
                     },
-                    "403": {
-                        "description": "Returned when the user does not have permission to access the resource.",
-                        "schema": {}
-                    },
-                    "404": {
-                        "description": "Returned when the resource does not exist.",
-                        "schema": {
-                            "type": "string",
-                            "format": "string"
-                        }
-                    },
                     "default": {
                         "description": "An unexpected error response.",
                         "schema": {
@@ -762,17 +616,6 @@
                             "$ref": "#/definitions/v1ActivityResponse"
                         }
                     },
-                    "403": {
-                        "description": "Returned when the user does not have permission to access the resource.",
-                        "schema": {}
-                    },
-                    "404": {
-                        "description": "Returned when the resource does not exist.",
-                        "schema": {
-                            "type": "string",
-                            "format": "string"
-                        }
-                    },
                     "default": {
                         "description": "An unexpected error response.",
                         "schema": {
@@ -805,17 +648,6 @@
                             "$ref": "#/definitions/v1ActivityResponse"
                         }
                     },
-                    "403": {
-                        "description": "Returned when the user does not have permission to access the resource.",
-                        "schema": {}
-                    },
-                    "404": {
-                        "description": "Returned when the resource does not exist.",
-                        "schema": {
-                            "type": "string",
-                            "format": "string"
-                        }
-                    },
                     "default": {
                         "description": "An unexpected error response.",
                         "schema": {
@@ -833,7 +665,7 @@
                         }
                     }
                 ],
-                "tags": ["Private Keys"]
+                "tags": ["Private Key Tags"]
             }
         },
         "/public/v1/submit/create_private_keys": {
@@ -848,17 +680,6 @@
                             "$ref": "#/definitions/v1ActivityResponse"
                         }
                     },
-                    "403": {
-                        "description": "Returned when the user does not have permission to access the resource.",
-                        "schema": {}
-                    },
-                    "404": {
-                        "description": "Returned when the resource does not exist.",
-                        "schema": {
-                            "type": "string",
-                            "format": "string"
-                        }
-                    },
                     "default": {
                         "description": "An unexpected error response.",
                         "schema": {
@@ -891,17 +712,6 @@
                             "$ref": "#/definitions/v1ActivityResponse"
                         }
                     },
-                    "403": {
-                        "description": "Returned when the user does not have permission to access the resource.",
-                        "schema": {}
-                    },
-                    "404": {
-                        "description": "Returned when the resource does not exist.",
-                        "schema": {
-                            "type": "string",
-                            "format": "string"
-                        }
-                    },
                     "default": {
                         "description": "An unexpected error response.",
                         "schema": {
@@ -934,17 +744,6 @@
                             "$ref": "#/definitions/v1ActivityResponse"
                         }
                     },
-                    "403": {
-                        "description": "Returned when the user does not have permission to access the resource.",
-                        "schema": {}
-                    },
-                    "404": {
-                        "description": "Returned when the resource does not exist.",
-                        "schema": {
-                            "type": "string",
-                            "format": "string"
-                        }
-                    },
                     "default": {
                         "description": "An unexpected error response.",
                         "schema": {
@@ -962,7 +761,7 @@
                         }
                     }
                 ],
-                "tags": ["Users"]
+                "tags": ["User Tags"]
             }
         },
         "/public/v1/submit/create_users": {
@@ -977,17 +776,6 @@
                             "$ref": "#/definitions/v1ActivityResponse"
                         }
                     },
-                    "403": {
-                        "description": "Returned when the user does not have permission to access the resource.",
-                        "schema": {}
-                    },
-                    "404": {
-                        "description": "Returned when the resource does not exist.",
-                        "schema": {
-                            "type": "string",
-                            "format": "string"
-                        }
-                    },
                     "default": {
                         "description": "An unexpected error response.",
                         "schema": {
@@ -1005,8 +793,7 @@
                         }
                     }
                 ],
-                "tags": ["Users"],
-                "deprecated": true
+                "tags": ["Users"]
             }
         },
         "/public/v1/submit/delete_api_keys": {
@@ -1021,17 +808,6 @@
                             "$ref": "#/definitions/v1ActivityResponse"
                         }
                     },
-                    "403": {
-                        "description": "Returned when the user does not have permission to access the resource.",
-                        "schema": {}
-                    },
-                    "404": {
-                        "description": "Returned when the resource does not exist.",
-                        "schema": {
-                            "type": "string",
-                            "format": "string"
-                        }
-                    },
                     "default": {
                         "description": "An unexpected error response.",
                         "schema": {
@@ -1049,7 +825,7 @@
                         }
                     }
                 ],
-                "tags": ["Users"]
+                "tags": ["API Keys"]
             }
         },
         "/public/v1/submit/delete_authenticators": {
@@ -1064,17 +840,6 @@
                             "$ref": "#/definitions/v1ActivityResponse"
                         }
                     },
-                    "403": {
-                        "description": "Returned when the user does not have permission to access the resource.",
-                        "schema": {}
-                    },
-                    "404": {
-                        "description": "Returned when the resource does not exist.",
-                        "schema": {
-                            "type": "string",
-                            "format": "string"
-                        }
-                    },
                     "default": {
                         "description": "An unexpected error response.",
                         "schema": {
@@ -1107,17 +872,6 @@
                             "$ref": "#/definitions/v1ActivityResponse"
                         }
                     },
-                    "403": {
-                        "description": "Returned when the user does not have permission to access the resource.",
-                        "schema": {}
-                    },
-                    "404": {
-                        "description": "Returned when the resource does not exist.",
-                        "schema": {
-                            "type": "string",
-                            "format": "string"
-                        }
-                    },
                     "default": {
                         "description": "An unexpected error response.",
                         "schema": {
@@ -1150,17 +904,6 @@
                             "$ref": "#/definitions/v1ActivityResponse"
                         }
                     },
-                    "403": {
-                        "description": "Returned when the user does not have permission to access the resource.",
-                        "schema": {}
-                    },
-                    "404": {
-                        "description": "Returned when the resource does not exist.",
-                        "schema": {
-                            "type": "string",
-                            "format": "string"
-                        }
-                    },
                     "default": {
                         "description": "An unexpected error response.",
                         "schema": {
@@ -1193,17 +936,6 @@
                             "$ref": "#/definitions/v1ActivityResponse"
                         }
                     },
-                    "403": {
-                        "description": "Returned when the user does not have permission to access the resource.",
-                        "schema": {}
-                    },
-                    "404": {
-                        "description": "Returned when the resource does not exist.",
-                        "schema": {
-                            "type": "string",
-                            "format": "string"
-                        }
-                    },
                     "default": {
                         "description": "An unexpected error response.",
                         "schema": {
@@ -1221,7 +953,7 @@
                         }
                     }
                 ],
-                "tags": ["Activities"]
+                "tags": ["Consensus"]
             }
         },
         "/public/v1/submit/sign_raw_payload": {
@@ -1236,17 +968,6 @@
                             "$ref": "#/definitions/v1ActivityResponse"
                         }
                     },
-                    "403": {
-                        "description": "Returned when the user does not have permission to access the resource.",
-                        "schema": {}
-                    },
-                    "404": {
-                        "description": "Returned when the resource does not exist.",
-                        "schema": {
-                            "type": "string",
-                            "format": "string"
-                        }
-                    },
                     "default": {
                         "description": "An unexpected error response.",
                         "schema": {
@@ -1279,17 +1000,6 @@
                             "$ref": "#/definitions/v1ActivityResponse"
                         }
                     },
-                    "403": {
-                        "description": "Returned when the user does not have permission to access the resource.",
-                        "schema": {}
-                    },
-                    "404": {
-                        "description": "Returned when the resource does not exist.",
-                        "schema": {
-                            "type": "string",
-                            "format": "string"
-                        }
-                    },
                     "default": {
                         "description": "An unexpected error response.",
                         "schema": {
@@ -1322,17 +1032,6 @@
                             "$ref": "#/definitions/v1ActivityResponse"
                         }
                     },
-                    "403": {
-                        "description": "Returned when the user does not have permission to access the resource.",
-                        "schema": {}
-                    },
-                    "404": {
-                        "description": "Returned when the resource does not exist.",
-                        "schema": {
-                            "type": "string",
-                            "format": "string"
-                        }
-                    },
