ZITADEL System API (v1, self-hosted)

REST discovered

Details

URL: ${CUSTOM_DOMAIN}/system/v1
Docs: https://zitadel.com/docs/reference/api/system

Authentication

Self-signed JWT for the self-hosted System API user jwt discovered Get key ↗

Authorization: Bearer <credential>

For self-hosted ZITADEL only, configure a System API user in runtime settings and register its public key as described in Access ZITADEL System API. Generate an RSA keypair, add the public key under SystemAPIUsers, then mint a self-signed JWT with claims iss, sub, aud, iat, and exp matching your configured system user and ZITADEL base URL. The docs also show using ZITADEL Tools key2jwt to create a test token.