auth0 7.0.0 → 7.2.0

package/dist/cjs/management/api/types/types.d.ts

@@ -252,6 +252,9 @@ export declare const OauthScope: {
     /**
      * Read Events */
     readonly ReadEvents: "read:events";
+    /**
+     * Update Experimentation */
+    readonly UpdateExperimentation: "update:experimentation";
     /**
      * Create Flows */
     readonly CreateFlows: "create:flows";
@@ -732,15 +735,9 @@ export declare const OauthScope: {
     /**
      * Delete Organization Client Associations */
     readonly DeleteOrganizationClients: "delete:organization_clients";
-    /**
-     * Create Organization Templates */
-    readonly CreateOrganizationTemplates: "create:organization_templates";
     /**
      * Read Organization Templates */
     readonly ReadOrganizationTemplates: "read:organization_templates";
-    /**
-     * Update Organization Templates */
-    readonly UpdateOrganizationTemplates: "update:organization_templates";
     /**
      * Create Network ACL Keys */
     readonly CreateNetworkAclKeys: "create:network_acl_keys";
@@ -1303,6 +1300,12 @@ export interface AddOrganizationConnectionResponseContent {
     is_signup_enabled?: boolean | undefined;
     connection?: Management.OrganizationConnectionInformation | undefined;
 }
+export interface AdvanceRampResponseContent {
+    experiment_id: string;
+    from_level: number;
+    to_level: number;
+    current_level: number;
+}
 /**
  * Arbitrary key-value metadata for the agent
  */
@@ -1324,6 +1327,13 @@ export interface AgentResponseContent {
  * IP address to check.
  */
 export type AnomalyIpFormat = string;
+/**
+ * Anonymous sessions configuration for this client.
+ */
+export interface AnonymousSessions {
+    /** If set to true, this client is allowed to create anonymous sessions. */
+    active: boolean;
+}
 /**
  * Data related to the user that does affect the application's core functionality.
  */
@@ -1979,6 +1989,10 @@ export interface CimdValidationResult {
 export interface Client {
     /** ID of this client. */
     client_id?: string | undefined;
+    /** The ISO 8601 timestamp of when this client was created. */
+    created_at?: string | undefined;
+    /** The ISO 8601 timestamp of when this client was last updated. */
+    updated_at?: string | undefined;
     /** Name of the tenant this client belongs to. */
     tenant?: string | undefined;
     /** Name of this client (min length: 1 character, does not allow `<` or `>`). */
@@ -2069,6 +2083,7 @@ export interface Client {
     b2b_integration_configuration?: Management.B2BIntegrationConfiguration | undefined;
     my_organization_configuration?: Management.ClientMyOrganizationResponseConfiguration | undefined;
     identity_assertion_authorization_grant?: Management.IdentityAssertionAuthorizationGrant | undefined;
+    anonymous_sessions?: Management.AnonymousSessions | undefined;
     third_party_security_mode?: Management.ClientThirdPartySecurityModeEnum | undefined;
     redirection_policy?: Management.ClientRedirectionPolicyEnum | undefined;
     /** The identifier of the resource server that this client is linked to. */
@@ -2787,6 +2802,10 @@ export interface ClientMyOrganizationPatchConfiguration {
     connection_deletion_behavior: Management.ClientMyOrganizationDeletionBehaviorEnum;
     /** The client ID this client uses while creating invitations through My Organization API. */
     invitation_landing_client_id?: string | undefined;
+    /** When true, limits the permissions that organization admins can assign to members to only those held by the admin themselves. */
+    enforce_permission_ceiling?: boolean | undefined;
+    /** When true, prevents organization admins from assigning permissions to themselves. */
+    enforce_self_assignment_restriction?: boolean | undefined;
 }
 /**
  * Configuration related to the My Organization Configuration for the client.
@@ -2802,6 +2821,10 @@ export interface ClientMyOrganizationPostConfiguration {
     connection_deletion_behavior: Management.ClientMyOrganizationDeletionBehaviorEnum;
     /** The client ID this client uses while creating invitations through My Organization API. */
     invitation_landing_client_id?: string | undefined;
+    /** When true, limits the permissions that organization admins can assign to members to only those held by the admin themselves. */
+    enforce_permission_ceiling?: boolean | undefined;
+    /** When true, prevents organization admins from assigning permissions to themselves. */
+    enforce_self_assignment_restriction?: boolean | undefined;
 }
 /**
  * Configuration related to the My Organization Configuration for the client.
@@ -2817,6 +2840,10 @@ export interface ClientMyOrganizationResponseConfiguration {
     connection_deletion_behavior: Management.ClientMyOrganizationDeletionBehaviorEnum;
     /** The client ID this client uses while creating invitations through My Organization API. */
     invitation_landing_client_id?: string | undefined;
+    /** When true, limits the permissions that organization admins can assign to members to only those held by the admin themselves. */
+    enforce_permission_ceiling?: boolean | undefined;
+    /** When true, prevents organization admins from assigning permissions to themselves. */
+    enforce_self_assignment_restriction?: boolean | undefined;
 }
 /**
  * The third-party client access configuration for the My Organization Configuration.