                     "default": {
                         "description": "An unexpected error response.",
                         "schema": {
@@ -1365,17 +1064,6 @@
                             "$ref": "#/definitions/v1ActivityResponse"
                         }
                     },
-                    "403": {
-                        "description": "Returned when the user does not have permission to access the resource.",
-                        "schema": {}
-                    },
-                    "404": {
-                        "description": "Returned when the resource does not exist.",
-                        "schema": {
-                            "type": "string",
-                            "format": "string"
-                        }
-                    },
                     "default": {
                         "description": "An unexpected error response.",
                         "schema": {
@@ -1408,17 +1096,6 @@
                             "$ref": "#/definitions/v1ActivityResponse"
                         }
                     },
-                    "403": {
-                        "description": "Returned when the user does not have permission to access the resource.",
-                        "schema": {}
-                    },
-                    "404": {
-                        "description": "Returned when the resource does not exist.",
-                        "schema": {
-                            "type": "string",
-                            "format": "string"
-                        }
-                    },
                     "default": {
                         "description": "An unexpected error response.",
                         "schema": {
@@ -1436,7 +1113,7 @@
                         }
                     }
                 ],
-                "tags": ["Private Keys"]
+                "tags": ["Private Key Tags"]
             }
         },
         "/public/v1/submit/update_root_quorum": {
@@ -1451,15 +1128,36 @@
                             "$ref": "#/definitions/v1ActivityResponse"
                         }
                     },
-                    "403": {
-                        "description": "Returned when the user does not have permission to access the resource.",
-                        "schema": {}
-                    },
-                    "404": {
-                        "description": "Returned when the resource does not exist.",
+                    "default": {
+                        "description": "An unexpected error response.",
+                        "schema": {
+                            "$ref": "#/definitions/rpcStatus"
+                        }
+                    }
+                },
+                "parameters": [
+                    {
+                        "name": "body",
+                        "in": "body",
+                        "required": true,
                         "schema": {
-                            "type": "string",
-                            "format": "string"
+                            "$ref": "#/definitions/v1UpdateRootQuorumRequest"
+                        }
+                    }
+                ],
+                "tags": ["Organizations"]
+            }
+        },
+        "/public/v1/submit/update_user": {
+            "post": {
+                "summary": "Update User",
+                "description": "Update a User in an existing Organization",
+                "operationId": "PublicApiService_UpdateUser",
+                "responses": {
+                    "200": {
+                        "description": "A successful response.",
+                        "schema": {
+                            "$ref": "#/definitions/v1ActivityResponse"
                         }
                     },
                     "default": {
@@ -1475,11 +1173,11 @@
                         "in": "body",
                         "required": true,
                         "schema": {
-                            "$ref": "#/definitions/v1UpdateRootQuorumRequest"
+                            "$ref": "#/definitions/v1UpdateUserRequest"
                         }
                     }
                 ],
-                "tags": ["Organizations"]
+                "tags": ["Users"]
             }
         },
         "/public/v1/submit/update_user_tag": {
@@ -1494,17 +1192,6 @@
                             "$ref": "#/definitions/v1ActivityResponse"
                         }
                     },
-                    "403": {
-                        "description": "Returned when the user does not have permission to access the resource.",
-                        "schema": {}
-                    },
-                    "404": {
-                        "description": "Returned when the resource does not exist.",
-                        "schema": {
-                            "type": "string",
-                            "format": "string"
-                        }
-                    },
                     "default": {
                         "description": "An unexpected error response.",
                         "schema": {
@@ -1522,12 +1209,11 @@
                         }
                     }
                 ],
-                "tags": ["Users"]
+                "tags": ["User Tags"]
             }
         },
         "/tkhq/api/v1/noop-codegen-anchor": {
             "post": {
-                "summary": "This route does nothing and does not need an implementation, but please don't remove it.\nIt's used at compile time for generating extra OpenAPI/TypeScript types\nthat are not directly referenced in requests.",
                 "operationId": "PublicApiService_NOOPCodegenAnchor",
                 "responses": {
                     "200": {
@@ -1536,17 +1222,6 @@
                             "$ref": "#/definitions/v1NOOPCodegenAnchorResponse"
                         }
                     },
-                    "403": {
-                        "description": "Returned when the user does not have permission to access the resource.",
-                        "schema": {}
-                    },
-                    "404": {
-                        "description": "Returned when the resource does not exist.",
-                        "schema": {
-                            "type": "string",
-                            "format": "string"
-                        }
-                    },
                     "default": {
                         "description": "An unexpected error response.",
                         "schema": {
@@ -1603,8 +1278,7 @@
                 "ADDRESS_FORMAT_UNCOMPRESSED",
                 "ADDRESS_FORMAT_COMPRESSED",
                 "ADDRESS_FORMAT_ETHEREUM"
-            ],
-            "description": " - ADDRESS_FORMAT_UNCOMPRESSED: 04\u003cX_COORDINATE\u003e\u003cY_COORDINATE\u003e\n - ADDRESS_FORMAT_COMPRESSED: 02 or 03, followed by the X coordinate\n - ADDRESS_FORMAT_ETHEREUM: Your standard Ethereum address (0x...). We apply EIP55 casing."
+            ]
         },
         "externaldatav1AuthenticatorTransport": {
             "type": "string",
@@ -1618,8 +1292,7 @@
         },
         "externaldatav1Curve": {
             "type": "string",
-            "enum": ["CURVE_SECP256K1", "CURVE_ED25519"],
-            "description": "Cryptographic Curve used to generate a given Private Key."
+            "enum": ["CURVE_SECP256K1", "CURVE_ED25519"]
         },
         "externaldatav1Effect": {
             "type": "string",
@@ -1639,8 +1312,7 @@
                 "OPERATOR_NOT_IN",
                 "OPERATOR_CONTAINS_ONE",
                 "OPERATOR_CONTAINS_ALL"
-            ],
-            "description": "Logical operators."
+            ]
         },
         "externaldatav1Selector": {
             "type": "object",
@@ -1650,7 +1322,8 @@
                     "description": "The resource being referenced within a policy (e.g., user.tags or activities.type)."
                 },
                 "operator": {
-                    "$ref": "#/definitions/externaldatav1Operator"
+                    "$ref": "#/definitions/externaldatav1Operator",
+                    "description": "Logical operators like OPERATOR_CONTAINS or OPERATOR_EQUAL."
                 },
                 "targets": {
                     "type": "array",
@@ -1683,13 +1356,11 @@
                 "ADDRESS_FORMAT_UNCOMPRESSED",
                 "ADDRESS_FORMAT_COMPRESSED",
                 "ADDRESS_FORMAT_ETHEREUM"
-            ],
-            "description": " - ADDRESS_FORMAT_UNCOMPRESSED: 04\u003cX_COORDINATE\u003e\u003cY_COORDINATE\u003e\n - ADDRESS_FORMAT_COMPRESSED: 02 or 03, followed by the X coordinate\n - ADDRESS_FORMAT_ETHEREUM: Your standard Ethereum address (0x...). We apply EIP55 casing."
+            ]
         },
         "immutableactivityv1Curve": {
             "type": "string",
-            "enum": ["CURVE_SECP256K1", "CURVE_ED25519"],
-            "description": "Cryptographic Curve used to generate a given Private Key."
+            "enum": ["CURVE_SECP256K1", "CURVE_ED25519"]
         },
         "immutableactivityv1Effect": {
             "type": "string",
@@ -1727,8 +1398,7 @@
         },
         "immutableactivityv1TransactionType": {
             "type": "string",
-            "enum": ["TRANSACTION_TYPE_ETHEREUM"],
-            "title": "- TRANSACTION_TYPE_ETHEREUM: Unsigned Ethereum transaction, RLP-encoded and hex-encoded"
+            "enum": ["TRANSACTION_TYPE_ETHEREUM"]
         },
         "immutablewebauthnv1AuthenticatorTransport": {
             "type": "string",
@@ -1762,6 +1432,7 @@
                 "details": {
                     "type": "array",
                     "items": {
+                        "type": "object",
                         "$ref": "#/definitions/protobufAny"
                     }
                 }
@@ -1772,16 +1443,15 @@
             "properties": {
                 "invitationId": {
                     "type": "string",
-                    "description": "Unique identifier for a given Invitation object.",
-                    "title": "@inject_tag: validate:\"required,uuid\""
+                    "description": "Unique identifier for a given Invitation object."
                 },
                 "userId": {
                     "type": "string",
-                    "description": "Unique identifier for a given User.",
-                    "title": "@inject_tag: validate:\"required,uuid\""
+                    "description": "Unique identifier for a given User."
                 },
                 "authenticator": {
-                    "$ref": "#/definitions/v1AuthenticatorParams"
+                    "$ref": "#/definitions/v1AuthenticatorParams",
+                    "description": "WebAuthN hardware devices that can be used to log in to the Turnkey web app."
                 }
             },
             "required": ["invitationId", "userId", "authenticator"]
@@ -1791,16 +1461,15 @@
             "properties": {
                 "invitationId": {
                     "type": "string",
-                    "description": "Unique identifier for a given Invitation object.",
-                    "title": "@inject_tag: validate:\"required,uuid\""
+                    "description": "Unique identifier for a given Invitation object."
                 },
                 "userId": {
                     "type": "string",
-                    "description": "Unique identifier for a given User.",
-                    "title": "@inject_tag: validate:\"required,uuid\""
+                    "description": "Unique identifier for a given User."
                 },
                 "authenticator": {
-                    "$ref": "#/definitions/v1AuthenticatorParamsV2"
+                    "$ref": "#/definitions/v1AuthenticatorParamsV2",
+                    "description": "WebAuthN hardware devices that can be used to log in to the Turnkey web app."
                 }
             },
             "required": ["invitationId", "userId", "authenticator"]
@@ -1824,8 +1493,7 @@
             "properties": {
                 "productId": {
                     "type": "string",
-                    "description": "The product that the customer wants to subscribe to.",
-                    "title": "@inject_tag: validate:\"required\""
+                    "description": "The product that the customer wants to subscribe to."
                 }
             },
             "required": ["productId"]
@@ -1852,20 +1520,25 @@
                     "description": "Unique identifier for a given Organization."
                 },
                 "status": {
-                    "$ref": "#/definitions/v1ActivityStatus"
+                    "$ref": "#/definitions/v1ActivityStatus",
+                    "description": "The current processing status of a specified Activity."
