APIs.io · Authentication Profile

Apis Io Authentication

Authentication

APIs.io secures its APIs with apiKey across 2 declared security schemes, as derived from its OpenAPI definitions.

API AggregationAPI DirectoryAPI DiscoveryAPI IndexingAPI RatingAPI SearchAPIs.jsonSearch EnginesAPI CatalogAgent DiscoveryMCPAgent SkillsOpenAPIAPI Governance
Methods: apiKey Schemes: 2 OAuth flows: API key in: header

Security Schemes

ApiKeyAuth apiKey
· in: header (X-API-Key)
api_key apiKey
· in: header (x-api-key)

Source

Authentication Profile

Raw ↑ 
generated: '2026-08-10'
method: searched
source: https://apis.io/developer/authentication
docs: https://apis.io/developer/authentication
plans_docs: https://apis.io/developer/plans
derived_from: openapi/*.yml + openapi/_original/apis-io-v1-openapi.yml
summary:
  types:
  - apiKey
  api_key_in:
  - header
  required: false
  read_only: true
model: >-
  v1 is open and read-only — every endpoint is a GET, no endpoint mutates the catalog, and
  anonymous requests succeed on the Free tier. The OpenAPI declares an `ApiKeyAuth` apiKey scheme
  that the docs describe as "API-key-ready": declared so metering and higher rate tiers can be
  introduced without a breaking change. In practice a key IS already honoured — GitHub login
  issues a free Starter key, and Pro/Business keys unlock the Industries, Regions, Ratings,
  Insights-depth, Saved Workspace and Synthesis operations.
schemes:
- name: ApiKeyAuth
  type: apiKey
  in: header
  parameter: X-API-Key
  required: false
  sources:
  - openapi/_original/apis-io-v1-openapi.yml
- name: api_key
  type: apiKey
  in: header
  parameter: x-api-key
  required: false
  sources:
  - openapi/apis-io-apis-api-openapi.yml
  - openapi/apis-io-areas-api-openapi.yml
  - openapi/apis-io-artifact-types-api-openapi.yml
  - openapi/apis-io-industries-api-openapi.yml
  - openapi/apis-io-insights-api-openapi.yml
  - openapi/apis-io-providers-api-openapi.yml
  - openapi/apis-io-ratings-api-openapi.yml
  - openapi/apis-io-regions-api-openapi.yml
  - openapi/apis-io-search-api-openapi.yml
  - openapi/apis-io-synthesis-api-openapi.yml
  - openapi/apis-io-tags-api-openapi.yml
  note: >-
    The refined per-tag specs spell the header lowercase (`x-api-key`); the v1 contract spells it
    `X-API-Key`. HTTP header names are case-insensitive, so both work.
issuance:
  method: github-oauth
  url: https://apis.io/developer/plans
  note: Log in with GitHub to be issued a free Starter key instantly; upgrade via Stripe Checkout.
tiers:
- tier: Free
  auth: none (anonymous)
  price: $0
  rate_limit: 5 req/s
  daily_quota: 1000
- tier: Starter
  auth: GitHub login
  price: $0
  rate_limit: 20 req/s
  daily_quota: 10000
- tier: Pro
  auth: GitHub login
  price: $49/mo
  rate_limit: 100 req/s
  daily_quota: 100000
- tier: Business
  auth: GitHub login
  price: $199/mo
  rate_limit: 400 req/s
  daily_quota: 1000000
oauth2: false
openid_connect: false
mutual_tls: false
scopes:
  present: false
  reason: apiKey auth only — there is no OAuth scope surface to record.
cors:
  allow_origin: '*'
  allow_headers: [content-type, x-api-key]
  allow_methods: [GET, OPTIONS]
mcp_authentication:
  url: https://apis.io/mcp
  anonymous_tools_list: true
  gate: >-
    Pro-tier tools are listed anonymously but return HTTP 402 `upgrade_required` when called
    without a paid key.
  oauth_discovery:
    /.well-known/oauth-authorization-server: 404
    /.well-known/oauth-protected-resource: 404
x-evidence:
  fetched: '2026-08-10'
  probes:
  - url: https://apis.io/api/v1/search?q=weather&limit=1
    http_status: 200
    note: anonymous, no key
  - url: https://apis.io/api/v1/ratings
    http_status: 402
    note: anonymous — tier gate
  - url: https://apis.io/developer/authentication
    http_status: 200
  - url: https://apis.io/developer/plans
    http_status: 200

Work with this as data

Every security artifact here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for security posture

4 MCP tools reach this
  • find_securityBrowse and filter every security artifact in the catalog.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools

Call it yourself

curl for this page
This security artifact 
curl "https://apis.io/api/v1/security/apis-io-authentication"
All security posture 
curl "https://apis.io/api/v1/security?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no email required.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.