@@ -3964,23 +3991,14 @@ export declare const ConnectionIdentityProviderEnum: {
     readonly Yahoo: "yahoo";
     readonly Yandex: "yandex";
     readonly NotionMcp: "notion-mcp";
-    readonly AsanaMcp: "asana-mcp";
-    readonly AtlassianMcp: "atlassian-mcp";
+    readonly Asana: "asana";
+    readonly Atlassian: "atlassian";
     readonly CloudflareMcp: "cloudflare-mcp";
-    readonly DocusignMcp: "docusign-mcp";
-    readonly FigmaMcp: "figma-mcp";
-    readonly GitlabMcp: "gitlab-mcp";
-    readonly GustoMcp: "gusto-mcp";
-    readonly HerokuMcp: "heroku-mcp";
+    readonly Gitlab: "gitlab";
     readonly HubspotMcp: "hubspot-mcp";
-    readonly IntercomMcp: "intercom-mcp";
     readonly LinearMcp: "linear-mcp";
-    readonly PagerdutyMcp: "pagerduty-mcp";
     readonly SentryMcp: "sentry-mcp";
-    readonly SlackMcp: "slack-mcp";
-    readonly SupabaseMcp: "supabase-mcp";
-    readonly VercelMcp: "vercel-mcp";
-    readonly XeroMcp: "xero-mcp";
+    readonly Slack: "slack";
 };
 export type ConnectionIdentityProviderEnum = (typeof ConnectionIdentityProviderEnum)[keyof typeof ConnectionIdentityProviderEnum];
 /**
@@ -6860,23 +6878,14 @@ export declare const ConnectionStrategyEnum: {
     readonly Yahoo: "yahoo";
     readonly Yandex: "yandex";
     readonly NotionMcp: "notion-mcp";
-    readonly AsanaMcp: "asana-mcp";
-    readonly AtlassianMcp: "atlassian-mcp";
+    readonly Asana: "asana";
+    readonly Atlassian: "atlassian";
     readonly CloudflareMcp: "cloudflare-mcp";
-    readonly DocusignMcp: "docusign-mcp";
-    readonly FigmaMcp: "figma-mcp";
-    readonly GitlabMcp: "gitlab-mcp";
-    readonly GustoMcp: "gusto-mcp";
-    readonly HerokuMcp: "heroku-mcp";
+    readonly Gitlab: "gitlab";
     readonly HubspotMcp: "hubspot-mcp";
-    readonly IntercomMcp: "intercom-mcp";
     readonly LinearMcp: "linear-mcp";
-    readonly PagerdutyMcp: "pagerduty-mcp";
     readonly SentryMcp: "sentry-mcp";
-    readonly SlackMcp: "slack-mcp";
-    readonly SupabaseMcp: "supabase-mcp";
-    readonly VercelMcp: "vercel-mcp";
-    readonly XeroMcp: "xero-mcp";
+    readonly Slack: "slack";
     readonly Auth0Adldap: "auth0-adldap";
 };
 export type ConnectionStrategyEnum = (typeof ConnectionStrategyEnum)[keyof typeof ConnectionStrategyEnum];
@@ -7291,6 +7300,13 @@ export interface CreateActionResponseContent {
     /** The list of action modules and their versions used by this action. */
     modules?: Management.ActionModuleReference[] | undefined;
 }
+/**
+ * Anonymous sessions configuration for this client.