                 },
                 "type": {
-                    "$ref": "#/definitions/v1ActivityType"
+                    "$ref": "#/definitions/v1ActivityType",
+                    "description": "Type of Activity, such as Add User, or Sign Transaction."
                 },
                 "intent": {
-                    "$ref": "#/definitions/v1Intent"
+                    "$ref": "#/definitions/v1Intent",
+                    "description": "Intent object crafted by Turnkey based on the user request, used to assess the permissibility of an action."
                 },
                 "result": {
-                    "$ref": "#/definitions/v1Result"
+                    "$ref": "#/definitions/v1Result",
+                    "description": "Result of the intended action."
                 },
                 "votes": {
                     "type": "array",
                     "items": {
+                        "type": "object",
                         "$ref": "#/definitions/v1Vote"
                     },
                     "description": "A list of objects representing a particular User's approval or rejection of a Consensus request, including all relevant metadata."
@@ -1887,7 +1560,6 @@
                     "$ref": "#/definitions/v1Timestamp"
                 }
             },
-            "description": "An action that can that can be taken within the Turnkey infrastructure.",
             "required": [
                 "id",
                 "organizationId",
@@ -1907,7 +1579,8 @@
             "type": "object",
             "properties": {
                 "activity": {
-                    "$ref": "#/definitions/v1Activity"
+                    "$ref": "#/definitions/v1Activity",
+                    "description": "An action that can that can be taken within the Turnkey infrastructure."
                 }
             },
             "required": ["activity"]
@@ -1921,8 +1594,7 @@
                 "ACTIVITY_STATUS_FAILED",
                 "ACTIVITY_STATUS_CONSENSUS_NEEDED",
                 "ACTIVITY_STATUS_REJECTED"
-            ],
-            "description": "The current processing status of an Activity."
+            ]
         },
         "v1ActivityType": {
             "type": "string",
@@ -1967,15 +1639,17 @@
                 "ACTIVITY_TYPE_CREATE_SUB_ORGANIZATION_V2",
                 "ACTIVITY_TYPE_UPDATE_ALLOWED_ORIGINS",
                 "ACTIVITY_TYPE_CREATE_PRIVATE_KEYS_V2",
-                "ACTIVITY_TYPE_UPDATE_POLICY"
-            ],
-            "description": "Type of Activity, such as Add User, or Sign Transaction."
+                "ACTIVITY_TYPE_UPDATE_USER",
+                "ACTIVITY_TYPE_UPDATE_POLICY",
+                "ACTIVITY_TYPE_SET_PAYMENT_METHOD_V2"
+            ]
         },
         "v1ApiKey": {
             "type": "object",
             "properties": {
                 "credential": {
-                    "$ref": "#/definitions/v1Credential"
+                    "$ref": "#/definitions/v1Credential",
+                    "description": "A User credential that can be used to authenticate to Turnkey."
                 },
                 "apiKeyId": {
                     "type": "string",
@@ -2005,13 +1679,11 @@
             "properties": {
                 "apiKeyName": {
                     "type": "string",
-                    "description": "Human-readable name for an API Key.",
-                    "title": "@inject_tag: validate:\"required,tk_label_length,tk_label\""
+                    "description": "Human-readable name for an API Key."
                 },
                 "publicKey": {
                     "type": "string",
-                    "description": "The public component of a cryptographic key pair used to sign messages and transactions.",
-                    "title": "@inject_tag: validate:\"hexadecimal,len=66\""
+                    "description": "The public component of a cryptographic key pair used to sign messages and transactions."
                 }
             },
             "required": ["apiKeyName", "publicKey"]
@@ -2021,29 +1693,26 @@
             "properties": {
                 "userName": {
                     "type": "string",
-                    "description": "The name of the new API-only User.",
-                    "title": "@inject_tag: validate:\"required,tk_label_length,tk_label\""
+                    "description": "The name of the new API-only User."
                 },
                 "userEmail": {
                     "type": "string",
-                    "description": "The email address for this API-only User (optional).",
-                    "title": "@inject_tag: validate:\"omitempty,email,tk_email\""
+                    "description": "The email address for this API-only User (optional)."
                 },
                 "userTags": {
                     "type": "array",
                     "items": {
                         "type": "string"
                     },
-                    "description": "A list of tags assigned to the new API-only User.",
-                    "title": "@inject_tag: validate:\"dive,uuid\""
+                    "description": "A list of tags assigned to the new API-only User."
                 },
                 "apiKeys": {
                     "type": "array",
                     "items": {
+                        "type": "object",
                         "$ref": "#/definitions/v1ApiKeyParams"
                     },
-                    "description": "A list of API Key parameters.",
-                    "title": "@inject_tag: validate:\"dive,uuid\""
+                    "description": "A list of API Key parameters."
                 }
             },
             "required": ["userName", "userTags", "apiKeys"]
@@ -2053,8 +1722,7 @@
             "properties": {
                 "fingerprint": {
                     "type": "string",
-                    "description": "An artifact verifying a User's action.",
-                    "title": "@inject_tag: validate:\"required\""
+                    "description": "An artifact verifying a User's action."
                 }
             },
             "required": ["fingerprint"]
@@ -2085,18 +1753,15 @@
             "properties": {
                 "credentialId": {
                     "type": "string",
-                    "description": "The cbor encoded then base64 url encoded id of the credential.",
-                    "title": "@inject_tag: validate:\"required,max=256\""
+                    "description": "The cbor encoded then base64 url encoded id of the credential."
                 },
                 "clientDataJson": {
                     "type": "string",
-                    "description": "A base64 url encoded payload containing metadata about the signing context and the challenge.",
-                    "title": "@inject_tag: validate:\"required\""
+                    "description": "A base64 url encoded payload containing metadata about the signing context and the challenge."
                 },
                 "attestationObject": {
                     "type": "string",
-                    "description": "A base64 url encoded payload containing authenticator data and any attestation the webauthn provider chooses.",
-                    "title": "@inject_tag: validate:\"required\""
+                    "description": "A base64 url encoded payload containing authenticator data and any attestation the webauthn provider chooses."
                 },
                 "transports": {
                     "type": "array",
@@ -2139,7 +1804,8 @@
                     "description": "The type of Authenticator device."
                 },
                 "credential": {
-                    "$ref": "#/definitions/v1Credential"
+                    "$ref": "#/definitions/v1Credential",
+                    "description": "A User credential that can be used to authenticate to Turnkey."
                 },
                 "authenticatorId": {
                     "type": "string",
@@ -2173,12 +1839,10 @@
             "type": "object",
             "properties": {
                 "clientDataJson": {
-                    "type": "string",
-                    "title": "ENCODING: base64url"
+                    "type": "string"
                 },
                 "attestationObject": {
-                    "type": "string",
-                    "title": "ENCODING: base64url"
+                    "type": "string"
                 },
                 "transports": {
                     "type": "array",
@@ -2199,21 +1863,18 @@
             "properties": {
                 "authenticatorName": {
                     "type": "string",
-                    "description": "Human-readable name for an Authenticator.",
-                    "title": "@inject_tag: validate:\"required,tk_label_length,tk_label\""
+                    "description": "Human-readable name for an Authenticator."
                 },
                 "userId": {
                     "type": "string",
-                    "description": "Unique identifier for a given User.",
-                    "title": "@inject_tag: validate:\"required,uuid\""
+                    "description": "Unique identifier for a given User."
                 },
                 "attestation": {
                     "$ref": "#/definitions/v1PublicKeyCredentialWithAttestation"
                 },
                 "challenge": {
                     "type": "string",
-                    "description": "Challenge presented for authentication purposes.",
-                    "title": "@inject_tag: validate:\"required,max=256\""
+                    "description": "Challenge presented for authentication purposes."
                 }
             },
             "required": ["authenticatorName", "userId", "attestation", "challenge"]
@@ -2223,16 +1884,15 @@
             "properties": {
                 "authenticatorName": {
                     "type": "string",
-                    "description": "Human-readable name for an Authenticator.",
-                    "title": "@inject_tag: validate:\"required,tk_label_length,tk_label\""
+                    "description": "Human-readable name for an Authenticator."
                 },
                 "challenge": {
                     "type": "string",
-                    "description": "Challenge presented for authentication purposes.",
-                    "title": "@inject_tag: validate:\"required,max=256\""
+                    "description": "Challenge presented for authentication purposes."
                 },
                 "attestation": {
-                    "$ref": "#/definitions/v1Attestation"
+                    "$ref": "#/definitions/v1Attestation",
+                    "description": "The attestation that proves custody of the authenticator and provides metadata about it."
                 }
             },
             "required": ["authenticatorName", "challenge", "attestation"]
@@ -2243,15 +1903,14 @@
                 "apiKeys": {
                     "type": "array",
                     "items": {
+                        "type": "object",
                         "$ref": "#/definitions/v1ApiKeyParams"
                     },
-                    "description": "A list of API Keys.",
-                    "title": "@inject_tag: validate:\"dive,required\""
+                    "description": "A list of API Keys."
                 },
                 "userId": {
                     "type": "string",
-                    "description": "Unique identifier for a given User.",
-                    "title": "@inject_tag: validate:\"required,uuid\""
+                    "description": "Unique identifier for a given User."
