> ## Documentation Index
> Fetch the complete documentation index at: https://docs.rotavision.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Observed Claims

> Distinct IdP role/group names seen from real logins — seeds the wizard so
an admin maps what their IdP actually sends, not a blank form. Names only.



## OpenAPI

````yaml /api-reference/openapi.json get /api/v1/admin/observed-claims
openapi: 3.1.0
info:
  title: Sakshi — Agent Governance API
  description: >-
    Registry (KYA), decision flight recorder, bounded autonomy, evidence packs,
    fairness screens. Auth: bearer ingest keys create evidence; OIDC JWTs with
    governance roles mutate state.
  version: 0.1.0
servers:
  - url: https://demo.rotavision.com
    description: Public demo (read-only, synthetic data)
  - url: https://{host}
    description: Your Sakshi deployment (single-tenant, in your environment)
    variables:
      host:
        default: sakshi.your-company.internal
security:
  - bearerAuth: []
paths:
  /api/v1/admin/observed-claims:
    get:
      tags:
        - access
      summary: Observed Claims
      description: >-
        Distinct IdP role/group names seen from real logins — seeds the wizard
        so

        an admin maps what their IdP actually sends, not a blank form. Names
        only.
      operationId: observed_claims_api_v1_admin_observed_claims_get
      responses:
        '200':
          description: Successful Response
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ObservedOut'
components:
  schemas:
    ObservedOut:
      properties:
        roles:
          items:
            type: string
          type: array
          title: Roles
        groups:
          items:
            type: string
          type: array
          title: Groups
      type: object
      required:
        - roles
        - groups
      title: ObservedOut
  securitySchemes:
    bearerAuth:
      type: http
      scheme: bearer
      description: Ingest API key or OIDC JWT. See /authentication.

````