Stellantis

Stellantis Auth API

Authentication endpoint for obtaining and refreshing access tokens.

GitHub OpenAPI

Operations 8

POST /api/v1/auth OAuth2 token endpoint. Supports the `password` and `refresh_token` grant types #
POST /v1/auth/token Token #
OPTIONS /v1/auth/token Describe auth token #
POST /v4/auth/token Fetches an authentication token for a user #
POST /v4/auth/bankid/begin Begins a BankID verification process #
POST /v4/auth/bankid/begin-on-file Begins a BankID-on-file verification process #
GET /v4/auth/bankid/progress Gets the progress of a BankID verification #
POST /v4/auth/bankid/cancel Cancels an ongoing BankID verification #

Specifications

⚙
OpenAPI
https://artifacts.apis.io/stellantis/openapi/stellantis-auth-api-openapi.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/stellantis:stellantis-auth-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

stellantis-auth-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: Telenor Sverige Auth API
  version: '1.0'
  description: 'Operations tagged Auth across 3 of this provider''s published API definitions: rotageek-openapi.yml, stellantis_swagger.yml, tradera-openapi.yml. Each path carries the servers of the definition it was published in.'
servers:
- url: https://api.stellantis-developers.com
tags:
- name: Auth
  description: Authentication endpoint for obtaining and refreshing access tokens.
paths:
  /api/v1/auth:
    post:
      tags:
      - Auth
      summary: OAuth2 token endpoint. Supports the `password` and `refresh_token` grant types
      operationId: Auth_Token
      requestBody:
        content:
          application/x-www-form-urlencoded:
            schema:
              type: object
              properties:
                grant_type:
                  enum:
                  - password
                  - refresh_token
                  type: string
                username:
                  type: string
                password:
                  type: string
                  format: password
                refresh_token:
                  type: string
            encoding:
              grant_type:
                style: form
              username:
                style: form
              password:
                style: form
              refresh_token:
                style: form
      responses:
        '200':
          description: OK
      security:
      - Bearer: []
  /v1/auth/token:
    post:
      operationId: token
      parameters:
      - name: user
        in: header
        required: false
        schema:
          type: string
      - name: password
        in: header
        required: false
        schema:
          type: string
      responses:
        '200':
          description: 200 response
          headers:
            Access-Control-Allow-Origin:
              schema:
                type: string
            Access-Control-Allow-Methods:
              schema:
                type: string
            Access-Control-Allow-Headers:
              schema:
                type: string
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/AuthTokenResponse'
        '400':
          description: 400 response
        '403':
          description: 403 response
      x-amazon-apigateway-request-validator: validate_body
      x-amazon-apigateway-integration:
        httpMethod: POST
        uri: arn:aws:apigateway:us-east-1:lambda:path/2015-03-31/functions/arn:aws:lambda:us-east-1:797059771617:function:stellanova-token-auth/invocations
        responses:
          default:
            statusCode: '200'
            responseParameters:
              method.response.header.Access-Control-Allow-Origin: '''*'''
        passthroughBehavior: when_no_match
        timeoutInMillis: 29000
        contentHandling: CONVERT_TO_TEXT
        type: aws_proxy
      tags:
      - Auth
      summary: Token
      x-summary-source: derived
    options:
      responses:
        '200':
          description: 200 response
          headers:
            Access-Control-Allow-Origin:
              schema:
                type: string
            Access-Control-Allow-Methods:
              schema:
                type: string
            Access-Control-Allow-Credentials:
              schema:
                type: string
            Access-Control-Allow-Headers:
              schema:
                type: string
      x-amazon-apigateway-integration:
        httpMethod: POST
        uri: arn:aws:apigateway:us-east-1:lambda:path/2015-03-31/functions/arn:aws:lambda:us-east-1:797059771617:function:stellanova-token-auth/invocations
        responses:
          default:
            statusCode: '200'
            responseParameters:
              method.response.header.Access-Control-Allow-Methods: '''OPTIONS,POST'''
              method.response.header.Access-Control-Allow-Headers: '''Content-Type,X-Amz-Date,Authorization,X-Api-Key,X-Amz-Security-Token'''
              method.response.header.Access-Control-Allow-Origin: '''*'''
        passthroughBehavior: when_no_match
        timeoutInMillis: 29000
        contentHandling: CONVERT_TO_TEXT
        type: aws_proxy
      tags:
      - Auth
      summary: Describe auth token
      x-summary-source: derived
      operationId: optionsV1AuthToken
      x-operation-id-source: derived
    servers:
    - url: https://api.stellantis-developers.com
  /v4/auth/token:
    post:
      tags:
      - Auth
      summary: Fetches an authentication token for a user
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/FetchTokenRequest'
          text/json:
            schema:
              $ref: '#/components/schemas/FetchTokenRequest'
          application/*+json:
            schema:
              $ref: '#/components/schemas/FetchTokenRequest'
      responses:
        '200':
          description: OK
          content:
            text/plain:
              schema:
                $ref: '#/components/schemas/Token'
            application/json:
              schema:
                $ref: '#/components/schemas/Token'
            text/json:
              schema:
                $ref: '#/components/schemas/Token'
      security:
      - AppAuth: []
        AppKeyAuth: []
        UserAuth: []
        UserTokenAuth: []
      operationId: postV4AuthToken
      x-operation-id-source: derived
  /v4/auth/bankid/begin:
    post:
      tags:
      - Auth
      summary: Begins a BankID verification process
      responses:
        '200':
          description: OK
