Litmus Unify

6 min

Litmus Unify (LUNS)

Litmus UNS is the Unified Namespace - an MQTT broker plus structured namespace plus account / ACL management plane. Edges publish here; downstream systems subscribe.

GraphQL-only

LUNS exposes a single endpoint for all operations:

POST {{uns_url}}/mqtt/gql

All 28 documented endpoints share this URL. The folder structure in the API portal (Dashboard / UNS / Security / MQTT / Integrations / Tools) is organizational - the actual operation is in the GraphQL query/mutation body.

There is no REST surface for LUNS. If a tutorial tells you to call POST /uns/account, that's wrong - it's POST /mqtt/gql with a createAccount mutation in the body.

Module map (logical, not URL)

Section	Purpose	Endpoints
Dashboard	Broker stats, connected client counts	4
UNS	Namespace hierarchy, models, instances	7
Security	Accounts, ACL rules, tokens, LE activation	10
MQTT	Topic listing, retained messages, broker config	4
Integrations	Bridges to external brokers / cloud	2
Tools	Diagnostics, exports	1

Auth

OAuth2 password grant against the embedded Keycloak:

POST {{uns_url}}/auth/realms/standalone/protocol/openid-connect/token

Form body: grant_type=password, client_id, username, password. The returned access_token is sent as Authorization: Bearer <token> on every /mqtt/gql call.

First call

curl -sk -X POST "https://<uns-host>/mqtt/gql" \
  -H "Authorization: Bearer $UNS_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"query":"query { account { id username acType enabled } }"}'

Common operations

Operation	GraphQL
List accounts	query { account { ... } }
Create account	mutation { createAccount(input: { ... }) { id } }
Add ACL rule	mutation { addAccountRules(input: { ... }) }
Enable account	mutation { enableAccount(input: { accountId: "..." }) }
Create LE activation token	mutation { createLitmusEdgeActivationToken(...) }

See Provision UNS MQTT Account for the full create-account chain.