+ */
+export interface CreateAnonymousSessions {
+    /** If set to true, this client is allowed to create anonymous sessions. */
+    active: boolean;
+}
 /**
  * Phone provider configuration schema
  */
@@ -7354,6 +7370,10 @@ export interface CreateClientGrantResponseContent {
 export interface CreateClientResponseContent {
     /** ID of this client. */
     client_id?: string | undefined;
+    /** The ISO 8601 timestamp of when this client was created. */
+    created_at?: string | undefined;
+    /** The ISO 8601 timestamp of when this client was last updated. */
+    updated_at?: string | undefined;
     /** Name of the tenant this client belongs to. */
     tenant?: string | undefined;
     /** Name of this client (min length: 1 character, does not allow `<` or `>`). */
@@ -7444,6 +7464,7 @@ export interface CreateClientResponseContent {
     b2b_integration_configuration?: Management.B2BIntegrationConfiguration | undefined;
     my_organization_configuration?: Management.ClientMyOrganizationResponseConfiguration | undefined;
     identity_assertion_authorization_grant?: Management.IdentityAssertionAuthorizationGrant | undefined;
+    anonymous_sessions?: Management.AnonymousSessions | undefined;
     third_party_security_mode?: Management.ClientThirdPartySecurityModeEnum | undefined;
     redirection_policy?: Management.ClientRedirectionPolicyEnum | undefined;
     /** The identifier of the resource server that this client is linked to. */
@@ -8953,6 +8974,7 @@ export interface CreateOrganizationAllConnectionResponseContent {
     /** Determines whether organization signup should be enabled for this organization connection. Only applicable for database connections. Default: false. */
     is_signup_enabled?: boolean | undefined;
     organization_access_level?: Management.OrganizationAccessLevelEnum | undefined;
+    organization_member_access_level?: Management.OrganizationMemberAccessLevelEnum | undefined;
     /** Whether the connection is enabled for the organization. */
     is_enabled?: boolean | undefined;
     /** Connection identifier. */
@@ -9089,7 +9111,10 @@ export interface CreateResourceServerResponseContent {
     token_lifetime_for_web?: number | undefined;
     /** Whether authorization polices are enforced (true) or unenforced (false). */
     enforce_policies?: boolean | undefined;
+    /** Expiration value (in seconds) for anonymous-session access tokens issued for this API. */
+    token_lifetime_for_anonymous_access_tokens?: number | undefined;
     token_dialect?: Management.ResourceServerTokenDialectResponseEnum | undefined;
+    access_token?: (Management.ResourceServerAccessToken | null) | undefined;
     token_encryption?: (Management.ResourceServerTokenEncryption | null) | undefined;
     consent_policy?: (Management.ResourceServerConsentPolicyEnum | null) | undefined;
     authorization_details?: (unknown[] | null) | undefined;
@@ -9730,7 +9755,7 @@ export declare const DeviceCredentialPublicKeyTypeEnum: {
     readonly PublicKey: "public_key";
 };
 export type DeviceCredentialPublicKeyTypeEnum = (typeof DeviceCredentialPublicKeyTypeEnum)[keyof typeof DeviceCredentialPublicKeyTypeEnum];
-/** Type of credentials to retrieve. Must be `public_key`, `refresh_token` or `rotating_refresh_token`. The property will default to `refresh_token` when paging is requested */
+/** Type of credentials to retrieve. Must be `public_key`, `refresh_token` or `rotating_refresh_token`. If none is provided a combined list of `refresh_tokens` and `public_keys` will be returned (and no `rotating_refresh_token`), in this case `page`, `per_page` and `include_totals` will be ignored. */
 export declare const DeviceCredentialTypeEnum: {
     readonly PublicKey: "public_key";
     readonly RefreshToken: "refresh_token";
@@ -27317,6 +27342,10 @@ export interface GetClientGrantResponseContent {
 export interface GetClientResponseContent {
     /** ID of this client. */
     client_id?: string | undefined;
+    /** The ISO 8601 timestamp of when this client was created. */
+    created_at?: string | undefined;
+    /** The ISO 8601 timestamp of when this client was last updated. */
+    updated_at?: string | undefined;
     /** Name of the tenant this client belongs to. */
     tenant?: string | undefined;
     /** Name of this client (min length: 1 character, does not allow `<` or `>`). */
@@ -27407,6 +27436,7 @@ export interface GetClientResponseContent {
     b2b_integration_configuration?: Management.B2BIntegrationConfiguration | undefined;
     my_organization_configuration?: Management.ClientMyOrganizationResponseConfiguration | undefined;
     identity_assertion_authorization_grant?: Management.IdentityAssertionAuthorizationGrant | undefined;
+    anonymous_sessions?: Management.AnonymousSessions | undefined;
     third_party_security_mode?: Management.ClientThirdPartySecurityModeEnum | undefined;
     redirection_policy?: Management.ClientRedirectionPolicyEnum | undefined;
     /** The identifier of the resource server that this client is linked to. */
@@ -27560,6 +27590,12 @@ export interface GetDirectoryProvisioningResponseContent {
     /** The error message of the last synchronization, if any */
     last_synchronization_error?: string | undefined;
 }
+export interface GetEmailFactorSettingsResponseContent {
+    /** The length of the OTP code. */
+    otp_length: number;
+    /** The OTP expiration time in seconds. */
+    otp_expiration_time: number;
+}
 export interface GetEmailProviderResponseContent {
     /** Name of the email provider. Can be `mailgun`, `mandrill`, `sendgrid`, `resend`, `ses`, `sparkpost`, `smtp`, `azure_cs`, `ms365`, or `custom`. */
     name?: string | undefined;
@@ -27794,6 +27830,16 @@ export interface GetGuardianFactorsProviderSnsResponseContent {
     sns_apns_platform_application_arn?: (string | null) | undefined;
     sns_gcm_platform_application_arn?: (string | null) | undefined;
 }
+export interface GetGuardianSettingsResponseContent {
+    /** Determines whether to display the "Remember Me" checkbox on the MFA prompt in Universal Login. */
+    display_remember_me_checkbox: boolean;
+    /** Determines the default state of the "Remember Me" checkbox on the MFA prompt in Universal Login. */
+    remember_me_default_value: boolean;
+    /** Duration of inactivity after which the user will be prompted for MFA. Represented as seconds. Minimum duration is 1 hour, maximum is 30 days, and cannot exceed the overall timeout. */
+    mfa_session_inactivity_timeout: number;
+    /** Maximum duration after which the user will be prompted for MFA regardless of activity. Represented as seconds. Minimum duration is 1 hour, maximum is 90 days. */
+    mfa_session_overall_timeout: number;
+}
 export interface GetHookResponseContent {
     /** Trigger ID */
     triggerId?: string | undefined;
@@ -27951,6 +27997,7 @@ export interface GetOrganizationAllConnectionResponseContent {
     /** Determines whether organization signup should be enabled for this organization connection. Only applicable for database connections. Default: false. */
     is_signup_enabled?: boolean | undefined;
     organization_access_level?: Management.OrganizationAccessLevelEnum | undefined;
+    organization_member_access_level?: Management.OrganizationMemberAccessLevelEnum | undefined;
     /** Whether the connection is enabled for the organization. */
     is_enabled?: boolean | undefined;
     /** Connection identifier. */
@@ -28063,6 +28110,12 @@ export interface GetOrganizationResponseContent {
  * An object containing template partials for a group of screens.
