API Hub v2.1

These specifications describe the APIs the API Hub exposes to LFIs. They show the request and response contracts an LFI integrates against during the authorization journey — notably the Headless Heimdall auth server (for delegating PSU authentication) and the Consent Manager (for looking up and updating consents).

Audience: LFI engineering teams integrating with the API Hub's auth and consent surfaces.

What you'll find here: the endpoints an LFI calls on the API Hub, and the responses the Hub returns.