---
title: "Authyo integration for LuumenAI"
url: "https://www.luumen.ai/integrations/authyo/"
entity: SoftwareIntegration
category: "Identity & security"
audience: "SRE, DevOps, platform engineering, IT operations"
---

# Authyo integration for LuumenAI

Check Authyo sessions and tokens, then revoke or send codes on approval

## What LuumenAI can do with Authyo

LuumenAI connects to Authyo with an API token and exposes 5 tools (1 read-only · 1 write · 3 destructive). Reads answer immediately; writes are shown as a plan and require approval by default, configurable per tool by an administrator.

## Key facts

- Authentication: API token
- Tools available: 5 tools (1 read-only · 1 write · 3 destructive)
- Plan: available on all plans
- Category: Identity & security

## About Authyo with LuumenAI

Connect Authyo and your agent can answer session questions on the spot: whether a token is still valid, and which user identity sits behind it. When something needs to change — revoking a session, verifying an OTP, sending a code or an order notification — the agent shows the plan first and waits for your approval before it runs. Luumen authenticates with an API key.

## Example tools

Read-only (1 in total):

- `AUTHYO_VERIFY_TOKEN` — Validate an Authyo session JWT and return its associated user identity without returning the JWT.

Write and destructive (4 in total, approval required by default):

- `AUTHYO_REVOKE_SESSION` — Irreversibly revoke an Authyo user session identified by its JWT, typically during logout.
- `AUTHYO_SEND_ORDER_NOTIFICATION` — Send a usage-billed order or payment notification through an Authyo built-in template; requires a configured sender.
- `AUTHYO_SEND_OTP` — Send a usage-billed one-time password to an email address or international phone number using Authyo's configured sender.
- `AUTHYO_VERIFY_OTP` — Verify a user-provided OTP for an Authyo mask ID and return the verified user identity without exposing the issued session JWT.

## Frequently asked questions

### How does LuumenAI connect to Authyo?

Authorize once with API token. Luumen lists the scopes each action needs before you approve the connection, and credentials never appear in the chat.

### Can LuumenAI change things in Authyo on its own?

Read actions answer immediately. Anything that writes is shown as a plan and requires approval by default, including the 3 actions classified as destructive. Administrators configure that per tool.

### Is there an audit trail?

Every call to Authyo — read or write, approved or declined — is recorded with the actor, the input, and the result.

Full page: https://www.luumen.ai/integrations/authyo/