  */
 export type GetPartialsResponseContent = Record<string, unknown>;
+export interface GetPhoneFactorSettingsResponseContent {
+    /** The length of the OTP code. */
+    otp_length: number;
+    /** The OTP expiration time in seconds. */
+    otp_expiration_time: number;
+}
 export interface GetPhoneProviderProtectionResponseContent {
     type: Management.PhoneProviderProtectionBackoffStrategyEnum;
     /** Accepts any additional properties */
@@ -28147,7 +28200,10 @@ export interface GetResourceServerResponseContent {
     token_lifetime_for_web?: number | undefined;
     /** Whether authorization polices are enforced (true) or unenforced (false). */
     enforce_policies?: boolean | undefined;
+    /** Expiration value (in seconds) for anonymous-session access tokens issued for this API. */
+    token_lifetime_for_anonymous_access_tokens?: number | undefined;
     token_dialect?: Management.ResourceServerTokenDialectResponseEnum | undefined;
+    access_token?: (Management.ResourceServerAccessToken | null) | undefined;
     token_encryption?: (Management.ResourceServerTokenEncryption | null) | undefined;
     consent_policy?: (Management.ResourceServerConsentPolicyEnum | null) | undefined;
     authorization_details?: (unknown[] | null) | undefined;
@@ -28344,6 +28400,7 @@ export interface GetTenantSettingsResponseContent {
     default_redirection_uri?: string | undefined;
     /** Supported locales for the user interface. */
     enabled_locales?: Management.SupportedLocales[] | undefined;
+    access_token?: (Management.ResourceServerAccessToken | null) | undefined;
     security_headers?: (Management.TenantSettingsNullableSecurityHeaders | null) | undefined;
     session_cookie?: (Management.SessionCookieSchema | null) | undefined;
     sessions?: (Management.TenantSettingsSessions | null) | undefined;
@@ -29192,11 +29249,6 @@ export interface ListOrganizationRoleMembersResponseContent {
     /** Cursor for the next page of results. Absent when there are no more results. */
     next?: string | undefined;
 }
-export interface ListOrganizationTemplatesPaginatedResponseContent {
-    /** A cursor to be used as the "from" query parameter for the next page of results. */
-    next?: string | undefined;
-    organization_templates?: Management.OrganizationTemplate[] | undefined;
-}
 export interface ListOrganizationsPaginatedResponseContent {
     next?: string | undefined;
     organizations?: Management.Organization[] | undefined;
@@ -29271,12 +29323,6 @@ export interface ListSynchronizedGroupsResponseContent {
     /** The cursor to be used as the "from" query parameter for the next page of results. */
     next?: string | undefined;
 }
-export interface ListTemplateOrganizationsPaginatedResponseContent {
-    /** A cursor to be used as the "from" query parameter for the next page of results. */
-    next?: string | undefined;
-    /** The list of organizations assigned to this template. */
-    organizations: Management.OrganizationTemplateAssignedOrganization[];
-}
 export interface ListTokenExchangeProfileResponseContent {
     /** Opaque identifier for use with the <i>from</i> query parameter for the next page of results.<br/>This identifier is valid for 24 hours. */
     next?: string | undefined;
@@ -30147,6 +30193,7 @@ export interface OrganizationAllConnectionPost {
     /** Determines whether organization signup should be enabled for this organization connection. Only applicable for database connections. Default: false. */
     is_signup_enabled?: boolean | undefined;
     organization_access_level?: Management.OrganizationAccessLevelEnum | undefined;
+    organization_member_access_level?: Management.OrganizationMemberAccessLevelEnum | undefined;
     /** Whether the connection is enabled for the organization. */
     is_enabled?: boolean | undefined;
     /** Connection identifier. */
@@ -30320,6 +30367,22 @@ export interface OrganizationMember {
     email?: string | undefined;
     roles?: Management.OrganizationMemberRole[] | undefined;
 }
+/** Access level for the organization member (e.g., "none", "full"). */
+export declare const OrganizationMemberAccessLevelEnum: {
+    readonly None: "none";
+    readonly Readonly: "readonly";
+    readonly Limited: "limited";
+    readonly Full: "full";
+};
+export type OrganizationMemberAccessLevelEnum = (typeof OrganizationMemberAccessLevelEnum)[keyof typeof OrganizationMemberAccessLevelEnum];
+/** Access level for the organization member (e.g., "none", "full"). */
+export declare const OrganizationMemberAccessLevelEnumWithNull: {
+    readonly None: "none";
+    readonly Readonly: "readonly";
+    readonly Limited: "limited";
+    readonly Full: "full";
+};
+export type OrganizationMemberAccessLevelEnumWithNull = (typeof OrganizationMemberAccessLevelEnumWithNull)[keyof typeof OrganizationMemberAccessLevelEnumWithNull];
 export interface OrganizationMemberEffectiveRole {
     /** Role ID */
     id: string;
@@ -30345,6 +30408,13 @@ export interface OrganizationMemberRole {
  * Metadata associated with the organization, in the form of an object with string values (max 255 chars). Maximum of 25 metadata properties allowed.
