big xyt · Authentication Profile

Big Xyt Authentication

Authentication

big xyt secures its APIs with oauth2 across 1 declared security scheme, as derived from its OpenAPI definitions. OAuth 2.0 is offered via the password flow(s).

FinancialMarket DataTick DataTradingAnalyticsEquitiesETFsTransaction Cost AnalysisLiquidityOrder Book

Methods: oauth2 Schemes: 1 OAuth flows: password API key in:

Security Schemes

xytHubOAuth2 oauth2

Source

Authentication Profile

generated: '2026-07-22'
method: searched
source: https://github.com/vekonyz/xythub.github.io/blob/master/pages/xyt/api_overview.md
docs: https://docs.big-xyt.com/en/api/api
status: legacy-documented
note: |
  The current API reference at docs.big-xyt.com is login-gated (HTTP 403
  unauthenticated), so the live authentication model cannot be verified. This
  profile is captured from the last PUBLIC documentation of the xyt hub API
  (2018, preserved in the vekonyz fork of xythub.github.io after the official
  repo's history was squashed in 2023). It documented OAuth 2.0 Resource Owner
  Password Credentials grant issuing bearer tokens: POST to
  AUTH_SERVICE_URL/oauth/token with HTTP basic client credentials
  (client_id "xyt" + a service secret) and grant_type=password plus
  username/password form fields; the JSON response returned access_token,
  token_type bearer, expires_in ~43199 seconds (12h), scope "read". Every API
  request then carries "Authorization: Bearer TOKEN". Requests/responses used a
  length-prefixed Protocol Buffers v3 binary wire format. Treat as legacy
  provenance until the gated current docs can be verified.
summary:
  types: [oauth2]
  oauth2_flows: [password]
  token_type: bearer
  token_lifetime_seconds: 43199
  scopes_observed: [read]
schemes:
- name: xytHubOAuth2
  type: oauth2
  flow: password
  token_url: '{AUTH_SERVICE_URL}/oauth/token'
  client_authentication: HTTP basic (client_id "xyt" + service secret)
  token_usage: 'Authorization: Bearer {access_token}'
  status: legacy-2018-docs, unverified against current gated documentation
  sources:
  - https://github.com/vekonyz/xythub.github.io/blob/master/pages/xyt/api_overview.md

Work with this as data

Every security artifact here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for security posture

4 MCP tools reach this

find_securityBrowse and filter every security artifact in the catalog.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This security artifact

curl "https://apis.io/api/v1/security/big-xyt-authentication"

All security posture

curl "https://apis.io/api/v1/security?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.