What this environment supports
What a sign-in screen has to know before it can render itself: whether the environment is hosted or federated, which social providers it has applications for, and whether the product has opened yet.
Addressed by publishable key, and public for the same reason JWKS is — it reads, it mints nothing, and it sends no mail. There is no Origin gate, so a server rendering a login page is not refused.
providers lists only what a contact could actually sign in with: the organization’s own applications, plus the shared UserKit one where a test environment is entitled to borrow it. Turning a provider on in the panel takes effect here without anybody redeploying.
Cache-Control: public, max-age=60, stale-while-revalidate=600. Short, because a developer flipping a provider on wants to see it; revalidatable, because a login screen must not wait on us to render.
Rate limited to 120 requests per minute per IP.
Path Parameters
The environment's publishable key.
"uk_pk_live_…"
Response
The environment's public configuration.
live, test hosted, federated Social providers this environment can sign someone in with.
Whether the product is still behind a waitlist. A sign-up screen has to know before it renders: in waitlist mode the form collects an address and promises an email, and nothing it does mints a session.