# API User

 - [POST /v2/api-users](https://developer.spotnana.com/openapi/authapi/api-user/createapiuser.md): Creates a new API user (also known as a machine user) that your application can use to authenticate with Spotnana APIs. **Use this endpoint to:** - Generate a dedicated `clientId` and `clientSecret` p
 - [GET /v2/api-users](https://developer.spotnana.com/openapi/authapi/api-user/getapiusers.md): Retrieves the list of all active API users associated with the caller's TMC. **Use this endpoint to:** - Audit existing API users and their `clientIds` under a TMC. - Look up the `clientId` for a spec
 - [POST /v2/api-users/revoke](https://developer.spotnana.com/openapi/authapi/api-user/deleteapiuser.md): Permanently deletes an API user and revokes its access to the Spotnana platform. This immediately invalidates all existing access tokens and removes the API user's ability to authenticate. **Use this
 - [POST /v2/api-users/rotate](https://developer.spotnana.com/openapi/authapi/api-user/rotateclientsecret.md): Generates a new `clientSecret` for an existing API user. The old `clientSecret` is immediately invalidated and all existing access tokens for the API user will be expired. **Use this endpoint to:** -