Reference
Exact endpoint, token, TypeScript client, and error behavior for the current Unbound implementation.
This reference describes the behavior implemented by Unbound today. It is intended for app developers, protocol integrators, and security reviewers who need exact request and response details.
Alpha status
APIs and behavior may change during alpha. Unbound exposes OIDC-style discovery and an authorization-code flow, but this documentation does not claim full OAuth 2.0 or OpenID Connect compliance or compatibility with every generic OIDC client.
Endpoints
Routes, parameters, validation rules, response shapes, and unsupported protocol features.
Tokens and claims
JWT headers, claims, lifetimes, JWKS behavior, and app-side validation requirements.
TypeScript client API
Exports, options, methods, events, sessions, and storage adapter entry points.
Errors
Protocol and client error codes with safe recovery actions.
Security and privacy
Trust boundaries, required app protections, and current implementation limitations.
For complete integration workflows, use the TypeScript client guides before relying on these lookup pages alone.