Keycard

Keycard API

Keycard API as documented publicly: 15 operations. Contract generated from the documentation by API Evangelist (2026-10-24); not the provider's own document.

GitHub OpenAPI

Operations 15

GET / GET / #
GET /.well-known/jwks.json Cloudflare Workers #
GET /.well-known/oauth-authorization-server Cloudflare Workers #
GET /.well-known/oauth-protected-resource GET /.well-known/oauth-protected-resource #
GET /a2a/jsonrpc The agent exposes an A2A JSON-RPC endpoint at /a2a/jsonrpc #
POST /a2a/jsonrpc POST /a2a/jsonrpc #
GET /api/data GET /api/data #
GET /health Protect MCP servers and APIs #
POST /oauth/token POST /oauth/token #
GET /user GET /user #
GET /user/repos GET /user/repos #
GET /v1 GET /v1 #
POST /v1/messages POST /v1/messages #
POST /v1/oauth/token POST /v1/oauth/token #
POST /v1/responses POST /v1/responses #

Specifications

⚙
OpenAPI
https://artifacts.apis.io/keycard/openapi/_ae-authored/keycard-openapi-generated.yml

Schemas & Data

📊
JSONSchema
https://artifacts.apis.io/keycard/json-schema/keycard-post-a2-ajsonrpc-request-schema.json
📊
JSONSchema
https://artifacts.apis.io/keycard/json-schema/keycard-post-v1-messages-request-schema.json
📊
JSONSchema
https://artifacts.apis.io/keycard/json-schema/keycard-get-v1-response-schema.json
📊
JSONSchema
https://artifacts.apis.io/keycard/json-schema/keycard-post-oauth-token-response-schema.json
📊
JSONSchema
https://artifacts.apis.io/keycard/json-schema/keycard-post-v1-responses-request-schema.json
📊
JSONSchema
https://artifacts.apis.io/keycard/json-schema/keycard-post-v1-responses-response-schema.json

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/keycard:keycard-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

keycard-openapi-generated.yml Raw ↑ 
openapi: 3.1.0
info:
  title: Keycard API
  version: '2026-10-24'
  description: 'GENERATED FROM DOCUMENTATION by API Evangelist on 2026-10-24: 15 operation(s) read from 7 public documentation page(s) (each operation
    names its page in x-source). This is not the provider''s published contract; Keycard has published no machine-readable contract that the pipeline
    could find. Engine: local.'
  x-evidence-tiers:
    code-example: 11
    documentation: 4
    pages-with-code: 6
    pages-read: 7
  x-generated-from: documentation
  x-provenance: generated
  x-authored-by: API Evangelist
  x-generated: '2026-10-24'
  x-generator: generate-contract-from-docs.py
  x-engine: local
  x-sources:
  - https://docs.keycard.ai/guides/mcp-server.md
  - https://docs.keycard.ai/guides/access-apis-on-behalf-of-users.md
  - https://docs.keycard.ai/sdk/mcp.md
  - https://docs.keycard.ai/sdk/cloudflare.md
  - https://docs.keycard.ai/guides/grant-agent-access-to-apis.md
  - https://docs.keycard.ai/admin/configure-provider-apis/openai.md
  - https://docs.keycard.ai/admin/configure-provider-apis/anthropic.md
servers:
- url: https://api.anthropic.com
paths:
  /:
    get:
      operationId: get
      tags:
      - Api
      summary: GET /
      x-source: https://docs.keycard.ai/admin/configure-provider-apis/anthropic.md
      responses:
        '200':
          description: Success (status as documented)
      x-evidence:
        kind: code-example
        language: curl
        snippet: curl -sS "<keycard-issuer-url>/oauth/2/token"  -u "<your-client-id>:<your-client-secret>"  -d "grant_type=client_credentials"  -d
          "resource=https://api.anthropic.com"  | jq -r .access_token)
  /.well-known/jwks.json:
    get:
      operationId: get_well_known_jwks_json
      tags:
      - API
      summary: Cloudflare Workers
      x-source: https://docs.keycard.ai/sdk/cloudflare.md
      responses:
        '200':
          description: Success (status as documented)
      x-evidence:
        kind: documentation
  /.well-known/oauth-authorization-server:
    get:
      operationId: get_well_known_oauth_authorization_server
      tags:
      - API
      summary: Cloudflare Workers
      x-source: https://docs.keycard.ai/sdk/cloudflare.md
      responses:
        '200':
          description: Success (status as documented)
      x-evidence:
        kind: documentation
  /.well-known/oauth-protected-resource:
    get:
      operationId: get_well_known_oauth_protected_resource
      tags:
      - API
      summary: GET /.well-known/oauth-protected-resource
      x-source: https://docs.keycard.ai/guides/mcp-server.md
      responses:
        '200':
          description: Success (status as documented)
      x-evidence:
        kind: code-example
        language: curl
        snippet: 'curl -s http://localhost:8080/.well-known/oauth-protected-resource | jq