  */
 export type OrganizationMetadata = Record<string, string | null>;
+/** Field name to sort results by in ascending order only. Defaults to insertion order (oldest first) if not provided. */
+export declare const OrganizationSortFieldEnum: {
+    readonly Name: "name";
+    readonly DisplayName: "display_name";
+    readonly CreatedAt: "created_at";
+};
+export type OrganizationSortFieldEnum = (typeof OrganizationSortFieldEnum)[keyof typeof OrganizationSortFieldEnum];
 export interface OrganizationTemplate {
     /** Organization Template identifier. */
     id?: string | undefined;
@@ -30386,13 +30456,6 @@ export declare const OrganizationTemplateAllowedStrategyEnum: {
     readonly Waad: "waad";
 };
 export type OrganizationTemplateAllowedStrategyEnum = (typeof OrganizationTemplateAllowedStrategyEnum)[keyof typeof OrganizationTemplateAllowedStrategyEnum];
-/**
- * An organization assigned to the template.
- */
-export interface OrganizationTemplateAssignedOrganization {
-    /** Organization identifier. */
-    id: string;
-}
 /** The role visibility level. */
 export declare const OrganizationTemplateRoleVisibilityEnum: {
     readonly Write: "write";
@@ -31040,7 +31103,10 @@ export interface ResourceServer {
     token_lifetime_for_web?: number | undefined;
     /** Whether authorization polices are enforced (true) or unenforced (false). */
     enforce_policies?: boolean | undefined;
+    /** Expiration value (in seconds) for anonymous-session access tokens issued for this API. */
+    token_lifetime_for_anonymous_access_tokens?: number | undefined;
     token_dialect?: Management.ResourceServerTokenDialectResponseEnum | undefined;
+    access_token?: (Management.ResourceServerAccessToken | null) | undefined;
     token_encryption?: (Management.ResourceServerTokenEncryption | null) | undefined;
     consent_policy?: (Management.ResourceServerConsentPolicyEnum | null) | undefined;
     authorization_details?: (unknown[] | null) | undefined;
@@ -31050,6 +31116,28 @@ export interface ResourceServer {
     /** The client ID of the client that this resource server is linked to */
     client_id?: string | undefined;
 }
+/**
+ * Custom configuration for access tokens
+ */
+export interface ResourceServerAccessToken {
+    claims_mapping?: Management.ResourceServerAccessTokenClaimsMapping | undefined;
+}
+/**
+ * Custom configuration for claims in access tokens
+ */
+export interface ResourceServerAccessTokenClaimsMapping {
+    custom_claims?: Management.ResourceServerAccessTokenCustomClaimsMapping | undefined;
+}
+/**
+ * Custom claims to emit in anonymous-session access tokens. Each rule maps a value read from the anonymous-session context (via a restricted dot-path expression) onto a named access-token claim.
+ */
+export type ResourceServerAccessTokenCustomClaimsMapping = Management.ResourceServerAccessTokenCustomClaimsMappingRule[];
+export interface ResourceServerAccessTokenCustomClaimsMappingRule {
+    /** The access-token claim name to emit, stored with the casing you provide. Reserved OIDC/JWT claim names are not allowed (compared case-insensitively). */
+    name: string;
+    /** Restricted dot-path expression read from the anonymous-session context (e.g. `anonymous_session.metadata.country`). */
+    expression: string;
+}
 /**
  * Authorization policy for the resource server.
