Cisco Umbrella Token API

openapi: 3.2.0
info:
  title: Cisco Umbrella Authorization Token API
  version: 2.0.0
  description: Create Umbrella access tokens.
  contact:
    name: Cloud Security Developer Community
  x-provenance:
    method: harvested
    authored_by: Cisco Umbrella
    harvested_by: API Evangelist
    harvested_on: '2026-08-19'
    first_party: true
    provider_published: true
    source_host: pubhub.devnetcloud.com
    note: 26 first-party OpenAPI 3.0 documents (256 operations) listed by Cisco's own docs-nav config and fetched anonymously. Byte-identity reconfirmed 2026-08-19 by SHA-256 against the live source.
  x-evidence:
  - type: source
    url: https://pubhub.devnetcloud.com/media/cloud-security-apis-in-eft/docs/umbrella-config.json
  - type: source
    url: https://developer.cisco.com/docs/cloud-security/
servers:
- url: https://api.umbrella.com/{basePath}
  variables:
    basePath:
      default: auth/v2
security:
- http: []
tags:
- name: Token
paths:
  /token:
    post:
      operationId: createAuthToken
      tags:
      - Token
      description: Create an authorization token.
      summary: Create Authorization Token
      requestBody:
        content:
          application/x-www-form-urlencoded:
            schema:
              type: object
              description: The authentication information that is required to create an access token.
              required:
              - grant_type
              properties:
                grant_type:
                  type: string
                  enum:
                  - client_credentials
                  description: The type of client grant type.
                  example: client_credentials
            example:
              grant_type: client_credentials
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Token'
              example:
                token_type: bearer
                access_token: xxxxxx
                expires_in: 3600
        '400':
          $ref: '#/components/responses/400Error'
        '401':
          $ref: '#/components/responses/401Error'
        '403':
          $ref: '#/components/responses/403Error'
        '404':
          $ref: '#/components/responses/404Error'
        '500':
          $ref: '#/components/responses/500Error'
components:
  responses:
    403Error:
      description: Forbidden
      content:
        application/json:
          schema:
            type: object
            properties:
              message:
                type: string
    500Error:
      description: Internal Server Error
      content:
        application/json:
          schema:
            type: object
            properties:
              message:
                type: string
    401Error:
      description: Unauthorized
      content:
        application/json:
          schema:
            type: object
            properties:
              message:
                type: string
    404Error:
      description: Not Found
      content:
        application/json:
          schema:
            type: object
            properties:
              message:
                type: string
    400Error:
      description: Bad Request
      content:
        application/json:
          schema:
            type: object
            properties:
              message:
                type: string
  schemas:
    Token:
      type: object
      properties:
        token_type:
          type: string
          description: The type of token.
          example: bearer
        access_token:
          type: string
          description: The access token.
          example: xxxxxxx
        expires_in:
          type: integer
          description: The number of seconds in which the token expires.
          example: 3600
      required:
      - token_type
      - access_token
      - expires_in
      example:
        token_type: bearer
        access_token: bearer access token
        expires_in: 3600
  securitySchemes:
    http:
      type: http
      scheme: basic
x-provenance:
  method: harvested
  first_party: true
  harvested: '2026-08-19'
  source: https://pubhub.devnetcloud.com/media/cloud-security-apis-in-eft/docs/reference/auth/token.yaml
  publisher: Cisco Systems, Inc. (Cisco DevNet Cloud Security docs)
x-evidence:
  fetched: '2026-08-19'
  url: https://pubhub.devnetcloud.com/media/cloud-security-apis-in-eft/docs/reference/auth/token.yaml
  http_status: 200
  docs: https://developer.cisco.com/docs/cloud-security/