# Identity Edge API

## Active External Protocol

- REST is the active external protocol for this BFF deployment.

## Entrypoints

- `POST /api/identity/token`
- `POST /api/identity/session/refresh`

## Boundary Notes

- Endpoint handlers perform edge validation and permission checks.
- Business orchestration remains in thalos-service.
- Identity abstractions remain owned by Thalos repositories.