          content:
            text/plain:
              schema:
                $ref: '#/components/schemas/BeginBankIdVerificationResult'
            application/json:
              schema:
                $ref: '#/components/schemas/BeginBankIdVerificationResult'
            text/json:
              schema:
                $ref: '#/components/schemas/BeginBankIdVerificationResult'
      security:
      - AppAuth: []
        AppKeyAuth: []
        UserAuth: []
        UserTokenAuth: []
      operationId: postV4AuthBankidBegin
      x-operation-id-source: derived
  /v4/auth/bankid/begin-on-file:
    post:
      tags:
      - Auth
      summary: Begins a BankID-on-file verification process
      responses:
        '200':
          description: OK
          content:
            text/plain:
              schema:
                $ref: '#/components/schemas/BeginBankIdOnFileVerificationResult'
            application/json:
              schema:
                $ref: '#/components/schemas/BeginBankIdOnFileVerificationResult'
            text/json:
              schema:
                $ref: '#/components/schemas/BeginBankIdOnFileVerificationResult'
      security:
      - AppAuth: []
        AppKeyAuth: []
        UserAuth: []
        UserTokenAuth: []
      operationId: postV4AuthBankidBeginOnFile
      x-operation-id-source: derived
  /v4/auth/bankid/progress:
    get:
      tags:
      - Auth
      summary: Gets the progress of a BankID verification
      parameters:
      - name: bankIdOrderRef
        in: query
        schema:
          type: string
      responses:
        '200':
          description: OK
          content:
            text/plain:
              schema:
                $ref: '#/components/schemas/GetBankIdVerificationProgressResult'
            application/json:
              schema:
                $ref: '#/components/schemas/GetBankIdVerificationProgressResult'
            text/json:
              schema:
                $ref: '#/components/schemas/GetBankIdVerificationProgressResult'
      security:
      - AppAuth: []
        AppKeyAuth: []
        UserAuth: []
        UserTokenAuth: []
      operationId: getV4AuthBankidProgress
      x-operation-id-source: derived
  /v4/auth/bankid/cancel:
    post:
      tags:
      - Auth
      summary: Cancels an ongoing BankID verification
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/CancelBankIdVerificationRequest'
          text/json:
            schema:
              $ref: '#/components/schemas/CancelBankIdVerificationRequest'
          application/*+json:
            schema:
              $ref: '#/components/schemas/CancelBankIdVerificationRequest'
      responses:
        '200':
          description: OK
      security:
      - AppAuth: []
        AppKeyAuth: []
        UserAuth: []
        UserTokenAuth: []
      operationId: postV4AuthBankidCancel
      x-operation-id-source: derived
components:
  schemas:
    AuthTokenResponse:
      type: object
      properties:
        access_token:
          type: string
        token_type:
          type: string
        expires_in:
          type: integer
          format: int32
    Token:
      type: object
      properties:
        authToken:
          type:
          - string
          - 'null'
        hardExpirationTime:
          type: string
          format: date-time
      additionalProperties: false
    FetchTokenRequest:
      type: object
      properties:
        userId:
          type: integer
          description: The user ID to fetch a token for.
          format: int32
        secretKey:
          type:
          - string
          - 'null'
          description: The secret key for token generation.
      additionalProperties: false
      description: Request body for the FetchToken endpoint.
    BeginBankIdOnFileVerificationResult:
      type: object
      properties:
        bankIdOrderRef:
          type:
          - string
          - 'null'
        error:
          type:
          - string
          - 'null'
        autoStartToken:
          type:
          - string
          - 'null'
      additionalProperties: false
    GetBankIdVerificationProgressResult:
      type: object
      properties:
        isCompleted:
          type: boolean
        progress:
          type:
          - string
          - 'null'
        error:
          type:
          - string
          - 'null'
        qrData:
          type:
          - string
          - 'null'
      additionalProperties: false
    BeginBankIdVerificationResult:
      type: object
      properties:
        bankIdOrderRef:
          type:
          - string
          - 'null'
        error:
          type:
          - string
          - 'null'
        qrData:
          type:
          - string
          - 'null'
        autoStartToken:
          type:
          - string
          - 'null'
      additionalProperties: false
    CancelBankIdVerificationRequest:
      type: object
      properties:
        bankIdOrderRef:
          type:
          - string
          - 'null'
          description: The BankID order reference to cancel.
      additionalProperties: false
      description: Request body for the CancelBankIdVerification endpoint.
  securitySchemes:
    Bearer:
      type: http
      description: Paste the JWT access token returned by POST /api/v1/auth. Swagger adds the 'Bearer ' prefix automatically.
      scheme: bearer
      bearerFormat: JWT
    oauth2:
      type: oauth2
      description: OAuth2 Password Grant
      flows:
        password:
          tokenUrl: /api/v1/auth
          scopes: {}
    api_key:
      type: apiKey
      name: x-api-key
      in: header
    SDK-Cognito-Authorizer:
      type: apiKey
      name: Authorization
      in: header
      x-amazon-apigateway-authtype: cognito_user_pools
      x-amazon-apigateway-authorizer:
        providerARNs:
        - arn:aws:cognito-idp:us-east-1:797059771617:userpool/us-east-1_y8aYykgiQ
        type: cognito_user_pools
    AppAuth:
      type: apiKey
      description: Application ID
      name: X-App-Id
      in: header
    AppKeyAuth:
      type: apiKey
      description: Application Key
      name: X-App-Key
      in: header
    UserAuth:
      type: apiKey
      description: User ID
      name: X-User-Id
      in: header
    UserTokenAuth:
      type: apiKey
      description: User Token
      name: X-User-Token
      in: header
x-refined-from:
- rotageek-openapi.yml
- stellantis_swagger.yml
- tradera-openapi.yml