Anaconda Authentication

generated: '2026-08-02'
method: searched
source: openapi/anaconda-ai-navigator-openapi-original.json, openapi/anaconda-audit-logs-openapi-original.json,
  openapi/anaconda-desktop-openapi-original.json, openapi/anaconda-org-management-openapi-original.json,
  openapi/anaconda-server-openapi-original.json, well-known/anaconda-openid-configuration.json
docs: https://anaconda.com/docs/anaconda-platform/user/api-keys
docs_additional:
- https://anaconda.com/docs/anaconda-platform/admin/audit-logs/audit-log-api
- https://anaconda.com/docs/anaconda-platform/admin/org-management-api/org-management-api
- https://anaconda.com/docs/cli-reference/anaconda-auth/getting-started
- https://anaconda.com/docs/anaconda-org/admin-guide/tokens
summary:
  types:
  - http
  - apiKey
  - openIdConnect
  api_key_in:
  - header
  oauth2_flows:
  - authorization_code
  - client_credentials
  - refresh_token
  - password
  - device_code
  note: Anaconda runs a single OIDC identity service (issuer https://auth.anaconda.com/api/auth)
    that mints the bearer tokens the Platform APIs accept. The individual OpenAPI documents
    declare only the bearer/apiKey schemes; the OAuth 2.0 / OIDC layer is discovered
    from /.well-known/openid-configuration and documented in the docs pages above.
identity_provider:
  issuer: https://auth.anaconda.com/api/auth
  discovery: https://anaconda.com/.well-known/openid-configuration
  file: well-known/anaconda-openid-configuration.json
  authorization_endpoint: https://anaconda.com/api/auth/oauth2/authorize
  token_endpoint: https://anaconda.com/api/auth/oauth2/token
  device_authorization_endpoint: https://anaconda.com/api/auth/oauth2/device/authorize
  userinfo_endpoint: https://anaconda.com/api/auth/oauth2/userinfo
  end_session_endpoint: https://anaconda.com/api/auth/oauth2/sessions/logout
  jwks_uri: https://anaconda.com/api/auth/.well-known/jwks.json
  scopes_supported:
  - openid
  - profile
  - email
  grant_types_supported:
  - authorization_code
  - refresh_token
  - client_credentials
  - password
  - urn:ietf:params:oauth:grant-type:device_code
  response_types_supported:
  - code
  token_endpoint_auth_methods_supported:
  - client_secret_basic
  - client_secret_post
service_account_flow:
  description: Machine-to-machine access for the Organization Management API and the
    Audit Logs API. Create a service account in the Anaconda Platform admin console,
    then exchange its client_id/client_secret for a short-lived bearer token.
  token_endpoint: https://anaconda.com/api/iam/token
  grant_type: client_credentials
  content_type: application/x-www-form-urlencoded
  token_type: Bearer
  expires_in: 900
  required_headers:
  - name: Authorization
    value: Bearer <ACCESS_TOKEN>
  - name: X-Org-Name
    value: <ORG_ID>
  - name: X-API-Version
    value: v1
  docs: https://anaconda.com/docs/anaconda-platform/admin/audit-logs/audit-log-api
schemes:
- name: JWT or Access Token
  type: http
  scheme: bearer
  bearerFormat: JWT
  description: Bearer token obtained by authenticating with an organization service
    account's client_id and client_secret.
  sources:
  - openapi/anaconda-org-management-openapi-original.json
  - openapi/anaconda-audit-logs-openapi-original.json
- name: Organization Admin
  type: http
  scheme: bearer
  bearerFormat: JWT
  description: Bearer token obtained by authenticating with an organization admin's
    email and password (grant_type=password).
  sources:
  - openapi/anaconda-org-management-openapi-original.json
- name: jwt
  type: http
  scheme: bearer
  bearerFormat: JWT
  description: Anaconda Server / Anaconda Platform repository API bearer token.
  sources:
  - openapi/anaconda-server-openapi-original.json
- name: user_token
  type: apiKey
  in: header
  parameter: X-Auth
  description: Long-lived user private token for the Anaconda Server repository API,
    sent in the X-Auth header. This is the token class `anaconda token install` provisions
    for conda clients.
  sources:
  - openapi/anaconda-server-openapi-original.json
- name: bearerAuth
  type: http
  scheme: bearer
  bearerFormat: UUID
  description: 'API key for the local Desktop and AI Navigator APIs ("Enter your API
    key here").'
  sources:
  - openapi/anaconda-desktop-openapi-original.json
  - openapi/anaconda-ai-navigator-openapi-original.json
- name: anaconda.org token
  type: apiKey
  in: header
  parameter: Authorization
  description: 'Anaconda.org repository token, created with `anaconda org auth --create`
    or in the anaconda.org UI. Anonymous reads are permitted; writes and private-channel
    reads require a token. Not declared in any OpenAPI — captured from the docs.'
  sources:
  - https://anaconda.com/docs/anaconda-org/admin-guide/tokens
x-evidence:
  fetched: '2026-08-02'
  openid_configuration_http_status: 200