# Security Token Service API API

> Security Token Service API API on Apizie: 3 endpoints (Fetches the signing keys for an agentic or managed workload identity pool and returns them in JWK Set…, Gets the OIDC provider configuration for an agentic or managed workload identity pool following [the OIDC…, Exchanges a credential for a Google OAuth 2.0 access token. The token asserts an external identity within an…) returned as clean JSON through one API key. Send your own provider key in the x-upstream-key header. Call it over REST at https://www.apizie.tech/v1/analytics:googleapis-sts/{endpoint} or from Claude, ChatGPT and Cursor through the Apizie MCP server. Free plan: 1,000 requests a month.

- Project key: `analytics:googleapis-sts`
- Category: Analytics
- Status: byok
- Source: http://cloud.google.com/iam/docs/workload-identity-federation
- Page: https://www.apizie.tech/api/analytics/googleapis-sts
- OpenAPI: https://www.apizie.tech/api/analytics/googleapis-sts/openapi.json

The Security Token Service exchanges Google or third-party credentials for a short-lived access token to Google Cloud resources.

## Endpoints

### Fetches the signing keys for an agentic or managed workload identity pool and returns them in JWK Set…
`GET https://www.apizie.tech/v1/analytics:googleapis-sts/sts-projects-locations-workload-identity-pools-openid-get-jw` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| name | string | yes | Required. The name of the pool whose JWKs need to be retrieved. Format:… |

### Gets the OIDC provider configuration for an agentic or managed workload identity pool following [the OIDC…
`GET https://www.apizie.tech/v1/analytics:googleapis-sts/sts-projects-locations-workload-identity-pools-well-known-ge` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| name | string | yes | Required. The name of the pool whose OpenID provider configuration to retrieve. Format:… |

### Exchanges a credential for a Google OAuth 2.0 access token. The token asserts an external identity within an…
`POST https://www.apizie.tech/v1/analytics:googleapis-sts/sts-token` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| body | object | yes | JSON request body |

## Example
```
curl "https://www.apizie.tech/v1/analytics:googleapis-sts/sts-projects-locations-workload-identity-pools-openid-get-jw" \
  -H "x-api-key: $APIZIE_KEY" \
  -H "x-upstream-key: $PROVIDER_KEY"
```

## FAQ

### How do I call the Security Token Service API API?
Create a free Apizie key, then send GET https://www.apizie.tech/v1/analytics:googleapis-sts/sts-projects-locations-workload-identity-pools-openid-get-jw with the header x-api-key. Every endpoint returns { project, data, timestamp }.

### Is the Security Token Service API API free on Apizie?
Yes. The Free plan includes 1,000 requests a month at 100 requests a minute, no credit card. Security Token Service API itself also needs your own key from googleapis.com.

### Can AI agents use the Security Token Service API API?
Yes. Add the Apizie MCP server (https://www.apizie.tech/mcp) to Claude, ChatGPT, Cursor or VS Code, then ask in plain language. The agent calls run_scraper with project key analytics:googleapis-sts.

### What is the status of the Security Token Service API API?
Needs your own provider key (bring your own key)