                 }
             },
             "required": ["apiKeys", "userId"]
@@ -2296,10 +1955,10 @@
                 "apiOnlyUsers": {
                     "type": "array",
                     "items": {
+                        "type": "object",
                         "$ref": "#/definitions/v1ApiOnlyUserParams"
                     },
-                    "description": "A list of API-only Users to create.",
-                    "title": "@inject_tag: validate:\"required,dive,required\""
+                    "description": "A list of API-only Users to create."
                 }
             },
             "required": ["apiOnlyUsers"]
@@ -2344,15 +2003,14 @@
                 "authenticators": {
                     "type": "array",
                     "items": {
+                        "type": "object",
                         "$ref": "#/definitions/v1AuthenticatorParams"
                     },
-                    "description": "A list of Authenticators.",
-                    "title": "@inject_tag: validate:\"dive,required\""
+                    "description": "A list of Authenticators."
                 },
                 "userId": {
                     "type": "string",
-                    "description": "Unique identifier for a given User.",
-                    "title": "@inject_tag: validate:\"required,uuid\""
+                    "description": "Unique identifier for a given User."
                 }
             },
             "required": ["authenticators", "userId"]
@@ -2363,15 +2021,14 @@
                 "authenticators": {
                     "type": "array",
                     "items": {
+                        "type": "object",
                         "$ref": "#/definitions/v1AuthenticatorParamsV2"
                     },
-                    "description": "A list of Authenticators.",
-                    "title": "@inject_tag: validate:\"dive,required\""
+                    "description": "A list of Authenticators."
                 },
                 "userId": {
                     "type": "string",
-                    "description": "Unique identifier for a given User.",
-                    "title": "@inject_tag: validate:\"required,uuid\""
+                    "description": "Unique identifier for a given User."
                 }
             },
             "required": ["authenticators", "userId"]
@@ -2416,10 +2073,10 @@
                 "invitations": {
                     "type": "array",
                     "items": {
+                        "type": "object",
                         "$ref": "#/definitions/v1InvitationParams"
                     },
-                    "description": "A list of Invitations.",
-                    "title": "@inject_tag: validate:\"required,dive,required\""
+                    "description": "A list of Invitations."
                 }
             },
             "required": ["invitations"]
@@ -2463,21 +2120,19 @@
             "properties": {
                 "organizationName": {
                     "type": "string",
-                    "description": "Human-readable name for an Organization.",
-                    "title": "@inject_tag: validate:\"required,tk_label_length\""
+                    "description": "Human-readable name for an Organization."
                 },
                 "rootEmail": {
                     "type": "string",
-                    "description": "The root user's email address.",
-                    "title": "@inject_tag: validate:\"required,email,tk_email\""
+                    "description": "The root user's email address."
                 },
                 "rootAuthenticator": {
-                    "$ref": "#/definitions/v1AuthenticatorParams"
+                    "$ref": "#/definitions/v1AuthenticatorParams",
+                    "description": "The root user's Authenticator."
                 },
                 "rootUserId": {
                     "type": "string",
-                    "description": "Unique identifier for the root user object.",
-                    "title": "@inject_tag: validate:\"uuid\""
+                    "description": "Unique identifier for the root user object."
                 }
             },
             "required": ["organizationName", "rootEmail", "rootAuthenticator"]
@@ -2487,21 +2142,19 @@
             "properties": {
                 "organizationName": {
                     "type": "string",
-                    "description": "Human-readable name for an Organization.",
-                    "title": "@inject_tag: validate:\"required,tk_label,tk_label_length\""
+                    "description": "Human-readable name for an Organization."
                 },
                 "rootEmail": {
                     "type": "string",
-                    "description": "The root user's email address.",
-                    "title": "@inject_tag: validate:\"required,email,tk_email\""
+                    "description": "The root user's email address."
                 },
                 "rootAuthenticator": {
-                    "$ref": "#/definitions/v1AuthenticatorParamsV2"
+                    "$ref": "#/definitions/v1AuthenticatorParamsV2",
+                    "description": "The root user's Authenticator."
                 },
                 "rootUserId": {
                     "type": "string",
-                    "description": "Unique identifier for the root user object.",
-                    "title": "@inject_tag: validate:\"uuid\""
+                    "description": "Unique identifier for the root user object."
                 }
             },
             "required": ["organizationName", "rootEmail", "rootAuthenticator"]
@@ -2521,19 +2174,19 @@
             "properties": {
                 "policyName": {
                     "type": "string",
-                    "description": "Human-readable name for a Policy.",
-                    "title": "@inject_tag: validate:\"required,tk_label_length\""
+                    "description": "Human-readable name for a Policy."
                 },
                 "selectors": {
                     "type": "array",
                     "items": {
+                        "type": "object",
                         "$ref": "#/definitions/immutableactivityv1Selector"
                     },
-                    "description": "A list of simple functions each including a subject, target and boolean. See Policy Engine Language section for additional details.",
-                    "title": "@inject_tag: validate:\"required,dive,required\""
+                    "description": "A list of simple functions each including a subject, target and boolean. See Policy Engine Language section for additional details."
                 },
                 "effect": {
-                    "$ref": "#/definitions/immutableactivityv1Effect"
+                    "$ref": "#/definitions/immutableactivityv1Effect",
+                    "description": "The instruction to DENY or ALLOW a particular activity following policy selector(s)."
                 },
                 "notes": {
                     "type": "string"
@@ -2546,19 +2199,19 @@
             "properties": {
                 "policyName": {
                     "type": "string",
-                    "description": "Human-readable name for a Policy.",
-                    "title": "@inject_tag: validate:\"required,tk_label_length\""
+                    "description": "Human-readable name for a Policy."
                 },
                 "selectors": {
                     "type": "array",
                     "items": {
+                        "type": "object",
                         "$ref": "#/definitions/v1SelectorV2"
                     },
-                    "description": "A list of simple functions each including a subject, target and boolean. See Policy Engine Language section for additional details.",
-                    "title": "@inject_tag: validate:\"required,dive,required\""
+                    "description": "A list of simple functions each including a subject, target and boolean. See Policy Engine Language section for additional details."
                 },
                 "effect": {
-                    "$ref": "#/definitions/immutableactivityv1Effect"
+                    "$ref": "#/definitions/immutableactivityv1Effect",
+                    "description": "Whether to ALLOW or DENY requests that match the condition and consensus requirements."
                 },
                 "notes": {
                     "type": "string"
@@ -2571,11 +2224,11 @@
             "properties": {
                 "policyName": {
                     "type": "string",
-                    "description": "Human-readable name for a Policy.",
-                    "title": "@inject_tag: validate:\"required,tk_label,tk_label_length\""
+                    "description": "Human-readable name for a Policy."
                 },
                 "effect": {
-                    "$ref": "#/definitions/immutableactivityv1Effect"
+                    "$ref": "#/definitions/immutableactivityv1Effect",
+                    "description": "The instruction to DENY or ALLOW an activity."
                 },
                 "condition": {
                     "type": "string",
@@ -2627,16 +2280,14 @@
             "properties": {
                 "privateKeyTagName": {
                     "type": "string",
-                    "description": "Human-readable name for a Private Key Tag.",
-                    "title": "@inject_tag: validate:\"required,tk_label,tk_label_length\""
+                    "description": "Human-readable name for a Private Key Tag."
                 },
                 "privateKeyIds": {
                     "type": "array",
                     "items": {
                         "type": "string"
                     },
-                    "description": "A list of Private Key IDs.",
-                    "title": "@inject_tag: validate:\"dive,uuid\""
+                    "description": "A list of Private Key IDs."
                 }
             },
             "required": ["privateKeyTagName", "privateKeyIds"]
@@ -2685,10 +2336,10 @@
                 "privateKeys": {
                     "type": "array",
                     "items": {
+                        "type": "object",
                         "$ref": "#/definitions/v1PrivateKeyParams"
                     },
-                    "description": "A list of Private Keys.",
-                    "title": "@inject_tag: validate:\"dive,required\""
+                    "description": "A list of Private Keys."
                 }
             },
             "required": ["privateKeys"]
@@ -2699,10 +2350,10 @@
                 "privateKeys": {
                     "type": "array",
                     "items": {
+                        "type": "object",
                         "$ref": "#/definitions/v1PrivateKeyParams"
                     },
-                    "description": "A list of Private Keys.",
-                    "title": "@inject_tag: validate:\"dive,required\""
+                    "description": "A list of Private Keys."
                 }
             },
             "required": ["privateKeys"]
@@ -2747,6 +2398,7 @@
                 "privateKeys": {
                     "type": "array",
                     "items": {
+                        "type": "object",
                         "$ref": "#/definitions/v1PrivateKeyResult"
                     },
                     "description": "A list of Private Key IDs and addresses."
