Altruist · Authentication Profile

Altruist Authentication

Authentication

Altruist secures its APIs with oauth2 and openIdConnect across 2 declared security schemes, as derived from its OpenAPI definitions. OAuth 2.0 is offered via the authorizationCode and password flow(s).

CompanyFintechCustodyWealth ManagementFinancial AdvisorsRIAInvestingAuthentication

Methods: oauth2, openIdConnect Schemes: 2 OAuth flows: authorizationCode, password API key in:

Security Schemes

OpenAPI-OAuth2-AuthorizationCode oauth2

Realtime-OAuth2-Password oauth2

Source

Authentication Profile

generated: '2026-07-17'
method: searched
source: https://developer.altruist.com/docs/open-api-authentication
docs:
- https://developer.altruist.com/docs/open-api-authentication
- https://developer.altruist.com/docs/authentication-1
summary:
  types: [oauth2, openIdConnect]
  oauth2_flows: [authorizationCode, password]
  notes: >-
    Altruist exposes two API surfaces, each with its own OAuth 2.0 model. The
    Open API uses the OAuth 2.0 Authorization Code flow (partner-facing,
    consent-based). The Realtime API uses the OAuth 2.0 Resource Owner Password
    Credentials grant against a Keycloak/OpenID Connect realm. Both present the
    access token as an `Authorization: Bearer <token>` header. No API-key auth.
schemes:
- name: OpenAPI-OAuth2-AuthorizationCode
  api: Altruist Open API
  type: oauth2
  flow: authorizationCode
  authorizationUrl: https://oauth.stage1.altruistnet.tech/api/oauth2/authorize
  tokenUrl: https://openapi.altruist.com/altruist-open-api/oauth2/token
  scopes: [openid]
  credential_header: 'Authorization: <access_token>'
  parameters:
    authorize: [client_id, redirect_uri, scope, state]
    token: [client_id, client_secret, code, refresh_token, grant_type, token_type]
  redirect_uri_rules: HTTPS required; localhost not supported; must be whitelisted
  access_token_ttl_seconds: 3600
  refresh_token_ttl_days: 30
  source: https://developer.altruist.com/docs/open-api-authentication
- name: Realtime-OAuth2-Password
  api: Altruist Realtime API
  type: oauth2
  flow: password
  tokenUrl: https://auth.altruist.com/realms/altruist/protocol/openid-connect/token
  sandbox_tokenUrl: https://auth.demo1.altruistnet.tech/realms/altruist/protocol/openid-connect/token
  credential_header: 'Authorization: Bearer <access_token>'
  parameters:
    token: [grant_type, username, password, client_id, client_secret]
  access_token_ttl_seconds: 300
  identity_provider: Keycloak / OpenID Connect (realm "altruist")
  source: https://developer.altruist.com/docs/authentication-1

Work with this as data

Every security artifact here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for security posture

4 MCP tools reach this

find_securityBrowse and filter every security artifact in the catalog.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools

Call it yourself

curl for this page

This security artifact

curl "https://apis.io/api/v1/security/altruist-authentication"

All security posture

curl "https://apis.io/api/v1/security?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no email required.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.