Uniform Authentication API
The Authentication API from Uniform — 1 operation(s) for authentication.
Work with this as data
Every API here is available over the APIs.io API and to AI agents over MCP.
MCP server
One button, every client — Claude, Cursor, VS Code and the rest.
https://apis.io/mcp
Tools for apis
7 MCP tools reach this
find_apisBrowse and filter every API in the catalog.get_api_artifactsOne API's artifacts, grouped by type.get_openapiThe primary OpenAPI for this API.find_similar_apisAPIs that look like this one.apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.resolveTurn a domain, URL or GitHub org into the provider it belongs to.find_cohortsEvery scored population of providers in the catalog.
Call it yourself
curl for this page
This API
curl "https://apis.io/api/v1/apis/uniform:uniform-authentication-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.
Get an API key
Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.
A second provider on the same verified email joins the account you already have.
OpenAPI Specification
openapi: 3.2.0
info:
title: Uniform Platform Authentication API
version: '2.0'
tags:
- name: Authentication
paths:
/api/v1/token:
post:
description: 'Exchange credentials for delegation tokens.
Supported grant types and authentication:
- `session_token` (bearer-protected): requires `Authorization: Bearer `. Mints a short-lived (10s) session token bound to the requested integration and project.
- `delegation_token` (integration-secret protected): exchanges a session token plus the integration `app_secret` for a delegation access token (and, when allowed, a refresh token). No bearer token is used.
- `refresh_token` (integration-secret protected): exchanges a refresh token plus the integration `app_secret` for a new delegation/refresh pair. No bearer token is used.'
deprecated: true
requestBody:
required: true
content:
application/json:
schema:
oneOf:
- type: object
properties:
grantType:
type: string
enum:
- session_token
integrationId:
type: string
format: uuid
projectId:
type: string
format: uuid
allowRefresh:
type: boolean
default: false
required:
- grantType
- integrationId
- projectId
- type: object
properties:
grantType:
type: string
enum:
- delegation_token
sessionToken:
type: string
integrationId:
type: string
format: uuid
integrationSecret:
type: string
required:
- grantType
- sessionToken
- integrationId
- integrationSecret
- type: object
properties:
grantType:
type: string
enum:
- refresh_token
refreshToken:
type: string
integrationId:
type: string
format: uuid
integrationSecret:
type: string
required:
- grantType
- refreshToken
- integrationId
- integrationSecret
responses:
'200':
description: Token exchange successful
content:
application/json:
schema:
anyOf:
- type: object
properties:
sessionToken:
type: string
expiresIn:
type: number
required:
- sessionToken
- expiresIn
- type: object
properties:
accessToken:
type: string
refreshToken:
type: string
tokenType:
type: string
enum:
- Bearer
expiresIn:
type: number
required:
- accessToken
- tokenType
- expiresIn
'400':
$ref: '#/components/responses/BadRequestError'
'401':
$ref: '#/components/responses/UnauthorizedError'
'403':
$ref: '#/components/responses/ForbiddenError'
'404':
description: Integration or project not found
'429':
$ref: '#/components/responses/RateLimitError'
'500':
$ref: '#/components/responses/InternalServerError'
tags:
- Authentication
security: []
summary: Create api token
x-summary-source: derived
operationId: postApiV1Token
x-operation-id-source: derived
options:
tags:
- Authentication
responses:
'204':
description: ok
description: Handles preflight requests. This endpoint allows CORS.
summary: Describe api token
x-summary-source: derived
operationId: optionsApiV1Token
x-operation-id-source: derived
components:
responses:
InternalServerError:
description: Execution error occurred
UnauthorizedError:
description: API key or token was not valid
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
ForbiddenError:
description: Permission was denied
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
BadRequestError:
description: Request input validation failed
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
RateLimitError:
description: Too many requests in allowed time period
schemas:
Error:
type: object
properties:
errorMessage:
description: Error message(s) that occurred while processing the request
oneOf:
- type: array
items:
type: string
- type: string
securitySchemes:
ApiKeyAuth:
type: apiKey
in: header
name: x-api-key
BearerAuth:
type: http
scheme: bearer
x-provenance:
method: harvested
publisher: Uniform
source: https://docs.uniform.app/openapi.json
note: split by refine-openapis from the provider's own published document, verified by fetch (openapi/_original/*.fetch.json);
stamped by stamp-openapi-provenance.py (roadmap#793)