LogicGate Authentication API

openapi: 3.2.0
info:
  title: Risk Cloud Authentication API
  description: 'Welcome to the Risk Cloud API v2! This is a collection of new API-first and RESTful API endpoints to streamline the creation of custom integrations with the Risk Cloud.


    For the API documentation of our legacy API v1 endpoints, reference Risk Cloud API v1.'
  contact:
    name: developer-relations@logicgate.com
    email: developer-relations@logicgate.com
  version: v2026.7.0
servers:
- url: https://{env}.logicgate.com
  description: The LogicGate API application.
  variables:
    env:
      default: qa
security:
- API Token: []
- basic: []
tags:
- name: Authentication
  description: 'Getting Started: How to create an API Access Token to begin integrating with the Risk Cloud API'
paths:
  /api/v2/account/token:
    post:
      tags:
      - Authentication
      summary: Refresh an API token
      description: Issue a fresh access token and rotated refresh token for a previously-created named API token. The presented refresh token is invalidated.
      operationId: refreshApiToken
      parameters:
      - name: Authorization
        in: header
        description: 'A basic authorization header containing a Risk Cloud API access token in the format `Authorization: Basic {TOKEN}`.


          To obtain a Risk Cloud API access token, refer to [Obtain an API Access Token](https://www.logicgate.com/developer/risk-cloud-api-authentication/) in the [LogicGate Help Center](https://help.logicgate.com/hc/en-us).'
        required: true
        schema:
          type: string
        example: Basic {ENCODED}
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/RefreshTokenIn'
        required: true
      responses:
        '200':
          description: Success
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiTokenRefreshedOut'
      security:
      - basic: []
  /api/v1/account/token:
    post:
      tags:
      - Authentication
      summary: Create an API Access Token
      description: '**Permissions:** Authenticated User


        Generates a new, expiring access token from the provided Client and Secret keys.'
      operationId: getApiToken
      parameters:
      - name: Authorization
        in: header
        description: 'A basic authorization header containing a Risk Cloud API access token in the format `Authorization: Basic {TOKEN}`.


          To obtain a Risk Cloud API access token, refer to [Obtain an API Access Token](https://www.logicgate.com/developer/risk-cloud-api-authentication/) in the [LogicGate Help Center](https://help.logicgate.com/hc/en-us).'
        required: true
        schema:
          type: string
        example: Basic {ENCODED}
      responses:
        '200':
          description: Success
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/LegacyApiTokenOut'
      security:
      - basic: []
components:
  schemas:
    LegacyApiTokenOut:
      type: object
      properties:
        access_token:
          type: string
          description: An API access token to be used within the bearer authorization header of subsequent Risk Cloud API requests
        token_type:
          type: string
          description: The token type, expected to be "bearer" for the Risk Cloud API
        expires_in:
          type: integer
          format: int64
          description: The remaining time in seconds until the token expires
        scope:
          type: string
          description: The privilege scope of the token, expected to be "read write" for the Risk Cloud API
      title: Api Token
    RefreshTokenIn:
      type: object
      description: Refresh-token-bearing request to issue a fresh access token.
      properties:
        refresh_token:
          type: string
          description: The refresh token plaintext returned at token creation time.
          minLength: 1
      required:
      - refresh_token
      title: Refresh Token Request
    ApiTokenRefreshedOut:
      type: object
      properties:
        access_token:
          type: string
          description: An API access token to be used within the bearer authorization header of subsequent Risk Cloud API requests
        refresh_token:
          type: string
          description: A rotated refresh token. The previously-presented refresh token is invalidated; this new refresh token must be stored by the caller for the next refresh cycle.
        token_type:
          type: string
          description: The token type, expected to be "bearer" for the Risk Cloud API
        expires_in:
          type: integer
          format: int64
          description: The remaining time in seconds until the token expires
        scope:
          type: string
          description: The privilege scope of the token, expected to be "read write" for the Risk Cloud API
      title: Refreshed Api Token
  securitySchemes:
    API_Token:
      type: http
      name: Authorization
      in: header
      scheme: bearer
      bearerFormat: API Token
    basic:
      type: http
      name: Authorization
      in: header
      scheme: basic
      bearerFormat: basic
externalDocs:
  description: Developer Portal
  url: https://www.logicgate.com/developer/