APIs.io · Authentication Profile
Apis Io Authentication
Authentication
APIs.io secures its APIs with apiKey across 2 declared security schemes, as derived from its OpenAPI definitions.
API AggregationAPI DirectoryAPI DiscoveryAPI IndexingAPI RatingAPI SearchAPIs.jsonSearch EnginesAPI CatalogAgent DiscoveryMCPAgent SkillsOpenAPIAPI Governance
Methods: apiKey
Schemes: 2
OAuth flows:
API key in: header
Security Schemes
ApiKeyAuth apiKey
· in: header (X-API-Key)
api_key apiKey
· in: header (x-api-key)
Source
Authentication Profile
generated: '2026-08-10'
method: searched
source: https://apis.io/developer/authentication
docs: https://apis.io/developer/authentication
plans_docs: https://apis.io/developer/plans
derived_from: openapi/*.yml + openapi/_original/apis-io-v1-openapi.yml
summary:
types:
- apiKey
api_key_in:
- header
required: false
read_only: true
model: >-
v1 is open and read-only — every endpoint is a GET, no endpoint mutates the catalog, and
anonymous requests succeed on the Free tier. The OpenAPI declares an `ApiKeyAuth` apiKey scheme
that the docs describe as "API-key-ready": declared so metering and higher rate tiers can be
introduced without a breaking change. In practice a key IS already honoured — GitHub login
issues a free Starter key, and Pro/Business keys unlock the Industries, Regions, Ratings,
Insights-depth, Saved Workspace and Synthesis operations.
schemes:
- name: ApiKeyAuth
type: apiKey
in: header
parameter: X-API-Key
required: false
sources:
- openapi/_original/apis-io-v1-openapi.yml
- name: api_key
type: apiKey
in: header
parameter: x-api-key
required: false
sources:
- openapi/apis-io-apis-api-openapi.yml
- openapi/apis-io-areas-api-openapi.yml
- openapi/apis-io-artifact-types-api-openapi.yml
- openapi/apis-io-industries-api-openapi.yml
- openapi/apis-io-insights-api-openapi.yml
- openapi/apis-io-providers-api-openapi.yml
- openapi/apis-io-ratings-api-openapi.yml
- openapi/apis-io-regions-api-openapi.yml
- openapi/apis-io-search-api-openapi.yml
- openapi/apis-io-synthesis-api-openapi.yml
- openapi/apis-io-tags-api-openapi.yml
note: >-
The refined per-tag specs spell the header lowercase (`x-api-key`); the v1 contract spells it
`X-API-Key`. HTTP header names are case-insensitive, so both work.
issuance:
method: github-oauth
url: https://apis.io/developer/plans
note: Log in with GitHub to be issued a free Starter key instantly; upgrade via Stripe Checkout.
tiers:
- tier: Free
auth: none (anonymous)
price: $0
rate_limit: 5 req/s
daily_quota: 1000
- tier: Starter
auth: GitHub login
price: $0
rate_limit: 20 req/s
daily_quota: 10000
- tier: Pro
auth: GitHub login
price: $49/mo
rate_limit: 100 req/s
daily_quota: 100000
- tier: Business
auth: GitHub login
price: $199/mo
rate_limit: 400 req/s
daily_quota: 1000000
oauth2: false
openid_connect: false
mutual_tls: false
scopes:
present: false
reason: apiKey auth only — there is no OAuth scope surface to record.
cors:
allow_origin: '*'
allow_headers: [content-type, x-api-key]
allow_methods: [GET, OPTIONS]
mcp_authentication:
url: https://apis.io/mcp
anonymous_tools_list: true
gate: >-
Pro-tier tools are listed anonymously but return HTTP 402 `upgrade_required` when called
without a paid key.
oauth_discovery:
/.well-known/oauth-authorization-server: 404
/.well-known/oauth-protected-resource: 404
x-evidence:
fetched: '2026-08-10'
probes:
- url: https://apis.io/api/v1/search?q=weather&limit=1
http_status: 200
note: anonymous, no key
- url: https://apis.io/api/v1/ratings
http_status: 402
note: anonymous — tier gate
- url: https://apis.io/developer/authentication
http_status: 200
- url: https://apis.io/developer/plans
http_status: 200
Work with this as data
Every security artifact here is available over the APIs.io API and to AI agents over MCP.
MCP server
One button, every client — Claude, Cursor, VS Code and the rest.
https://apis.io/mcp
Tools for security posture
4 MCP tools reach this
find_securityBrowse and filter every security artifact in the catalog.apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.resolveTurn a domain, URL or GitHub org into the provider it belongs to.find_cohortsEvery scored population of providers in the catalog.
Call it yourself
curl for this page
This security artifact
curl "https://apis.io/api/v1/security/apis-io-authentication"
All security posture
curl "https://apis.io/api/v1/security?limit=25"
Discovery needs no key. Ratings and market analysis are Pro.
Get an API key
Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.
A second provider on the same verified email joins the account you already have.