---
type: api
title: Security
description: The security APIs enable you to perform security activities, and add, update, retrieve, and remove application privileges, role mappings, and roles. You can also create and update API keys and create and invalidate bearer tokens.
url: https://www.elastic.co/docs/api/doc/elasticsearch-serverless/group/endpoint-security
resource: https://www.elastic.co/docs/api/doc/elasticsearch-serverless/group/endpoint-security
products:
  - Elasticsearch Serverless
---

# Security

`security`

The security APIs enable you to perform security activities, and add, update, retrieve, and remove application privileges, role mappings, and roles. You can also create and update API keys and create and invalidate bearer tokens.

[Learn more about security.](https://www.elastic.co/docs/deploy-manage/security)

- [Authenticate a user](https://www.elastic.co/docs/api/doc/elasticsearch-serverless/operation/operation-security-authenticate): `GET` `/_security/_authenticate`
- [Find API keys with a query](https://www.elastic.co/docs/api/doc/elasticsearch-serverless/operation/operation-security-query-api-keys): `POST` (also `GET`) `/_security/_query/api_key`
- [Find roles with a query](https://www.elastic.co/docs/api/doc/elasticsearch-serverless/operation/operation-security-query-role): `POST` (also `GET`) `/_security/_query/role`
- [Get API key information](https://www.elastic.co/docs/api/doc/elasticsearch-serverless/operation/operation-security-get-api-key): `GET` `/_security/api_key`
- [Create an API key](https://www.elastic.co/docs/api/doc/elasticsearch-serverless/operation/operation-security-create-api-key): `POST` (also `PUT`) `/_security/api_key`
- [Invalidate API keys](https://www.elastic.co/docs/api/doc/elasticsearch-serverless/operation/operation-security-invalidate-api-key): `DELETE` `/_security/api_key`
- [Bulk update API keys](https://www.elastic.co/docs/api/doc/elasticsearch-serverless/operation/operation-security-bulk-update-api-keys): `POST` `/_security/api_key/_bulk_update`
- [Update an API key](https://www.elastic.co/docs/api/doc/elasticsearch-serverless/operation/operation-security-update-api-key): `PUT` `/_security/api_key/{id}`
- [Get builtin privileges](https://www.elastic.co/docs/api/doc/elasticsearch-serverless/operation/operation-security-get-builtin-privileges): `GET` `/_security/privilege/_builtin`
- [Get roles](https://www.elastic.co/docs/api/doc/elasticsearch-serverless/operation/operation-security-get-role): `GET` `/_security/role/{name}`, `GET` `/_security/role`
- [Create or update roles](https://www.elastic.co/docs/api/doc/elasticsearch-serverless/operation/operation-security-put-role): `POST` (also `PUT`) `/_security/role/{name}`
- [Delete roles](https://www.elastic.co/docs/api/doc/elasticsearch-serverless/operation/operation-security-delete-role): `DELETE` `/_security/role/{name}`
- [Create a service account token](https://www.elastic.co/docs/api/doc/elasticsearch-serverless/operation/operation-security-create-service-token): `POST` (also `PUT`) `/_security/service/{namespace}/{service}/credential/token/{name}`, `POST` `/_security/service/{namespace}/{service}/credential/token`
- [Delete service account tokens](https://www.elastic.co/docs/api/doc/elasticsearch-serverless/operation/operation-security-delete-service-token): `DELETE` `/_security/service/{namespace}/{service}/credential/token/{name}`
- [Check user privileges](https://www.elastic.co/docs/api/doc/elasticsearch-serverless/operation/operation-security-has-privileges): `POST` (also `GET`) `/_security/user/{user}/_has_privileges`, `POST` (also `GET`) `/_security/user/_has_privileges`