
Security News
Packagist Urges Immediate Composer Update After GitHub Actions Token Leak
Packagist urges PHP projects to update Composer after a GitHub token format change exposed some GitHub Actions tokens in CI logs.
@logto/api
Advanced tools
A TypeScript SDK for interacting with Logto's Management API using client credentials authentication.
npm install @logto/api
Before using this SDK, you need to:
For detailed setup instructions, visit: https://a.logto.io/m2m-mapi
import { createManagementApi } from '@logto/api/management';
// For Logto Cloud
const { apiClient } = createManagementApi('your-tenant-id', {
clientId: 'your-client-id',
clientSecret: 'your-client-secret',
});
// Make API calls
const response = await apiClient.GET('/api/users');
console.log(response.data);
import { createManagementApi } from '@logto/api/management';
const { apiClient } = createManagementApi('default', {
clientId: 'your-client-id',
clientSecret: 'your-client-secret',
baseUrl: 'https://your-logto-instance.com',
apiIndicator: 'https://your-logto-instance.com/api',
});
For detailed API documentation, refer to the Logto Management API documentation.
To avoid unnecessary build time in CI, full type generation only happens before publishing. The build script will generate mock types if no types are found.
To explicitly generate types, run:
pnpm generate-types
This will start a local Docker Compose environment, generate types by fetching the OpenAPI endpoints, and then shut down the environment.
FAQs
Logto API types and clients.
The npm package @logto/api receives a total of 3,413 weekly downloads. As such, @logto/api popularity was classified as popular.
We found that @logto/api demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Packagist urges PHP projects to update Composer after a GitHub token format change exposed some GitHub Actions tokens in CI logs.

Research
GemStuffer abuses RubyGems as an exfiltration channel, packaging scraped UK council portal data into junk gems published from new accounts.

Company News
Socket was named to the Rising in Cyber 2026 list, recognizing 30 private cybersecurity startups selected by CISOs and security executives.