LogicGate Authentication API

openapi: 3.1.0
info:
  title: Risk Cloud Access Audit Authentication API
  description: 'Welcome to the Risk Cloud API v2! This is a collection of new API-first and RESTful API endpoints to streamline the creation of custom integrations with the Risk Cloud.


    For the API documentation of our legacy API v1 endpoints, reference [Risk Cloud API v1](https://docs.logicgate.com/v1/index.html).'
  contact:
    name: developer-relations@logicgate.com
    email: developer-relations@logicgate.com
  version: v2026.7.0
servers:
- url: https://{env}.logicgate.com
  description: The LogicGate API application.
  variables:
    env:
      default: qa
security:
- API Token: []
- basic: []
tags:
- name: Authentication
  description: 'Getting Started: How to create an [API Access Token](https://www.logicgate.com/developer/risk-cloud-api-authentication/) to begin integrating with the Risk Cloud API'
paths:
  /api/v2/account/token:
    post:
      tags:
      - Authentication
      summary: Refresh an API token
      description: Issue a fresh access token and rotated refresh token for a previously-created named API token. The presented refresh token is invalidated.
      operationId: refreshApiToken
      parameters:
      - name: Authorization
        in: header
        description: 'A basic authorization header containing a Risk Cloud API access token in the format `Authorization: Basic {TOKEN}`.


          To obtain a Risk Cloud API access token, refer to [Obtain an API Access Token](https://www.logicgate.com/developer/risk-cloud-api-authentication/) in the [LogicGate Help Center](https://help.logicgate.com/hc/en-us).'
        required: true
        schema:
          type: string
        example: Basic {ENCODED}
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/RefreshTokenIn'
        required: true
      responses:
        '200':
          description: Success
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiTokenRefreshedOut'
      security:
      - basic: []
  /api/v1/account/token:
    post:
      tags:
      - Authentication
      summary: Create an API Access Token
      description: '**Permissions:** Authenticated User


        Generates a new, expiring access token from the provided Client and Secret keys.'
      operationId: getApiToken
      parameters:
      - name: Authorization
        in: header
        description: 'A basic authorization header containing a Risk Cloud API access token in the format `Authorization: Basic {TOKEN}`.


          To obtain a Risk Cloud API access token, refer to [Obtain an API Access Token](https://www.logicgate.com/developer/risk-cloud-api-authentication/) in the [LogicGate Help Center](https://help.logicgate.com/hc/en-us).'
        required: true
        schema:
          type: string
        example: Basic {ENCODED}
      responses:
        '200':
          description: Success
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/LegacyApiTokenOut'
      security:
      - basic: []
components:
  schemas:
    ApiTokenRefreshedOut:
      type: object
      properties:
        access_token:
          type: string
          description: An API access token to be used within the bearer authorization header of subsequent Risk Cloud API requests
        refresh_token:
          type: string
          description: A rotated refresh token. The previously-presented refresh token is invalidated; this new refresh token must be stored by the caller for the next refresh cycle.
        token_type:
          type: string
          description: The token type, expected to be "bearer" for the Risk Cloud API
        expires_in:
          type: integer
          format: int64
          description: The remaining time in seconds until the token expires
        scope:
          type: string
          description: The privilege scope of the token, expected to be "read write" for the Risk Cloud API
      title: Refreshed Api Token
    LegacyApiTokenOut:
      type: object
      properties:
        access_token:
          type: string
          description: An API access token to be used within the bearer authorization header of subsequent Risk Cloud API requests
        token_type:
          type: string
          description: The token type, expected to be "bearer" for the Risk Cloud API
        expires_in:
          type: integer
          format: int64
          description: The remaining time in seconds until the token expires
        scope:
          type: string
          description: The privilege scope of the token, expected to be "read write" for the Risk Cloud API
      title: Api Token
    RefreshTokenIn:
      type: object
      description: Refresh-token-bearing request to issue a fresh access token.
      properties:
        refresh_token:
          type: string
          description: The refresh token plaintext returned at token creation time.
          minLength: 1
      required:
      - refresh_token
      title: Refresh Token Request
  securitySchemes:
    API Token:
      type: http
      name: Authorization
      in: header
      scheme: bearer
      bearerFormat: API Token
    basic:
      type: http
      name: Authorization
      in: header
      scheme: basic
      bearerFormat: basic
externalDocs:
  description: Developer Portal
  url: https://www.logicgate.com/developer/