  */
@@ -31088,13 +31176,74 @@ export interface ResourceServerScope {
     /** User-friendly description of this scope. */
     description?: string | undefined;
 }
+export interface ResourceServerSearchResponse {
+    /** ID of the API (resource server). */
+    id?: string | undefined;
+    /** Friendly name for this resource server. Can not contain `<` or `>` characters. */
+    name?: string | undefined;
+    /** Whether this is an Auth0 system API (true) or a custom API (false). */
+    is_system?: boolean | undefined;
+    /** Unique identifier for the API used as the audience parameter on authorization calls. Can not be changed once set. */
+    identifier?: string | undefined;
+    /** List of permissions (scopes) that this API uses. */
+    scopes?: Management.ResourceServerScope[] | undefined;
+    signing_alg?: Management.SigningAlgorithmEnum | undefined;
+    /** Whether refresh tokens can be issued for this API (true) or not (false). */
+    allow_offline_access?: boolean | undefined;
+    /** Whether Online Refresh Tokens can be issued for this API (true) or not (false). */
+    allow_online_access?: boolean | undefined;
+    /** Whether Online Refresh Tokens can be issued even when sessions are configured as ephemeral (true) or not (false). */
+    allow_online_access_with_ephemeral_sessions?: boolean | undefined;
+    /** Whether to skip user consent for applications flagged as first party (true) or not (false). */
+    skip_consent_for_verifiable_first_party_clients?: boolean | undefined;
+    /** Expiration value (in seconds) for access tokens issued for this API from the token endpoint. */
+    token_lifetime?: number | undefined;
+    /** Expiration value (in seconds) for access tokens issued for this API via Implicit or Hybrid Flows. Cannot be greater than the `token_lifetime` value. */
+    token_lifetime_for_web?: number | undefined;
+    /** Whether authorization polices are enforced (true) or unenforced (false). */
+    enforce_policies?: boolean | undefined;
+    /** Expiration value (in seconds) for anonymous-session access tokens issued for this API. */
+    token_lifetime_for_anonymous_access_tokens?: number | undefined;
+    token_dialect?: Management.ResourceServerTokenDialectResponseEnum | undefined;
+    access_token?: (Management.ResourceServerAccessToken | null) | undefined;
+    token_encryption?: (Management.ResourceServerTokenEncryption | null) | undefined;
+    consent_policy?: (Management.ResourceServerConsentPolicyEnum | null) | undefined;
+    authorization_details?: (unknown[] | null) | undefined;
+    proof_of_possession?: (Management.ResourceServerProofOfPossession | null) | undefined;
+    subject_type_authorization?: Management.ResourceServerSubjectTypeAuthorization | undefined;
+    authorization_policy?: (Management.ResourceServerAuthorizationPolicy | null) | undefined;
+    /** The client ID of the client that this resource server is linked to */
+    client_id?: string | undefined;
+}
+/** Field name to sort results by in ascending order only. Defaults to insertion order (oldest first) if not provided. */
+export declare const ResourceServerSortFieldEnum: {
+    readonly Identifier: "identifier";
+    readonly Name: "name";
+    readonly UpdatedAt: "updated_at";
+};
+export type ResourceServerSortFieldEnum = (typeof ResourceServerSortFieldEnum)[keyof typeof ResourceServerSortFieldEnum];
 /**
  * Defines application access permission for a resource server
  */
 export interface ResourceServerSubjectTypeAuthorization {
     user?: Management.ResourceServerSubjectTypeAuthorizationUser | undefined;
     client?: Management.ResourceServerSubjectTypeAuthorizationClient | undefined;
+    anonymous_user?: Management.ResourceServerSubjectTypeAuthorizationAnonymousUser | undefined;
+}
+/**
+ * Access Permissions for anonymous user flows
+ */
+export interface ResourceServerSubjectTypeAuthorizationAnonymousUser {
+    policy?: Management.ResourceServerSubjectTypeAuthorizationAnonymousUserPolicyEnum | undefined;
+    /** Accepts any additional properties */
+    [key: string]: any;
 }
+/** Defines the anonymous user flows policy for the resource server */
+export declare const ResourceServerSubjectTypeAuthorizationAnonymousUserPolicyEnum: {
+    readonly DenyAll: "deny_all";
+    readonly RequireClientGrant: "require_client_grant";
+};
+export type ResourceServerSubjectTypeAuthorizationAnonymousUserPolicyEnum = (typeof ResourceServerSubjectTypeAuthorizationAnonymousUserPolicyEnum)[keyof typeof ResourceServerSubjectTypeAuthorizationAnonymousUserPolicyEnum];
 /**
  * Access Permissions for client flows
  */
@@ -31263,6 +31412,10 @@ export interface RollbackActionModuleResponseContent {
 export interface RotateClientSecretResponseContent {
     /** ID of this client. */
     client_id?: string | undefined;
+    /** The ISO 8601 timestamp of when this client was created. */