@@ -2759,11 +2411,11 @@
             "properties": {
                 "name": {
                     "type": "string",
-                    "description": "Name for this sub-organization",
-                    "title": "@inject_tag: validate:\"omitempty,tk_label,tk_label_length\""
+                    "description": "Name for this sub-organization"
                 },
                 "rootAuthenticator": {
-                    "$ref": "#/definitions/v1AuthenticatorParamsV2"
+                    "$ref": "#/definitions/v1AuthenticatorParamsV2",
+                    "description": "Root User authenticator for this new sub-organization"
                 }
             },
             "required": ["name", "rootAuthenticator"]
@@ -2773,22 +2425,20 @@
             "properties": {
                 "subOrganizationName": {
                     "type": "string",
-                    "description": "Name for this sub-organization",
-                    "title": "@inject_tag: validate:\"omitempty,tk_label,tk_label_length\""
+                    "description": "Name for this sub-organization"
                 },
                 "rootUsers": {
                     "type": "array",
                     "items": {
+                        "type": "object",
                         "$ref": "#/definitions/v1RootUserParams"
                     },
-                    "description": "Root users to create within this sub-organization",
-                    "title": "@inject_tag: validate:\"required\""
+                    "description": "Root users to create within this sub-organization"
                 },
                 "rootQuorumThreshold": {
                     "type": "integer",
                     "format": "int32",
-                    "description": "The threshold of unique approvals to reach root quorum. This value must be less than or equal to the number of root users",
-                    "title": "@inject_tag: validate:\"required\""
+                    "description": "The threshold of unique approvals to reach root quorum. This value must be less than or equal to the number of root users"
                 }
             },
             "required": ["subOrganizationName", "rootUsers", "rootQuorumThreshold"]
@@ -2828,16 +2478,14 @@
             "properties": {
                 "userTagName": {
                     "type": "string",
-                    "description": "Human-readable name for a User Tag.",
-                    "title": "@inject_tag: validate:\"required,tk_label,tk_label_length\""
+                    "description": "Human-readable name for a User Tag."
                 },
                 "userIds": {
                     "type": "array",
                     "items": {
                         "type": "string"
                     },
-                    "description": "A list of User IDs.",
-                    "title": "@inject_tag: validate:\"dive,uuid\""
+                    "description": "A list of User IDs."
                 }
             },
             "required": ["userTagName", "userIds"]
@@ -2886,10 +2534,10 @@
                 "users": {
                     "type": "array",
                     "items": {
+                        "type": "object",
                         "$ref": "#/definitions/v1UserParams"
                     },
-                    "description": "A list of Users.",
-                    "title": "@inject_tag: validate:\"required,dive,required\""
+                    "description": "A list of Users."
                 }
             },
             "required": ["users"]
@@ -2900,10 +2548,10 @@
                 "users": {
                     "type": "array",
                     "items": {
+                        "type": "object",
                         "$ref": "#/definitions/v1UserParamsV2"
                     },
-                    "description": "A list of Users.",
-                    "title": "@inject_tag: validate:\"required,dive,required\""
+                    "description": "A list of Users."
                 }
             },
             "required": ["users"]
@@ -2976,16 +2624,14 @@
             "properties": {
                 "userId": {
                     "type": "string",
-                    "description": "Unique identifier for a given User.",
-                    "title": "@inject_tag: validate:\"required,uuid\""
+                    "description": "Unique identifier for a given User."
                 },
                 "apiKeyIds": {
                     "type": "array",
                     "items": {
                         "type": "string"
                     },
-                    "description": "A list of API Key IDs.",
-                    "title": "@inject_tag: validate:\"required,dive,required,uuid\""
+                    "description": "A list of API Key IDs."
                 }
             },
             "required": ["userId", "apiKeyIds"]
@@ -3029,16 +2675,14 @@
             "properties": {
                 "userId": {
                     "type": "string",
-                    "description": "Unique identifier for a given User.",
-                    "title": "@inject_tag: validate:\"required,uuid\""
+                    "description": "Unique identifier for a given User."
                 },
                 "authenticatorIds": {
                     "type": "array",
                     "items": {
                         "type": "string"
                     },
-                    "description": "A list of Authenticator IDs.",
-                    "title": "@inject_tag: validate:\"required,dive,required,uuid\""
+                    "description": "A list of Authenticator IDs."
                 }
             },
             "required": ["userId", "authenticatorIds"]
@@ -3082,8 +2726,7 @@
             "properties": {
                 "invitationId": {
                     "type": "string",
-                    "description": "Unique identifier for a given Invitation object.",
-                    "title": "@inject_tag: validate:\"required,uuid\""
+                    "description": "Unique identifier for a given Invitation object."
                 }
             },
             "required": ["invitationId"]
@@ -3124,8 +2767,7 @@
             "properties": {
                 "organizationId": {
                     "type": "string",
-                    "description": "Unique identifier for a given Organization.",
-                    "title": "@inject_tag: validate:\"required,uuid\""
+                    "description": "Unique identifier for a given Organization."
                 }
             },
             "required": ["organizationId"]
@@ -3165,8 +2807,7 @@
             "properties": {
                 "policyId": {
                     "type": "string",
-                    "description": "Unique identifier for a given Policy.",
-                    "title": "@inject_tag: validate:\"required,uuid\""
+                    "description": "Unique identifier for a given Policy."
                 }
             },
             "required": ["policyId"]
@@ -3210,8 +2851,7 @@
                     "items": {
                         "type": "string"
                     },
-                    "description": "A list of Private Key Tag IDs.",
-                    "title": "@inject_tag: validate:\"required,dive,required,uuid\""
+                    "description": "A list of Private Key Tag IDs."
                 }
             },
             "required": ["privateKeyTagIds"]
@@ -3244,8 +2884,7 @@
                     "items": {
                         "type": "string"
                     },
-                    "description": "A list of User Tag IDs.",
-                    "title": "@inject_tag: validate:\"required,dive,required,uuid\""
+                    "description": "A list of User Tag IDs."
                 }
             },
             "required": ["userTagIds"]
@@ -3278,8 +2917,7 @@
                     "items": {
                         "type": "string"
                     },
-                    "description": "A list of User IDs.",
-                    "title": "@inject_tag: validate:\"required,dive,required,uuid\""
+                    "description": "A list of User IDs."
                 }
             },
             "required": ["userIds"]
@@ -3302,8 +2940,7 @@
             "properties": {
                 "privateKeyId": {
                     "type": "string",
-                    "description": "Unique identifier for a given Private Key.",
-                    "title": "@inject_tag: validate:\"required,uuid\""
+                    "description": "Unique identifier for a given Private Key."
                 }
             },
             "required": ["privateKeyId"]
@@ -3333,7 +2970,8 @@
                     "description": "Array of Activity Statuses filtering which Activities will be listed in the response."
                 },
                 "paginationOptions": {
-                    "$ref": "#/definitions/v1Pagination"
+                    "$ref": "#/definitions/v1Pagination",
+                    "description": "Parameters used for cursor-based pagination."
                 },
                 "filterByType": {
                     "type": "array",
@@ -3351,6 +2989,7 @@
                 "activities": {
                     "type": "array",
                     "items": {
+                        "type": "object",
                         "$ref": "#/definitions/v1Activity"
                     },
                     "description": "A list of Activities."
@@ -3390,7 +3029,8 @@
             "type": "object",
             "properties": {
                 "authenticator": {
-                    "$ref": "#/definitions/v1Authenticator"
+                    "$ref": "#/definitions/v1Authenticator",
+                    "description": "An authenticator."
                 }
             },
             "required": ["authenticator"]
@@ -3415,6 +3055,7 @@
                 "authenticators": {
                     "type": "array",
                     "items": {
+                        "type": "object",
                         "$ref": "#/definitions/v1Authenticator"
                     },
                     "description": "A list of authenticators."
@@ -3436,7 +3077,8 @@
             "type": "object",
             "properties": {
                 "organizationData": {
-                    "$ref": "#/definitions/v1OrganizationData"
+                    "$ref": "#/definitions/v1OrganizationData",
+                    "description": "Object representing the full current and deleted / disabled collection of Users, Policies, Private Keys, and Invitations attributable to a particular Organization."
                 }
             },
             "required": ["organizationData"]
@@ -3457,6 +3099,7 @@
                 "policies": {
                     "type": "array",
                     "items": {
+                        "type": "object",
                         "$ref": "#/definitions/v1Policy"
                     },
                     "description": "A list of Policies."
@@ -3482,7 +3125,8 @@
             "type": "object",
             "properties": {
                 "policy": {
-                    "$ref": "#/definitions/v1Policy"
+                    "$ref": "#/definitions/v1Policy",
+                    "description": "Object that codifies rules defining the actions that are permissible within an Organization."
                 }
             },
             "required": ["policy"]
@@ -3505,7 +3149,8 @@
             "type": "object",
             "properties": {
                 "privateKey": {
-                    "$ref": "#/definitions/v1PrivateKey"
+                    "$ref": "#/definitions/v1PrivateKey",
+                    "description": "Cryptographic public/private key pair that can be used for cryptocurrency needs or more generalized encryption."
                 }
             },
             "required": ["privateKey"]
@@ -3526,6 +3171,7 @@
                 "privateKeys": {
                     "type": "array",
                     "items": {
+                        "type": "object",
                         "$ref": "#/definitions/v1PrivateKey"
                     },
                     "description": "A list of Private Keys."
@@ -3551,7 +3197,8 @@
             "type": "object",
             "properties": {
                 "user": {
-                    "$ref": "#/definitions/v1User"
+                    "$ref": "#/definitions/v1User",
+                    "description": "Web and/or API user within your Organization."
                 }
             },
             "required": ["user"]
@@ -3572,6 +3219,7 @@
                 "users": {
                     "type": "array",
                     "items": {
+                        "type": "object",
                         "$ref": "#/definitions/v1User"
                     },
                     "description": "A list of Users."
