> ## Documentation Index
> Fetch the complete documentation index at: https://docs.mountthor.com/llms.txt
> Use this file to discover all available pages before exploring further.

# List IdPs

> Returns external OIDC providers trusted by this customer. These records
contain trust configuration only; they do not contain token or key material.



## OpenAPI

````yaml /api-reference/customer-api.v1.openapi.json get /v1/admin/identity/providers
openapi: 3.1.0
info:
  title: Mount Thor Customer API
  version: v1
servers:
  - description: Mount Thor customer API edge
    url: https://api.mountthor.com
security: []
paths:
  /v1/admin/identity/providers:
    get:
      tags:
        - identity-workload
      summary: List IdPs
      description: >-
        Returns external OIDC providers trusted by this customer. These records

        contain trust configuration only; they do not contain token or key
        material.
      operationId: list_trusted_issuers
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/TrustedIssuerListResponse'
          description: IdPs
        '401':
          description: Missing or invalid customer API key
        '403':
          description: API key is missing issuers:read scope
        '429':
          content:
            text/plain:
              schema:
                type: string
          description: Rate limit exceeded
          headers:
            Retry-After:
              description: Seconds before retry.
              schema:
                minimum: 1
                type: integer
      security:
        - api_key_bearer:
            - issuers:read
components:
  schemas:
    TrustedIssuerListResponse:
      additionalProperties: false
      description: Identity provider listing response.
      properties:
        customer_id:
          description: Stable UUID for the customer account.
          type: string
        issuers:
          description: Registered IdPs for this customer.
          items:
            $ref: '#/components/schemas/TrustedIssuerMetadata'
          type: array
      required:
        - customer_id
        - issuers
      type: object
    TrustedIssuerMetadata:
      additionalProperties: false
      description: Identity provider metadata.
      properties:
        allowed_clock_skew_seconds:
          description: Clock skew allowed when validating token time claims.
          example: 60
          format: int64
          type: integer
        audiences:
          description: Accepted token audiences.
          example:
            - api.mountthor.com
          items:
            type: string
          type: array
        created_at:
          description: RFC 3339 creation timestamp.
          example: '2026-05-25T17:20:00Z'
          type: string
        display_name:
          description: Customer-facing IdP label.
          example: GitHub Actions OIDC
          type: string
        id:
          description: Stable IdP UUID.
          type: string
        issuer:
          description: Canonical OIDC issuer URL used to match the token `iss` claim.
          example: https://token.actions.githubusercontent.com
          type: string
        issuer_type:
          description: IdP category. Currently `oidc`.
          example: oidc
          type: string
        jwks_document_ref:
          description: Stored JWKS reference when `jwks_source_type` is `stored-jwks`.
          type:
            - string
            - 'null'
        jwks_source_type:
          description: 'JWKS resolution mode: `discovery`, `https`, or `stored-jwks`.'
          example: discovery
          type: string
        jwks_uri:
          description: Explicit JWKS URI when `jwks_source_type` is `https`.
          type:
            - string
            - 'null'
        status:
          description: IdP lifecycle state. Disabled IdPs cannot mint sessions.
          example: active
          type: string
        updated_at:
          description: RFC 3339 update timestamp.
          example: '2026-05-25T17:30:00Z'
          type: string
      required:
        - id
        - display_name
        - issuer_type
        - issuer
        - jwks_source_type
        - audiences
        - allowed_clock_skew_seconds
        - status
        - created_at
        - updated_at
      type: object
  securitySchemes:
    api_key_bearer:
      bearerFormat: mthr_live_*
      description: Bearer scheme name used by typed customer admin operations.
      scheme: bearer
      type: http

````