Brightfield Software Authentication API
The authentication API from Brightfield Software — 1 operation(s) for authentication.
Work with this as data
Every API here is available over the APIs.io API and to AI agents over MCP.
MCP server
One button, every client — Claude, Cursor, VS Code and the rest.
https://apis.io/mcp
Tools for apis
7 MCP tools reach this
find_apisBrowse and filter every API in the catalog.get_api_artifactsOne API's artifacts, grouped by type.get_openapiThe primary OpenAPI for this API.find_similar_apisAPIs that look like this one.apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.resolveTurn a domain, URL or GitHub org into the provider it belongs to.find_cohortsEvery scored population of providers in the catalog.
Call it yourself
curl for this page
This API
curl "https://apis.io/api/v1/apis/distyra:distyra-authentication-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.
Get an API key
Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.
A second provider on the same verified email joins the account you already have.
OpenAPI Specification
openapi: 3.2.0
info:
title: Distyra Transaction Enrichment Authentication API
description: EU-native PSD2-specialist transaction enrichment.
version: 1.11.0
servers:
- url: https://api.distyra.com
description: Production (EU). Base URL stays api.distyra.com even though the website and portal use .eu.
tags:
- name: Authentication
paths:
/v1/keys/rotate:
post:
operationId: rotateApiKey
summary: Rotate the current API key with a 14-day overlap
tags:
- Authentication
description: Creates a new API key and marks the current key for expiry in 14 days. The new key inherits the current key's scopes. Both keys remain valid until the current key's `expires_at` passes, giving caller infrastructure a window to roll over without downtime. The raw new key value is returned exactly once, so store it immediately. No recovery mechanism exists; if the response is lost, rotate again.
security:
- bearerAuth: []
responses:
'200':
description: Default Response
content:
application/json:
schema:
type: object
required:
- key
- prefix
- scopes
- current_expires_at
properties:
key:
type: string
prefix:
type: string
scopes:
type: array
items:
type: string
current_expires_at:
format: date-time
type: string
'401':
description: Standard error envelope used for all non-2xx responses.
content:
application/json:
schema:
description: Standard error envelope used for all non-2xx responses.
type: object
required:
- error
properties:
error:
description: Stable machine-readable code. SDK consumers should switch on this.
type: string
example: invalid_key
detail:
description: Free-form human-readable explanation. Safe to surface.
type: string
request_id:
description: Server-generated request id (also returned as the X-Request-Id header). Quote it when contacting support to correlate a failed call with server logs. Present on errors surfaced by the global error handler.
type: string
scope:
description: '429 only. Which window tripped: `burst` (per-second) or `sustained` (per-minute average).'
anyOf:
- type: string
enum:
- burst
- type: string
enum:
- sustained
retry_after_seconds:
description: On a 429, and on a 503 `bank_unavailable` from Connect. Seconds to wait before retrying. Mirrors the `Retry-After` header for clients that would rather not parse headers.
type: integer
max:
description: 429 only. The limit that was exceeded, in the units of `scope` (requests/second for `burst`, requests/minute for `sustained`).
type: integer
examples:
example1:
value:
error: invalid_key
detail: API key not recognized or revoked.
example2:
value:
error: rate_limited
detail: Burst rate limit exceeded (20 requests/sec). Retry after 1s.
scope: burst
retry_after_seconds: 1
max: 20
'422':
description: Standard error envelope used for all non-2xx responses.
content:
application/json:
schema:
description: Standard error envelope used for all non-2xx responses.
type: object
required:
- error
properties:
error:
description: Stable machine-readable code. SDK consumers should switch on this.
type: string
example: invalid_key
detail:
description: Free-form human-readable explanation. Safe to surface.
type: string
request_id:
description: Server-generated request id (also returned as the X-Request-Id header). Quote it when contacting support to correlate a failed call with server logs. Present on errors surfaced by the global error handler.
type: string
scope:
description: '429 only. Which window tripped: `burst` (per-second) or `sustained` (per-minute average).'
anyOf:
- type: string
enum:
- burst
- type: string
enum:
- sustained
retry_after_seconds:
description: On a 429, and on a 503 `bank_unavailable` from Connect. Seconds to wait before retrying. Mirrors the `Retry-After` header for clients that would rather not parse headers.
type: integer
max:
description: 429 only. The limit that was exceeded, in the units of `scope` (requests/second for `burst`, requests/minute for `sustained`).