@@ -3618,8 +3266,7 @@
                 "HASH_FUNCTION_SHA256",
                 "HASH_FUNCTION_KECCAK256",
                 "HASH_FUNCTION_NOT_APPLICABLE"
-            ],
-            "description": " - HASH_FUNCTION_UNSPECIFIED: Default value if a hash function is not set explicitly.\n - HASH_FUNCTION_NO_OP: No-op function. Useful if you want to pass raw digests to sign (ECDSA-only)\n - HASH_FUNCTION_SHA256: Standard SHA-256. Used in the Bitcoin ecosystem.\n - HASH_FUNCTION_KECCAK256: Keccak-256 (not the same as NIST SHA-3!).\nThis is the hash function used in the Ethereum ecosystem.\n - HASH_FUNCTION_NOT_APPLICABLE: Callers must use this enum value when signing with ed25519 keys.\nThis is because, unlike ECDSA, EdDSA's API does not support signing raw digests (see RFC 8032)."
+            ]
         },
         "v1Intent": {
             "type": "object",
@@ -3744,11 +3391,16 @@
                 "createPrivateKeysIntentV2": {
                     "$ref": "#/definitions/v1CreatePrivateKeysIntentV2"
                 },
+                "updateUserIntent": {
+                    "$ref": "#/definitions/v1UpdateUserIntent"
+                },
                 "updatePolicyIntent": {
                     "$ref": "#/definitions/v1UpdatePolicyIntent"
+                },
+                "setPaymentMethodIntentV2": {
+                    "$ref": "#/definitions/v1SetPaymentMethodIntentV2"
                 }
             },
-            "description": "Intent object crafted by Turnkey based on the user request, used to assess the permissibility of an action.",
             "required": ["createOrganizationIntent"]
         },
         "v1Invitation": {
@@ -3774,10 +3426,12 @@
                     "description": "A list of tags assigned to the Invitation recipient."
                 },
                 "accessType": {
-                    "$ref": "#/definitions/externaldatav1AccessType"
+                    "$ref": "#/definitions/externaldatav1AccessType",
+                    "description": "The User's permissible access method(s)."
                 },
                 "status": {
-                    "$ref": "#/definitions/v1InvitationStatus"
+                    "$ref": "#/definitions/v1InvitationStatus",
+                    "description": "The current processing status of a specified Invitation."
                 },
                 "createdAt": {
                     "$ref": "#/definitions/v1Timestamp"
@@ -3807,29 +3461,26 @@
             "properties": {
                 "receiverUserName": {
                     "type": "string",
-                    "description": "The name of the intended Invitation recipient.",
-                    "title": "@inject_tag: validate:\"required,tk_label_length,tk_label\""
+                    "description": "The name of the intended Invitation recipient."
                 },
                 "receiverUserEmail": {
                     "type": "string",
-                    "description": "The email address of the intended Invitation recipient.",
-                    "title": "@inject_tag: validate:\"required,email,tk_email\""
+                    "description": "The email address of the intended Invitation recipient."
                 },
                 "receiverUserTags": {
                     "type": "array",
                     "items": {
                         "type": "string"
                     },
-                    "description": "A list of tags assigned to the Invitation recipient.",
-                    "title": "@inject_tag: validate:\"dive,uuid\""
+                    "description": "A list of tags assigned to the Invitation recipient."
                 },
                 "accessType": {
-                    "$ref": "#/definitions/immutableactivityv1AccessType"
+                    "$ref": "#/definitions/immutableactivityv1AccessType",
+                    "description": "The User's permissible access method(s)."
                 },
                 "senderUserId": {
                     "type": "string",
-                    "description": "Unique identifier for the Sender of an Invitation.",
-                    "title": "@inject_tag: validate:\"required,uuid\""
+                    "description": "Unique identifier for the Sender of an Invitation."
                 }
             },
             "required": [
@@ -3869,36 +3520,42 @@
                 "users": {
                     "type": "array",
                     "items": {
+                        "type": "object",
                         "$ref": "#/definitions/v1User"
                     }
                 },
                 "policies": {
                     "type": "array",
                     "items": {
+                        "type": "object",
                         "$ref": "#/definitions/v1Policy"
                     }
                 },
                 "privateKeys": {
                     "type": "array",
                     "items": {
+                        "type": "object",
                         "$ref": "#/definitions/v1PrivateKey"
                     }
                 },
                 "invitations": {
                     "type": "array",
                     "items": {
+                        "type": "object",
                         "$ref": "#/definitions/v1Invitation"
                     }
                 },
                 "tags": {
                     "type": "array",
                     "items": {
+                        "type": "object",
                         "$ref": "#/definitions/datav1Tag"
                     }
                 },
                 "disabledPrivateKeys": {
                     "type": "array",
                     "items": {
+                        "type": "object",
                         "$ref": "#/definitions/v1PrivateKey"
                     }
                 },
@@ -3911,16 +3568,14 @@
                         "type": "string"
                     }
                 }
-            },
-            "description": "This proto definition is used in our external-facing APIs.\nIt's important to leverage annotations because they're used in our external interfaces."
+            }
         },
         "v1Pagination": {
             "type": "object",
             "properties": {
                 "limit": {
-                    "type": "integer",
-                    "format": "int32",
-                    "description": "A limit of the number of object to be returned, between 1 and 100. Defaults to 10 if omitted or set to 0."
+                    "type": "string",
+                    "description": "A limit of the number of object to be returned, between 1 and 100. Defaults to 10."
                 },
                 "before": {
                     "type": "string",
@@ -3934,8 +3589,7 @@
         },
         "v1PayloadEncoding": {
             "type": "string",
-            "enum": ["PAYLOAD_ENCODING_HEXADECIMAL", "PAYLOAD_ENCODING_TEXT_UTF8"],
-            "title": "- PAYLOAD_ENCODING_UNSPECIFIED: Default value if payload encoding is not set explicitly\n - PAYLOAD_ENCODING_HEXADECIMAL: Payload is encoded in hexadecimal\nWe accept 0x-prefixed or non-0x prefixed payloads.\nWe accept any casing (uppercase, lowercase, or mixed)\n - PAYLOAD_ENCODING_TEXT_UTF8: Payload is encoded as utf-8 text\nWill be converted to bytes for signature with Rust's standard String.as_bytes()"
+            "enum": ["PAYLOAD_ENCODING_HEXADECIMAL", "PAYLOAD_ENCODING_TEXT_UTF8"]
         },
         "v1Policy": {
             "type": "object",
@@ -3949,11 +3603,13 @@
                     "description": "Human-readable name for a Policy."
                 },
                 "effect": {
-                    "$ref": "#/definitions/externaldatav1Effect"
+                    "$ref": "#/definitions/externaldatav1Effect",
+                    "description": "The instruction to DENY or ALLOW a particular activity following policy selector(s)."
                 },
                 "selectors": {
                     "type": "array",
                     "items": {
+                        "type": "object",
                         "$ref": "#/definitions/externaldatav1Selector"
                     },
                     "description": "A list of simple functions each including a subject, target and boolean. See Policy Engine Language section for additional details."
@@ -4005,11 +3661,13 @@
                     "description": "Human-readable name for a Private Key."
                 },
                 "curve": {
-                    "$ref": "#/definitions/externaldatav1Curve"
+                    "$ref": "#/definitions/externaldatav1Curve",
+                    "description": "Cryptographic Curve used to generate a given Private Key."
                 },
                 "addresses": {
                     "type": "array",
                     "items": {
+                        "type": "object",
                         "$ref": "#/definitions/externaldatav1Address"
                     },
                     "description": "Derived cryptocurrency addresses for a given Private Key."
@@ -4040,27 +3698,25 @@
             "properties": {
                 "privateKeyName": {
                     "type": "string",
-                    "description": "Human-readable name for a Private Key.",
-                    "title": "@inject_tag: validate:\"required,tk_label_length,tk_label\""
+                    "description": "Human-readable name for a Private Key."
                 },
                 "curve": {
-                    "$ref": "#/definitions/immutableactivityv1Curve"
+                    "$ref": "#/definitions/immutableactivityv1Curve",
+                    "description": "Cryptographic Curve used to generate a given Private Key."
                 },
                 "privateKeyTags": {
                     "type": "array",
                     "items": {
                         "type": "string"
                     },
-                    "description": "A list of Private Key Tag IDs.",
-                    "title": "@inject_tag: validate:\"dive,uuid\""
+                    "description": "A list of Private Key Tag IDs."
                 },
                 "addressFormats": {
                     "type": "array",
                     "items": {
                         "$ref": "#/definitions/immutableactivityv1AddressFormat"
                     },
-                    "description": "Cryptocurrency-specific formats for a derived address (e.g., Ethereum).",
-                    "title": "@inject_tag: validate:\"dive\""
+                    "description": "Cryptocurrency-specific formats for a derived address (e.g., Ethereum)."
                 }
             },
             "required": [
@@ -4079,6 +3735,7 @@
                 "addresses": {
                     "type": "array",
                     "items": {
+                        "type": "object",
                         "$ref": "#/definitions/immutableactivityv1Address"
                     }
                 }
@@ -4092,12 +3749,10 @@
                 },
                 "type": {
                     "type": "string",
-                    "enum": ["public-key"],
-                    "title": "Must be literal string \"public-key\""
+                    "enum": ["public-key"]
                 },
                 "rawId": {
-                    "type": "string",
-                    "title": "ENCODING: base64url"
+                    "type": "string"
                 },
                 "authenticatorAttachment": {
                     "type": "string",
@@ -4136,8 +3791,7 @@
             "properties": {
                 "fingerprint": {
                     "type": "string",
-                    "description": "An artifact verifying a User's action.",
-                    "title": "@inject_tag: validate:\"required\""
+                    "description": "An artifact verifying a User's action."
