AltoIRA

AltoIRA OAUTH API

Provides access to an investor's account. Generates a token to be used with the "user" endpoints below

Documentation GitHub OpenAPI

Operations 1

POST /oauth/token Generate a token to access an investor's account #

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this

find_apisBrowse and filter every API in the catalog.
get_api_artifactsOne API's artifacts, grouped by type.
get_openapiThe primary OpenAPI for this API.
find_similar_apisAPIs that look like this one.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This API

curl "https://apis.io/api/v1/apis/altoira-oauth-api"

All apis

curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

openapi: 3.2.0
info:
  version: 1.0.0
  title: AltoIRA.com OAUTH API
  contact:
    name: AltoIRA
    email: help@altoira.com
    url: https://www.altoira.com
  description: Provides access to an investor's account. Generates a token to be used with the "user" endpoints below
servers:
- url: https://altoira.sandbox.altoira.com
  description: Test API / Sandbox
- url: https://www.altoira.com
  description: Production API
tags:
- name: OAuth
  description: Provides access to an investor's account. Generates a token to be used with the "user" endpoints below
paths:
  /oauth/token:
    post:
      tags:
      - OAuth
      summary: Generate a token to access an investor's account
      description: Access Tokens expire after 15 days (regardless of use). Refresh tokens expire after 90 days and can only be used once (a new refresh token is issued upon refresh)
      requestBody:
        content:
          application/json:
            schema:
              type: object
              properties:
                grant_type:
                  type: string
                  enum:
                  - authorization_code
                  - refresh_token
                code:
                  type: string
                  example: f50200eb98f70150f132d24b6a65ee9d1eb9895d5191fef52996528...
                refresh_token:
                  type: string
                  example: f50200eb98f70150f132d24b6a65ee9d1eb9895d5191fef52996528
                client_id:
                  type: string
                  description: Alto Provided Code
                  example: '111111'
                client_secret:
                  type: string
                  description: Alto Provided Code
                  example: 09397056dbe85fef52975a610e1e3a96528
                redirect_uri:
                  type: string
                  example: https://example.com/altoira/oauth_complete
      responses:
        '200':
          description: Token issued
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/OAuthToken'
      operationId: postOauthToken
      x-operation-id-source: derived
components:
  schemas:
    OAuthToken:
      type: object
      properties:
        token_type:
          type: string
          enum:
          - Bearer
        expires_in:
          type: integer
          example: 1296000
        access_token:
          type: string
          example: 4a70821169e801da4cb94ff265288d48378823933b8
        refresh_token:
          type: string
          example: 9523f83b7e3ee677a763d6e5963a7cec5d430ff7ad
  securitySchemes:
    PlatformAuth:
      type: http
      scheme: basic
      description: Basic Auth credentials that were assigned to you by Alto
    UserAuth:
      type: http
      scheme: bearer
      description: 'Specify the OAuth token generated by calling /oauth/token. It will be used in the "Authorization: Bearer" header'
    UserOauth:
      type: oauth2
      description: Redirect your users to /oauth/authorize to get started (see the OAuth section on this documentation)
      flows:
        authorizationCode:
          authorizationUrl: https://altoira.sandbox.altoira.com/oauth/authorize
          tokenUrl: https://altoira.sandbox.altoira.com/oauth/token
          refreshUrl: https://altoira.sandbox.altoira.com/oauth/token/refresh
          scopes: {}
externalDocs:
  description: Webhooks
  url: https://altoira.sandbox.altoira.com/documents/webhooks.txt
x-readme:
  explorer-enabled: true
  proxy-enabled: true
  samples-enabled: true