Skip to main content
POST
Events

Authorizations

Authorization
string
header
required

Organization-bound Auth0 API access token. Required permissions are listed per operation; this does not offer API-key or client-registration issuance.

Headers

Origin
string

Required for browser-session mutations. Origin must exactly match the workspace; read the CSRF token from GET /v1/me using the browser session. A bearer-authenticated /v1/me response has csrf_token=null. Not required for bearer-token-only requests.

X-CSRF-Token
string

Required for browser-session mutations. Origin must exactly match the workspace; read the CSRF token from GET /v1/me using the browser session. A bearer-authenticated /v1/me response has csrf_token=null. Not required for bearer-token-only requests.

Idempotency-Key
string
required

Stable receipt key; retries must preserve the exact request body.

Required string length: 1 - 160

Body

application/json
events
Event · object[]
required
Required array length: 1 - 1000 elements

Response

Successful Response