                 }
             },
             "required": ["fingerprint"]
@@ -4259,40 +3913,40 @@
                 "createPrivateKeysResultV2": {
                     "$ref": "#/definitions/v1CreatePrivateKeysResultV2"
                 },
+                "updateUserResult": {
+                    "$ref": "#/definitions/v1UpdateUserResult"
+                },
                 "updatePolicyResult": {
                     "$ref": "#/definitions/v1UpdatePolicyResult"
                 }
-            },
-            "description": "Result of the intended action."
+            }
         },
         "v1RootUserParams": {
             "type": "object",
             "properties": {
                 "userName": {
                     "type": "string",
-                    "description": "Human-readable name for a User.",
-                    "title": "@inject_tag: validate:\"required,tk_label_length,tk_label\""
+                    "description": "Human-readable name for a User."
                 },
                 "userEmail": {
                     "type": "string",
-                    "description": "The user's email address.",
-                    "title": "@inject_tag: validate:\"omitempty,email,tk_email\""
+                    "description": "The user's email address."
                 },
                 "apiKeys": {
                     "type": "array",
                     "items": {
+                        "type": "object",
                         "$ref": "#/definitions/v1ApiKeyParams"
                     },
-                    "description": "A list of API Key parameters.",
-                    "title": "@inject_tag: validate:\"dive\""
+                    "description": "A list of API Key parameters."
                 },
                 "authenticators": {
                     "type": "array",
                     "items": {
+                        "type": "object",
                         "$ref": "#/definitions/v1AuthenticatorParamsV2"
                     },
-                    "description": "A list of Authenticator parameters.",
-                    "title": "@inject_tag: validate:\"dive\""
+                    "description": "A list of Authenticator parameters."
                 }
             },
             "required": ["userName", "apiKeys", "authenticators"]
@@ -4319,33 +3973,27 @@
             "properties": {
                 "number": {
                     "type": "string",
-                    "description": "The account number of the customer's credit card.",
-                    "title": "@inject_tag: validate:\"required,max=16,numeric\""
+                    "description": "The account number of the customer's credit card."
                 },
                 "cvv": {
                     "type": "string",
-                    "description": "The verification digits of the customer's credit card.",
-                    "title": "@inject_tag: validate:\"required,max=4,numeric\""
+                    "description": "The verification digits of the customer's credit card."
                 },
                 "expiryMonth": {
                     "type": "string",
-                    "description": "The month that the credit card expires.",
-                    "title": "@inject_tag: validate:\"required,numeric,len=2\""
+                    "description": "The month that the credit card expires."
                 },
                 "expiryYear": {
                     "type": "string",
-                    "description": "The year that the credit card expires.",
-                    "title": "@inject_tag: validate:\"required,numeric,len=4\""
+                    "description": "The year that the credit card expires."
                 },
                 "cardHolderEmail": {
                     "type": "string",
-                    "description": "The email that will receive invoices for the credit card.",
-                    "title": "@inject_tag: validate:\"required,email,tk_email\""
+                    "description": "The email that will receive invoices for the credit card."
                 },
                 "cardHolderName": {
                     "type": "string",
-                    "description": "The name associated with the credit card.",
-                    "title": "@inject_tag: validate:\"required,tk_label_length\""
+                    "description": "The name associated with the credit card."
                 }
             },
             "required": [
@@ -4357,6 +4005,24 @@
                 "cardHolderName"
             ]
         },
+        "v1SetPaymentMethodIntentV2": {
+            "type": "object",
+            "properties": {
+                "paymentMethodId": {
+                    "type": "string",
+                    "description": "The id of the payment method that was created clientside."
+                },
+                "cardHolderEmail": {
+                    "type": "string",
+                    "description": "The email that will receive invoices for the credit card."
+                },
+                "cardHolderName": {
+                    "type": "string",
+                    "description": "The name associated with the credit card."
+                }
+            },
+            "required": ["paymentMethodId", "cardHolderEmail", "cardHolderName"]
+        },
         "v1SetPaymentMethodResult": {
             "type": "object",
             "properties": {
@@ -4380,19 +4046,19 @@
             "properties": {
                 "privateKeyId": {
                     "type": "string",
-                    "description": "Unique identifier for a given Private Key.",
-                    "title": "@inject_tag: validate:\"required,uuid\""
+                    "description": "Unique identifier for a given Private Key."
                 },
                 "payload": {
                     "type": "string",
-                    "description": "Raw unsigned payload to be signed.",
-                    "title": "@inject_tag: validate:\"required\""
+                    "description": "Raw unsigned payload to be signed."
                 },
                 "encoding": {
-                    "$ref": "#/definitions/v1PayloadEncoding"
+                    "$ref": "#/definitions/v1PayloadEncoding",
+                    "description": "Encoding of the `payload` string. Turnkey uses this information to convert `payload` into bytes with the correct decoder (e.g. hex, utf8)."
                 },
                 "hashFunction": {
-                    "$ref": "#/definitions/v1HashFunction"
+                    "$ref": "#/definitions/v1HashFunction",
+                    "description": "Hash function to apply to payload bytes before signing. This field must be set to HASH_FUNCTION_NOT_APPLICABLE for EdDSA/ed25519 signature requests; configurable payload hashing is not supported by RFC 8032."
                 }
             },
             "required": ["privateKeyId", "payload", "encoding", "hashFunction"]
@@ -4441,13 +4107,11 @@
             "properties": {
                 "privateKeyId": {
                     "type": "string",
-                    "description": "Unique identifier for a given Private Key.",
-                    "title": "@inject_tag: validate:\"required,uuid\""
+                    "description": "Unique identifier for a given Private Key."
                 },
                 "unsignedTransaction": {
                     "type": "string",
-                    "description": "Raw unsigned transaction to be signed by a particular Private Key.",
-                    "title": "@inject_tag: validate:\"required\""
+                    "description": "Raw unsigned transaction to be signed by a particular Private Key."
                 },
                 "type": {
                     "$ref": "#/definitions/immutableactivityv1TransactionType"
@@ -4523,8 +4187,7 @@
                     "items": {
                         "type": "string"
                     },
-                    "description": "Additional origins requests are allowed from besides Turnkey origins",
-                    "title": "@inject_tag: validate:\"required\""
+                    "description": "Additional origins requests are allowed from besides Turnkey origins"
                 }
             },
             "required": ["allowedOrigins"]
@@ -4558,16 +4221,15 @@
             "properties": {
                 "policyId": {
                     "type": "string",
-                    "description": "Unique identifier for a given Policy.",
-                    "title": "@inject_tag: validate:\"uuid\""
+                    "description": "Unique identifier for a given Policy."
                 },
                 "policyName": {
                     "type": "string",
-                    "description": "Human-readable name for a Policy.",
-                    "title": "@inject_tag: validate:\"omitempty,tk_label,tk_label_length\""
+                    "description": "Human-readable name for a Policy."
                 },
                 "policyEffect": {
-                    "$ref": "#/definitions/immutableactivityv1Effect"
+                    "$ref": "#/definitions/immutableactivityv1Effect",
+                    "description": "The instruction to DENY or ALLOW an activity (optional)."
                 },
                 "policyCondition": {
                     "type": "string",
@@ -4620,29 +4282,25 @@
             "properties": {
                 "privateKeyTagId": {
                     "type": "string",
-                    "description": "Unique identifier for a given Private Key Tag.",
-                    "title": "@inject_tag: validate:\"uuid\""
+                    "description": "Unique identifier for a given Private Key Tag."
                 },
                 "newPrivateKeyTagName": {
                     "type": "string",
-                    "description": "The new, human-readable name for the tag with the given ID.",
-                    "title": "@inject_tag: validate:\"omitempty,tk_label,tk_label_length\""
+                    "description": "The new, human-readable name for the tag with the given ID."
                 },
                 "addPrivateKeyIds": {
                     "type": "array",
                     "items": {
                         "type": "string"
                     },
-                    "description": "A list of Private Keys IDs to add this tag to.",
-                    "title": "@inject_tag: validate:\"dive,uuid\""
+                    "description": "A list of Private Keys IDs to add this tag to."
                 },
                 "removePrivateKeyIds": {
                     "type": "array",
                     "items": {
                         "type": "string"
                     },
-                    "description": "A list of Private Key IDs to remove this tag from.",
-                    "title": "@inject_tag: validate:\"dive,uuid\""
+                    "description": "A list of Private Key IDs to remove this tag from."
                 }
             },
             "required": ["privateKeyTagId", "addPrivateKeyIds", "removePrivateKeyIds"]
@@ -4684,16 +4342,14 @@
                 "threshold": {
                     "type": "integer",
                     "format": "int32",
-                    "description": "The threshold of unique approvals to reach quorum.",
-                    "title": "@inject_tag: validate:\"required\""
+                    "description": "The threshold of unique approvals to reach quorum."