          ```'
  /a2a/jsonrpc:
    get:
      operationId: get_a2a_jsonrpc
      tags:
      - A2A
      summary: The agent exposes an A2A JSON-RPC endpoint at /a2a/jsonrpc
      x-source: https://docs.keycard.ai/guides/grant-agent-access-to-apis.md
      responses:
        '200':
          description: Success (status as documented)
      x-evidence:
        kind: documentation
    post:
      operationId: post_a2a_jsonrpc
      tags:
      - A2A
      summary: POST /a2a/jsonrpc
      x-source: https://docs.keycard.ai/guides/grant-agent-access-to-apis.md
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/PostA2AJsonrpcRequest'
      responses:
        '201':
          description: Success (status as documented)
      x-evidence:
        kind: code-example
        language: curl
        snippet: "curl -X POST http://localhost:9000/a2a/jsonrpc  -H \"Content-Type: application/json\"  -H \"Authorization: Bearer $CALLER_TOKEN\"\
          \  -d '{\"jsonrpc\":\"2.0\",\"id\":\"1\",\"method\":\"message/send\",\"params\":{\"message\":{\"kind\":\"message\",\"messageId\":\"\
          msg-1\",\"role\":\"user\",\"parts\":[{\"kind\":\"text\",\"text\":\"Query Snowflake for the available sample datasets\"}]}}}'\n   ```"
  /api/data:
    get:
      operationId: get_api_data
      tags:
      - Api
      summary: GET /api/data
      x-source: https://docs.keycard.ai/guides/mcp-server.md
      responses:
        '200':
          description: Success (status as documented)
      x-evidence:
        kind: code-example
        language: curl
        snippet: 'curl -D - http://localhost:8080/api/data

          HTTP/1.1 401 Unauthorized

          Www-Authenticate: Bearer resource_metadata="http://localhost:8080/.well-known/oauth-protected-resource"