type: integer
examples:
example1:
value:
error: invalid_key
detail: API key not recognized or revoked.
example2:
value:
error: rate_limited
detail: Burst rate limit exceeded (20 requests/sec). Retry after 1s.
scope: burst
retry_after_seconds: 1
max: 20
'429':
description: Standard error envelope used for all non-2xx responses.
content:
application/json:
schema:
description: Standard error envelope used for all non-2xx responses.
type: object
required:
- error
properties:
error:
description: Stable machine-readable code. SDK consumers should switch on this.
type: string
example: invalid_key
detail:
description: Free-form human-readable explanation. Safe to surface.
type: string
request_id:
description: Server-generated request id (also returned as the X-Request-Id header). Quote it when contacting support to correlate a failed call with server logs. Present on errors surfaced by the global error handler.
type: string
scope:
description: '429 only. Which window tripped: `burst` (per-second) or `sustained` (per-minute average).'
anyOf:
- type: string
enum:
- burst
- type: string
enum:
- sustained
retry_after_seconds:
description: On a 429, and on a 503 `bank_unavailable` from Connect. Seconds to wait before retrying. Mirrors the `Retry-After` header for clients that would rather not parse headers.
type: integer
max:
description: 429 only. The limit that was exceeded, in the units of `scope` (requests/second for `burst`, requests/minute for `sustained`).
type: integer
examples:
example1:
value:
error: invalid_key
detail: API key not recognized or revoked.
example2:
value:
error: rate_limited
detail: Burst rate limit exceeded (20 requests/sec). Retry after 1s.
scope: burst
retry_after_seconds: 1
max: 20
'500':
description: Standard error envelope used for all non-2xx responses.
content:
application/json:
schema:
description: Standard error envelope used for all non-2xx responses.
type: object
required:
- error
properties:
error:
description: Stable machine-readable code. SDK consumers should switch on this.
type: string
example: invalid_key
detail:
description: Free-form human-readable explanation. Safe to surface.
type: string
request_id:
description: Server-generated request id (also returned as the X-Request-Id header). Quote it when contacting support to correlate a failed call with server logs. Present on errors surfaced by the global error handler.
type: string
scope:
description: '429 only. Which window tripped: `burst` (per-second) or `sustained` (per-minute average).'
anyOf:
- type: string
enum:
- burst
- type: string
enum:
- sustained
retry_after_seconds:
description: On a 429, and on a 503 `bank_unavailable` from Connect. Seconds to wait before retrying. Mirrors the `Retry-After` header for clients that would rather not parse headers.
type: integer
max:
description: 429 only. The limit that was exceeded, in the units of `scope` (requests/second for `burst`, requests/minute for `sustained`).
type: integer
examples:
example1:
value:
error: invalid_key
detail: API key not recognized or revoked.
example2:
value:
error: rate_limited
detail: Burst rate limit exceeded (20 requests/sec). Retry after 1s.
scope: burst
retry_after_seconds: 1
max: 20
'503':
description: Standard error envelope used for all non-2xx responses.
content:
application/json:
schema:
description: Standard error envelope used for all non-2xx responses.
type: object
required:
- error
properties:
error:
description: Stable machine-readable code. SDK consumers should switch on this.
type: string
example: invalid_key
detail:
description: Free-form human-readable explanation. Safe to surface.
type: string
request_id:
description: Server-generated request id (also returned as the X-Request-Id header). Quote it when contacting support to correlate a failed call with server logs. Present on errors surfaced by the global error handler.
type: string
scope:
description: '429 only. Which window tripped: `burst` (per-second) or `sustained` (per-minute average).'
anyOf:
- type: string
enum:
- burst
- type: string
enum:
- sustained
retry_after_seconds:
description: On a 429, and on a 503 `bank_unavailable` from Connect. Seconds to wait before retrying. Mirrors the `Retry-After` header for clients that would rather not parse headers.
type: integer
max:
description: 429 only. The limit that was exceeded, in the units of `scope` (requests/second for `burst`, requests/minute for `sustained`).
type: integer
examples:
example1:
value:
error: invalid_key
detail: API key not recognized or revoked.
example2:
value:
error: rate_limited
detail: Burst rate limit exceeded (20 requests/sec). Retry after 1s.
scope: burst
retry_after_seconds: 1
max: 20
components:
securitySchemes:
bearerAuth:
type: http
scheme: bearer
bearerFormat: sk_<32 base58 chars>