                 },
                 "userIds": {
                     "type": "array",
                     "items": {
                         "type": "string"
                     },
-                    "description": "The unique identifiers of users who comprise the quorum set.",
-                    "title": "@inject_tag: validate:\"dive,uuid\""
+                    "description": "The unique identifiers of users who comprise the quorum set."
                 }
             },
             "required": ["threshold", "userIds"]
@@ -4722,34 +4378,86 @@
         "v1UpdateRootQuorumResult": {
             "type": "object"
         },
+        "v1UpdateUserIntent": {
+            "type": "object",
+            "properties": {
+                "userId": {
+                    "type": "string",
+                    "description": "Unique identifier for a given User."
+                },
+                "userName": {
+                    "type": "string",
+                    "description": "Human-readable name for a User."
+                },
+                "userEmail": {
+                    "type": "string",
+                    "description": "The user's email address."
+                },
+                "userTagIds": {
+                    "type": "array",
+                    "items": {
+                        "type": "string"
+                    },
+                    "description": "An updated list of User Tags to apply to this User."
+                }
+            },
+            "required": ["userId"]
+        },
+        "v1UpdateUserRequest": {
+            "type": "object",
+            "properties": {
+                "type": {
+                    "type": "string",
+                    "enum": ["ACTIVITY_TYPE_UPDATE_USER"]
+                },
+                "timestampMs": {
+                    "type": "string",
+                    "description": "Timestamp (in milliseconds) of the request, used to verify liveness of user requests."
+                },
+                "organizationId": {
+                    "type": "string",
+                    "description": "Unique identifier for a given Organization."
+                },
+                "parameters": {
+                    "$ref": "#/definitions/v1UpdateUserIntent"
+                }
+            },
+            "required": ["type", "timestampMs", "organizationId", "parameters"]
+        },
+        "v1UpdateUserResult": {
+            "type": "object",
+            "properties": {
+                "userId": {
+                    "type": "string",
+                    "description": "A User ID."
+                }
+            },
+            "required": ["userId"]
+        },
         "v1UpdateUserTagIntent": {
             "type": "object",
             "properties": {
                 "userTagId": {
                     "type": "string",
-                    "description": "Unique identifier for a given User Tag.",
-                    "title": "@inject_tag: validate:\"uuid\""
+                    "description": "Unique identifier for a given User Tag."
                 },
                 "newUserTagName": {
                     "type": "string",
-                    "description": "The new, human-readable name for the tag with the given ID.",
-                    "title": "@inject_tag: validate:\"omitempty,tk_label,tk_label_length\""
+                    "description": "The new, human-readable name for the tag with the given ID."
                 },
                 "addUserIds": {
                     "type": "array",
                     "items": {
                         "type": "string"
                     },
-                    "description": "A list of User IDs to add this tag to.",
-                    "title": "@inject_tag: validate:\"dive,uuid\""
+                    "description": "A list of User IDs to add this tag to."
                 },
                 "removeUserIds": {
                     "type": "array",
                     "items": {
                         "type": "string"
                     },
-                    "description": "A list of User IDs to remove this tag from.",
-                    "title": "@inject_tag: validate:\"dive,uuid\""
+                    "description": "A list of User IDs to remove this tag from."
                 }
             },
             "required": ["userTagId", "addUserIds", "removeUserIds"]
@@ -4798,15 +4506,16 @@
                 },
                 "userEmail": {
                     "type": "string",
-                    "description": "The user's email address.",
-                    "title": "some users do not have emails (programmatic users)"
+                    "description": "The user's email address."
                 },
                 "accessType": {
-                    "$ref": "#/definitions/externaldatav1AccessType"
+                    "$ref": "#/definitions/externaldatav1AccessType",
+                    "description": "The User's permissible access method(s)."
                 },
                 "authenticators": {
                     "type": "array",
                     "items": {
+                        "type": "object",
                         "$ref": "#/definitions/v1Authenticator"
                     },
                     "description": "A list of Authenticator parameters."
@@ -4814,6 +4523,7 @@
                 "apiKeys": {
                     "type": "array",
                     "items": {
+                        "type": "object",
                         "$ref": "#/definitions/v1ApiKey"
                     },
                     "description": "A list of API Key parameters."
@@ -4848,40 +4558,38 @@
             "properties": {
                 "userName": {
                     "type": "string",
-                    "description": "Human-readable name for a User.",
-                    "title": "@inject_tag: validate:\"required,tk_label_length,tk_label\""
+                    "description": "Human-readable name for a User."
                 },
                 "userEmail": {
                     "type": "string",
-                    "description": "The user's email address.",
-                    "title": "@inject_tag: validate:\"omitempty,email,tk_email\""
+                    "description": "The user's email address."
                 },
                 "accessType": {
-                    "$ref": "#/definitions/immutableactivityv1AccessType"
+                    "$ref": "#/definitions/immutableactivityv1AccessType",
+                    "description": "The User's permissible access method(s)."
                 },
                 "apiKeys": {
                     "type": "array",
                     "items": {
+                        "type": "object",
                         "$ref": "#/definitions/v1ApiKeyParams"
                     },
-                    "description": "A list of API Key parameters.",
-                    "title": "@inject_tag: validate:\"dive,uuid\""
+                    "description": "A list of API Key parameters."
                 },
                 "authenticators": {
                     "type": "array",
                     "items": {
+                        "type": "object",
                         "$ref": "#/definitions/v1AuthenticatorParams"
                     },
-                    "description": "A list of Authenticator parameters.",
-                    "title": "@inject_tag: validate:\"dive\""
+                    "description": "A list of Authenticator parameters."
                 },
                 "userTags": {
                     "type": "array",
                     "items": {
                         "type": "string"
                     },
-                    "description": "A list of User Tag IDs.",
-                    "title": "@inject_tag: validate:\"dive,uuid\""
+                    "description": "A list of User Tag IDs."
                 }
             },
             "required": [
@@ -4897,40 +4605,38 @@
             "properties": {
                 "userName": {
                     "type": "string",
-                    "description": "Human-readable name for a User.",
-                    "title": "@inject_tag: validate:\"required,tk_label_length,tk_label\""
+                    "description": "Human-readable name for a User."
                 },
                 "userEmail": {
                     "type": "string",
-                    "description": "The user's email address.",
-                    "title": "@inject_tag: validate:\"omitempty,email,tk_email\""
+                    "description": "The user's email address."
                 },
                 "accessType": {
-                    "$ref": "#/definitions/immutableactivityv1AccessType"
+                    "$ref": "#/definitions/immutableactivityv1AccessType",
+                    "description": "The User's permissible access method(s)."
                 },
                 "apiKeys": {
                     "type": "array",
                     "items": {
+                        "type": "object",
                         "$ref": "#/definitions/v1ApiKeyParams"
                     },
-                    "description": "A list of API Key parameters.",
-                    "title": "@inject_tag: validate:\"dive,uuid\""
+                    "description": "A list of API Key parameters."
                 },
                 "authenticators": {
                     "type": "array",
                     "items": {
+                        "type": "object",
                         "$ref": "#/definitions/v1AuthenticatorParamsV2"
                     },
-                    "description": "A list of Authenticator parameters.",
-                    "title": "@inject_tag: validate:\"dive\""
+                    "description": "A list of Authenticator parameters."
                 },
                 "userTags": {
                     "type": "array",
                     "items": {
                         "type": "string"
                     },
-                    "description": "A list of User Tag IDs.",
-                    "title": "@inject_tag: validate:\"dive,uuid\""
+                    "description": "A list of User Tag IDs."
                 }
             },
             "required": [
@@ -4953,7 +4659,8 @@
                     "description": "Unique identifier for a given User."
                 },
                 "user": {
-                    "$ref": "#/definitions/v1User"
+                    "$ref": "#/definitions/v1User",
+                    "description": "Web and/or API user within your Organization."
                 },
                 "activityId": {
                     "type": "string",
@@ -4983,7 +4690,6 @@
                     "$ref": "#/definitions/v1Timestamp"
                 }
             },
-            "description": "Object representing a particular User's approval or rejection of a Consensus request, including all relevant metadata.",
             "required": [
                 "id",
                 "userId",
@@ -5017,7 +4723,6 @@
                     "description": "The base64 url encoded signature bytes contained within the WebAuthn assertion response."
                 }
             },
-            "title": "We expect this to be passed in as a JSON-encoded, then base64-encoded string within a X-Stamp-Webauthn header",
             "required": [
                 "credentialId",
                 "clientDataJson",
@@ -5031,11 +4736,37 @@
             "type": "apiKey",
             "name": "X-Stamp",
             "in": "header"
+        },
+        "AuthenticatorAuth": {
+            "type": "apiKey",
+            "name": "X-Stamp-WebAuthn",
+            "in": "header"
         }
     },
     "security": [
         {
             "ApiKeyAuth": []
+        },
+        {
+            "AuthenticatorAuth": []
+        }
+    ],
+    "x-tagGroups": [
+        {
+            "name": "ORGANIZATIONS",
+            "tags": ["Organizations", "Invitations", "Policies"]
+        },
+        {
+            "name": "PRIVATE KEYS",
+            "tags": ["Private Keys", "Private Key Tags"]
+        },
+        {
+            "name": "USERS",
+            "tags": ["Users", "User Tags", "Authenticators", "API Keys", "Who am I?"]
+        },
+        {
+            "name": "ACTIVITIES",
+            "tags": ["Activities", "Consensus"]
         }
     ]
 }