          ```'
  /health:
    get:
      operationId: get_health
      tags:
      - Health
      summary: Protect MCP servers and APIs
      x-source: https://docs.keycard.ai/guides/mcp-server.md
      responses:
        '200':
          description: Success (status as documented)
      x-evidence:
        kind: documentation
  /oauth/token:
    post:
      operationId: post_oauth_token
      tags:
      - Oauth
      summary: POST /oauth/token
      x-source: https://docs.keycard.ai/admin/configure-provider-apis/openai.md
      responses:
        '201':
          description: Success (shape read from the example response on the page)
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/PostOauthTokenResponse'
      x-evidence:
        kind: code-example
        language: curl
        snippet: "curl -sS https://auth.openai.com/oauth/token  -H \"content-type: application/json\"  -d \"{\n    \\\"grant_type\\\": \\\"urn:ietf:params:oauth:grant-type:token-exchange\\\
          \",\n    \\\"subject_token\\\": \\\"${KC_TOKEN}\\\",\n    \\\"subject_token_type\\\": \\\"urn:ietf:params:oauth:token-type:jwt\\\",\n\
          \    \\\"identity_provider_id\\\": \\\"<idp_...>\\\",\n    \\\"service_account_id\\\": \\\"<user-...>\\\"\n  }\" | jq -r .access_token)"
  /user:
    get:
      operationId: get_user
      tags:
      - User
      summary: GET /user
      x-source: https://docs.keycard.ai/sdk/cloudflare.md
      responses:
        '200':
          description: Success (status as documented)
      x-evidence:
        kind: code-example
        language: javascript
        snippet: "fetch(\"https://api.github.com/user\", {\n      headers: { Authorization: `Bearer ${token.accessToken}` },\n    })"
  /user/repos:
    get:
      operationId: get_user_repos
      tags:
      - User
      summary: GET /user/repos
      x-source: https://docs.keycard.ai/sdk/mcp.md
      responses:
        '200':
          description: Success (shape read from the example response on the page)
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/GetUserReposResponse'
      x-evidence:
        kind: code-example
        language: javascript
        snippet: "fetch(\"https://api.github.com/user/repos\", {\n      headers: { Authorization: `Bearer ${token}` },\n    })"
  /v1:
    get:
      operationId: get_v1
      tags:
      - Api
      summary: GET /v1
      x-source: https://docs.keycard.ai/admin/configure-provider-apis/openai.md
      responses:
        '200':
          description: Success (shape read from the example response on the page)
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/GetV1Response'
      x-evidence:
        kind: code-example
        language: curl
        snippet: curl -sS "<keycard-issuer-url>/oauth/2/token"  -u "<your-client-id>:<your-client-secret>"  -d "grant_type=client_credentials"  -d
          "resource=https://api.openai.com/v1"  | jq -r .access_token)
  /v1/messages:
    post:
      operationId: post_v1_messages
      tags:
      - Messages
      summary: POST /v1/messages
      x-source: https://docs.keycard.ai/admin/configure-provider-apis/anthropic.md
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/PostV1MessagesRequest'
      responses:
        '201':
          description: Success (status as documented)
      x-evidence:
        kind: code-example
        language: curl
        snippet: "curl -sS https://api.anthropic.com/v1/messages  -H \"authorization: Bearer ${ANTHROPIC_TOKEN}\"  -H \"anthropic-version: 2023-06-01\"\
          \  -H \"content-type: application/json\"  -d '{\n    \"model\": \"claude-sonnet-4-6\",\n    \"max_tokens\": 1024,\n    \"messages\"\
          : [{\"role\": \"user\", \"content\": \"Hello from a Keycard workload\"}]\n  }' | jq -r '.content[0].text'\n```"
  /v1/oauth/token:
    post:
      operationId: post_v1_oauth_token
      tags:
      - Oauth
      summary: POST /v1/oauth/token
      x-source: https://docs.keycard.ai/admin/configure-provider-apis/anthropic.md
      responses:
        '201':
          description: Success (status as documented)
      x-evidence:
        kind: code-example
        language: curl
        snippet: "curl -sS https://api.anthropic.com/v1/oauth/token  -H \"content-type: application/json\"  -d \"{\n    \\\"grant_type\\\": \\\
          \"urn:ietf:params:oauth:grant-type:jwt-bearer\\\",\n    \\\"assertion\\\": \\\"${KC_TOKEN}\\\",\n    \\\"federation_rule_id\\\": \\\"\
          <fdrl_...>\\\",\n    \\\"organization_id\\\": \\\"<anthropic-org-id>\\\",\n    \\\"service_account_id\\\": \\\"<svac_...>\\\",\n   \
          \ \\\"workspace_id\\\": \\\"<wrkspc_...>\\\"\n  }\" | jq -r .access_toke"
  /v1/responses:
    post:
      operationId: post_v1_responses
      tags:
      - Responses
      summary: POST /v1/responses
      x-source: https://docs.keycard.ai/admin/configure-provider-apis/openai.md
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/PostV1ResponsesRequest'
      responses:
        '201':
          description: Success (shape read from the example response on the page)
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/PostV1ResponsesResponse'
      x-evidence:
        kind: code-example
        language: curl
        snippet: 'curl -sS https://api.openai.com/v1/responses  -H "authorization: Bearer ${OPENAI_TOKEN}"  -H "content-type: application/json"  -d
          ''{"model": "gpt-5-mini", "input": "Hello from a Keycard workload"}''  | jq -r ''[.output[] | select(.type == "message") | .content[]
          | select(.type == "output_text") | .text] | join("")''

          ```'
components:
  schemas:
    PostA2AJsonrpcRequest:
      type: object
      properties:
        jsonrpc:
          type: string
        id:
          type: string
        method:
          type: string
        params:
          type: object
          properties:
            message:
              type: object
              properties:
                kind:
                  type: string
                messageId:
                  type: string
                role:
                  type: string
                parts:
                  type: array
                  items:
                    type: object
                    properties:
                      kind:
                        type: string
                      text:
                        type: string
    PostOauthTokenResponse:
      type: object
      properties:
        model:
          type: string
        input:
          type: string
    GetUserReposResponse:
      type: object
      properties:
        error:
          type: string
    GetV1Response:
      type: object
      properties:
        model:
          type: string
        input:
          type: string
    PostV1MessagesRequest:
      type: object
      properties:
        model:
          type: string
        max_tokens:
          type: integer
        messages:
          type: array
          items:
            type: object
            properties:
              role:
                type: string
              content:
                type: string
    PostV1ResponsesRequest:
      type: object
      properties:
        model:
          type: string
        input:
          type: string
    PostV1ResponsesResponse:
      type: object
      properties:
        model:
          type: string
        input:
          type: string
  securitySchemes:
    bearer:
      type: http
      scheme: bearer
security:
- bearer: []
tags:
- name: A2A
- name: API
- name: Api
- name: Health
- name: Messages
- name: Oauth
- name: Responses
- name: User