+    created_at?: string | undefined;
+    /** The ISO 8601 timestamp of when this client was last updated. */
+    updated_at?: string | undefined;
     /** Name of the tenant this client belongs to. */
     tenant?: string | undefined;
     /** Name of this client (min length: 1 character, does not allow `<` or `>`). */
@@ -31353,6 +31506,7 @@ export interface RotateClientSecretResponseContent {
     b2b_integration_configuration?: Management.B2BIntegrationConfiguration | undefined;
     my_organization_configuration?: Management.ClientMyOrganizationResponseConfiguration | undefined;
     identity_assertion_authorization_grant?: Management.IdentityAssertionAuthorizationGrant | undefined;
+    anonymous_sessions?: Management.AnonymousSessions | undefined;
     third_party_security_mode?: Management.ClientThirdPartySecurityModeEnum | undefined;
     redirection_policy?: Management.ClientRedirectionPolicyEnum | undefined;
     /** The identifier of the resource server that this client is linked to. */
@@ -31571,6 +31725,39 @@ export declare const SearchEngineVersionsEnum: {
     readonly V3: "v3";
 };
 export type SearchEngineVersionsEnum = (typeof SearchEngineVersionsEnum)[keyof typeof SearchEngineVersionsEnum];
+export interface SearchOrganization {
+    /** Organization identifier. */
+    id?: string | undefined;
+    /** The name of this organization. */
+    name?: string | undefined;
+    /** Friendly name of this organization. */
+    display_name?: string | undefined;
+    branding?: Management.OrganizationBranding | undefined;
+    metadata?: Management.OrganizationMetadata | undefined;
+    token_quota?: Management.TokenQuota | undefined;
+    third_party_client_access?: Management.OrganizationThirdPartyClientAccessEnum | undefined;
+    /** Whether app entitlement is active for this organization. */
+    is_app_entitlement_active?: boolean | undefined;
+    /** Accepts any additional properties */
+    [key: string]: any;
+}
+export interface SearchOrganizationsPaginatedResponseContent {
+    organizations: Management.SearchOrganization[];
+    /** Cursor for retrieving the next page of results. Absent when no more results are available. */
+    next?: string | undefined;
+}
+/** Query parser to use for the filter expression. Use "scim" for SCIM filter syntax or "lucene" for Lucene query syntax (default). */
+export declare const SearchParserEnum: {
+    readonly Scim: "scim";
+    readonly Lucene: "lucene";
+};
+export type SearchParserEnum = (typeof SearchParserEnum)[keyof typeof SearchParserEnum];
+export interface SearchResourceServersResponseContent {
+    /** Array of resource server objects matching the search criteria. */
+    resource_servers: Management.ResourceServerSearchResponse[];
+    /** Cursor for retrieving the next page of results. Omitted if there are no more results. */
+    next?: string | undefined;
+}
 export interface SelfServiceProfile {
     /** The unique ID of the self-service Profile. */
     id?: string | undefined;
@@ -31878,6 +32065,12 @@ export interface SetCustomSigningKeysResponseContent {
     /** An array of custom public signing keys. */
     keys?: Management.CustomSigningKeyJwk[] | undefined;
 }
+export interface SetEmailFactorSettingsResponseContent {
+    /** The length of the OTP code. */
+    otp_length: number;
+    /** The OTP expiration time in seconds. */
+    otp_expiration_time: number;
+}
 export interface SetEmailTemplateResponseContent {
     template: Management.EmailTemplateNameEnum;
     /** Body of the email template. */
@@ -31966,6 +32159,16 @@ export interface SetGuardianFactorsProviderSmsTwilioResponseContent {
 }
 export type SetGuardianPoliciesRequestContent = Management.MfaPolicyEnum[];
 export type SetGuardianPoliciesResponseContent = Management.MfaPolicyEnum[];
+export interface SetGuardianSettingsResponseContent {
+    /** Determines whether to display the "Remember Me" checkbox on the MFA prompt in Universal Login. */
+    display_remember_me_checkbox: boolean;
+    /** Determines the default state of the "Remember Me" checkbox on the MFA prompt in Universal Login. */
+    remember_me_default_value: boolean;
+    /** Duration of inactivity after which the user will be prompted for MFA. Represented as seconds. Minimum duration is 1 hour, maximum is 30 days, and cannot exceed the overall timeout. */
+    mfa_session_inactivity_timeout: number;
+    /** Maximum duration after which the user will be prompted for MFA regardless of activity. Represented as seconds. Minimum duration is 1 hour, maximum is 90 days. */
+    mfa_session_overall_timeout: number;
+}
 export interface SetNetworkAclsResponseContent {
     id?: string | undefined;
     description?: string | undefined;
@@ -31983,6 +32186,12 @@ export interface SetNetworkAclsResponseContent {
  * An object containing template partials for a group of screens.
