# The Quantum Club API

> SCIM 2.0 base URL for identity providers: https://api.thequantumclub.com/scim/v2. Discovery (/ServiceProviderConfig, /ResourceTypes, /Schemas) needs no token; /Users and /Groups need a tenant-scoped bearer token (Authorization: Bearer tqc_scim_...). Limit: 1,200 requests an hour per token on each URL path (each /Users/{id} counts on its own); bodies up to 1,048,576 bytes.

## Docs

- [API overview](https://docs.thequantumclub.com/api): the Club OS integration surface
- [SCIM 2.0](https://docs.thequantumclub.com/api/scim): endpoints, filters and the user lifecycle
- [Authentication](https://docs.thequantumclub.com/api/authentication): SCIM bearer tokens
- [Rate limits](https://docs.thequantumclub.com/api/rate-limits): ceilings, the shape of a 429, retries
- [SCIM provisioning](https://docs.thequantumclub.com/platform/identity/scim): Okta and Microsoft Entra ID setup
- [OpenAPI reference](https://docs.thequantumclub.com/api/reference)
- [Docs llms.txt](https://docs.thequantumclub.com/llms.txt)

## Optional

- [MCP server](https://mcp.thequantumclub.com): for AI agents, a separate host
- [security.txt](https://api.thequantumclub.com/.well-known/security.txt): report a vulnerability