# C1 documentation: API Endpoints Workload Federation

## Workload Federation

- [Search Trusts](https://www.c1.ai/docs/api-reference/workload-federation/search-trusts.md): SearchTrusts searches trusts across all service principals with optional filters.  Used by the admin providers page to list trusts referencing a provider.
- [List Trusts](https://www.c1.ai/docs/api-reference/workload-federation/list-trusts.md): ListTrusts lists trusts for a service principal.
- [Create Trust](https://www.c1.ai/docs/api-reference/workload-federation/create-trust.md): CreateTrust creates a trust policy for a service principal.  Validates the CEL condition_expression at creation time.
- [Get Trust](https://www.c1.ai/docs/api-reference/workload-federation/get-trust.md): GetTrust returns a trust by ID for a service principal.
- [Delete Trust](https://www.c1.ai/docs/api-reference/workload-federation/delete-trust.md): DeleteTrust deletes a trust for a service principal.
- [Update Trust](https://www.c1.ai/docs/api-reference/workload-federation/update-trust.md): UpdateTrust updates a trust's mutable fields. The provider_id is immutable.
- [Test Token](https://www.c1.ai/docs/api-reference/workload-federation/test-token.md): TestToken validates a JWT against a specific trust's configuration without  issuing an access token. Returns per-step validation results for debugging.
- [List Providers](https://www.c1.ai/docs/api-reference/workload-federation/list-providers.md): ListProviders lists all providers for the tenant.
- [Create Provider](https://www.c1.ai/docs/api-reference/workload-federation/create-provider.md): CreateProvider registers a new external OIDC issuer for the tenant.  Validates the issuer URL via OIDC discovery synchronously.
- [Get Provider](https://www.c1.ai/docs/api-reference/workload-federation/get-provider.md): GetProvider returns a provider by ID.
- [Delete Provider](https://www.c1.ai/docs/api-reference/workload-federation/delete-provider.md): DeleteProvider deletes a provider. Fails if active trusts reference it.
- [Update Provider](https://www.c1.ai/docs/api-reference/workload-federation/update-provider.md): UpdateProvider updates a provider's mutable fields (display_name, description, disabled).  The issuer_url is immutable after creation.
- [Test Cel](https://www.c1.ai/docs/api-reference/workload-federation/test-cel.md): TestCEL evaluates a CEL expression against provided claims without  requiring a JWT, provider, or trust. Used for expression authoring.

## OpenAPI Specs

- [my-source-with-code-samples](https://spec.speakeasy.com/conductor-one/conductorone/my-source-with-code-samples)