Web console
A browser for everything the API can do
Every capability described in this section is also reachable from a browser, at web-directory.open.dev.br — a thin server-rendered client of the same public API, available in Portuguese, English and Spanish. Nothing it does isn't already possible through the API directly; it exists so day-to-day administration doesn't require writing a client.
Sign in
By password or by passkey. A forgotten password is recovered through a self-service reset flow — no manual intervention.
Institution profile
Organisation name, jwksUri, redirect URIs, roles, and conglomerate membership — the same fields PUT /admin/institutions/{id} accepts, in a form.
Certificates
Issue one from Directory's own CA, or register one already issued by the institution's own external CA. Revoke, and see the full status history.
Authorisation servers
Register a server and manage its API resources and discovery endpoints without hand-building the nested JSON the API expects.
Software statements
Issue a signed JWT on demand and see which ones are still valid.
Domain & authority claims
Declare the capability domains an institution operates in, and the functions or roles it exercises within them.
Contacts & webhooks
Technical and notification contacts, and HMAC-signed webhook subscriptions for institution and certificate lifecycle events.
Users & service credentials
Invite teammates with admin or read-only access, and generate a machine-to-machine Bearer credential for the institution's own backend to call the API directly.