Ashby · Authentication Profile

Ashby Hq Authentication

Authentication

Ashby secures its APIs with apiKey and http across 2 declared security schemes, as derived from its OpenAPI definitions.

ATSApplicant Tracking SystemRecruitingTalent AcquisitionSourcingCRMSchedulingAnalyticsHiringHR TechAI
Methods: apiKey, http Schemes: 2 OAuth flows: API key in: header

Security Schemes

BasicAuth http
scheme: basic
WebhookSignature apiKey
· in: header (Ashby-Signature)

Source

Authentication Profile

Raw ↑ 
generated: '2026-07-11'
method: derived
source: openapi/ashby-openapi.yml
summary:
  types:
  - apiKey
  - http
  api_key_in:
  - header
schemes:
- name: BasicAuth
  type: http
  scheme: basic
  description: HTTP Basic Auth. Send your Ashby API key as the username and leave the password
    blank.
  sources:
  - openapi/ashby-openapi.yml
- name: WebhookSignature
  type: apiKey
  in: header
  parameter: Ashby-Signature
  description: HMAC-SHA256 signature of the webhook payload, used to verify webhook authenticity.
  sources:
  - openapi/ashby-openapi.yml