AutoFi

AutoFi Authorization API

To authorize requests to the AutoFi API you will need an `Access Token` (JWT). Requesting an `Access Token` requires authentication credentials which you can retrieve from the AutoFi admin panel (coming soon). Once you have your `Access Token` you pass it in along in the authorization HTTP header like this: ``` curl -X GET "https://api-uat.autofi.com/v1/loan-application/abcde" \ -H "Authorization: Bearer 714552c6148e1617aeab526d0606184b94a80ec048fc09894ff1a72b740c5f19" ``` Generally, all API endpoints require token authorization, except where noted otherwise (the endpoint description will be lacking the Authorization requirement).

Documentation GitHub OpenAPI

Operations 1

POST /auth/token Request an access token (JWT) #

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this

find_apisBrowse and filter every API in the catalog.
get_api_artifactsOne API's artifacts, grouped by type.
get_openapiThe primary OpenAPI for this API.
find_similar_apisAPIs that look like this one.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This API

curl "https://apis.io/api/v1/apis/autofi-authorization-api"

All apis

curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

openapi: 3.2.0
info:
  title: AutoFi Authorization API
  description: '# Introduction

    Welcome to the AutoFi REST API.'
  version: 1.0.0
  x-logo:
    url: https://app.autofi.com/images/email-autofi-logo.png
    backgroundColor: '#FFFFFF'
    altText: AutoFi
    href: /
servers:
- url: https://api.autofi.com
  description: Production server
- url: https://api-uat.autofi.com
  description: Sandbox server
security:
- bearerAuth: []
tags:
- name: Authorization
  description: To authorize requests to the AutoFi API you will need an `Access Token` (JWT).
paths:
  /auth/token:
    post:
      security: []
      summary: Request an access token (JWT)
      description: 'Authenticate with your account''s API client credentials to retrieve an access token.


        The access token is required to authorize API requests.'
      tags:
      - Authorization
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/AccessToken'
            example:
              clientId: avWXpEjNfB7QgjH9hs3rokgZVQgUiiG6
              clientSecret: LWFE=QRv4uqcM/Vx*c>HnPQXMj3BWzpMpvgeg[URM>9YT/rZVYKT9tPbuRdvQiAf
      responses:
        '200':
          description: JWT
          content:
            application/json:
              schema:
                type: object
                properties:
                  access_token:
                    type: string
                    description: JSON Web Token format
                  expires_in:
                    type: integer
                    description: number of `seconds` after token issuance the token expires in
                    example: 86400
                  token_type:
                    type: string
                    example: Bearer
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/AuthorizationError'
      operationId: postAuthToken
      x-operation-id-source: derived
components:
  schemas:
    AuthorizationError:
      type: object
      description: Access token is missing or invalid
      properties:
        error:
          type: string
          example: access_denied
        error_description:
          type: string
          example: Unauthorized
        error_id:
          type: string
          default: null
          description: A placeholder for future expansion
    AccessToken:
      type: object
      required:
      - clientId
      - clientSecret
      properties:
        clientId:
          type: string
        clientSecret:
          type: string
  securitySchemes:
    bearerAuth:
      description: 'Get access to data while protecting your account credentials.

        '
      type: http
      scheme: bearer
      bearerFormat: Bearer {token}