tZERO Authorization API

The Authorization API from tZERO — 2 operation(s) for authorization.

Operations 2

POST /auth/v1/api/token Get Bearer token #
POST /auth/v1/api/refresh Refresh Token #

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API
curl "https://apis.io/api/v1/apis/tzero-authorization-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

tzero-authorization-api-openapi.yml Raw ↑
openapi: 3.2.0
info:
  title: Issuance & Secondary Markets Authorization API
  description: APIs to Create Individual broker dealer accounts, Trigger KYC on the investors in the account, Review account information and KYC results, View Primary offering that are available to invest and manage investments in the assets.
servers:
- url: https://gateway-web-api.tzero.com/app
tags:
- name: Authorization
paths:
  /auth/v1/api/token:
    post:
      tags:
      - Authorization
      summary: Get Bearer token
      operationId: loginUsingPOST
      security:
      - x-api-key: []
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/TokenResponse'
              example:
                accessToken: Bearer eyJraWQiOiJhdXRoLWpYzEtZWEIjoiM0xDYjVuWG1s...
                expiresIn: 3600
                refreshToken: 2368f1ba-5670-4095-b2bc-89745f5a1234
        '401':
          description: Unauthorized
        '403':
          description: Forbidden
        '404':
          description: Not Found
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/TokenRequest'
            example:
              clientId: some-client-id
              clientSecret: some-strong-secret
  /auth/v1/api/refresh:
    post:
      tags:
      - Authorization
      summary: Refresh Token
      operationId: refreshTokenUsingPOST
      security:
      - x-api-key: []
        bearerAuth: []
        refreshToken: []
      parameters:
      - name: refreshToken
        in: header
        required: true
        schema:
          type: string
        description: refreshToken
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                oneOf:
                - $ref: '#/components/schemas/Message'
                - $ref: '#/components/schemas/TokenResponse'
        '401':
          description: Unauthorized
        '403':
          description: Forbidden
        '404':
          description: Not Found
components:
  schemas:
    TokenResponse:
      type: object
      required:
      - accessToken
      - expiresIn
      properties:
        accessToken:
          type: string
        expiresIn:
          type: number
        refreshToken:
          type: string
      title: TokenResponse
    Message:
      type: object
      required:
      - code
      - data
      - message
      properties:
        code:
          type: string
        data:
          type: object
          additionalProperties: true
        message:
          type: string
      title: Message
    TokenRequest:
      type: object
      required:
      - clientId
      - clientSecret
      properties:
        clientId:
          type: string
        clientSecret:
          type: string
      title: TokenRequest
  securitySchemes:
    x-api-key:
      type: apiKey
      in: header
      name: x-apikey
    bearerAuth:
      type: http
      scheme: bearer
      bearerFormat: JWT
    refreshToken:
      type: refreshToken
      in: header
      name: refreshToken