  */
 export type SetPartialsRequestContent = Record<string, unknown>;
+export interface SetPhoneFactorSettingsResponseContent {
+    /** The length of the OTP code. */
+    otp_length: number;
+    /** The OTP expiration time in seconds. */
+    otp_expiration_time: number;
+}
 export interface SetRulesConfigResponseContent {
     /** Key for a rules config variable. */
     key: string;
@@ -32425,6 +32634,16 @@ export type TenantSettingsResourceParameterProfile = (typeof TenantSettingsResou
 export interface TenantSettingsSessions {
     /** Whether to bypass prompting logic (false) when performing OIDC Logout */
     oidc_logout_prompt_enabled?: boolean | undefined;
+    anonymous?: (Management.TenantSettingsSessionsAnonymous | null) | undefined;
+}
+/**
+ * Anonymous session settings for tenant.
+ */
+export interface TenantSettingsSessionsAnonymous {
+    /** Anonymous session lifetime, in minutes. Defaults to 43200 (30 days); maximum 525600 (1 year). */
+    lifetime_in_minutes?: number | undefined;
+    /** Whether anonymous session requests return the `auth0_anon` cookie. Defaults to enabled; set to false to stop issuing the cookie. */
+    activate_cookie?: boolean | undefined;
 }
 export declare const TenantSettingsSupportedLocalesEnum: {
     readonly Am: "am";
@@ -32706,6 +32925,13 @@ export interface UpdateAculResponseContent {
     /** Accepts any additional properties */
     [key: string]: any;
 }
+/**
+ * Anonymous sessions configuration for this client.
+ */
+export interface UpdateAnonymousSessions {
+    /** If set to true, this client is allowed to create anonymous sessions. */
+    active: boolean;
+}
 export interface UpdateAttackProtectionCaptchaResponseContent {
     active_provider_id?: string | undefined;
     arkose?: Management.AttackProtectionCaptchaArkoseResponseContent | undefined;
@@ -32848,6 +33074,10 @@ export interface UpdateClientGrantResponseContent {
 export interface UpdateClientResponseContent {
     /** ID of this client. */
     client_id?: string | undefined;
+    /** The ISO 8601 timestamp of when this client was created. */
+    created_at?: string | undefined;
+    /** The ISO 8601 timestamp of when this client was last updated. */
+    updated_at?: string | undefined;
     /** Name of the tenant this client belongs to. */
     tenant?: string | undefined;
     /** Name of this client (min length: 1 character, does not allow `<` or `>`). */
@@ -32938,6 +33168,7 @@ export interface UpdateClientResponseContent {
     b2b_integration_configuration?: Management.B2BIntegrationConfiguration | undefined;
     my_organization_configuration?: Management.ClientMyOrganizationResponseConfiguration | undefined;
     identity_assertion_authorization_grant?: Management.IdentityAssertionAuthorizationGrant | undefined;
+    anonymous_sessions?: Management.AnonymousSessions | undefined;
     third_party_security_mode?: Management.ClientThirdPartySecurityModeEnum | undefined;
     redirection_policy?: Management.ClientRedirectionPolicyEnum | undefined;
     /** The identifier of the resource server that this client is linked to. */
@@ -33625,6 +33856,7 @@ export interface UpdateOrganizationAllConnectionResponseContent {
     /** Determines whether organization signup should be enabled for this organization connection. Only applicable for database connections. Default: false. */
     is_signup_enabled?: boolean | undefined;
     organization_access_level?: Management.OrganizationAccessLevelEnum | undefined;
+    organization_member_access_level?: Management.OrganizationMemberAccessLevelEnum | undefined;
     /** Whether the connection is enabled for the organization. */
     is_enabled?: boolean | undefined;
     /** Connection identifier. */
@@ -33751,7 +33983,10 @@ export interface UpdateResourceServerResponseContent {
     token_lifetime_for_web?: number | undefined;
     /** Whether authorization polices are enforced (true) or unenforced (false). */
     enforce_policies?: boolean | undefined;
+    /** Expiration value (in seconds) for anonymous-session access tokens issued for this API. */
+    token_lifetime_for_anonymous_access_tokens?: number | undefined;
     token_dialect?: Management.ResourceServerTokenDialectResponseEnum | undefined;
+    access_token?: (Management.ResourceServerAccessToken | null) | undefined;
     token_encryption?: (Management.ResourceServerTokenEncryption | null) | undefined;
     consent_policy?: (Management.ResourceServerConsentPolicyEnum | null) | undefined;
     authorization_details?: (unknown[] | null) | undefined;
@@ -33911,6 +34146,7 @@ export interface UpdateTenantSettingsResponseContent {
     default_redirection_uri?: string | undefined;
     /** Supported locales for the user interface. */
     enabled_locales?: Management.SupportedLocales[] | undefined;
+    access_token?: (Management.ResourceServerAccessToken | null) | undefined;
     security_headers?: (Management.TenantSettingsNullableSecurityHeaders | null) | undefined;
     session_cookie?: (Management.SessionCookieSchema | null) | undefined;
     sessions?: (Management.TenantSettingsSessions | null) | undefined;