BigCommerce · Authentication Profile

Bigcommerce Authentication

Authentication

BigCommerce secures its APIs with apiKey and http across 3 declared security schemes, as derived from its OpenAPI definitions.

E-CommerceRetailCatalogOrderCheckoutPaymentsSoftware-as-a-Service

Methods: apiKey, http Schemes: 3 OAuth flows: API key in: header

Security Schemes

X-Auth-Token apiKey

· in: header (X-Auth-Token)

BearerPAT http

scheme: bearer

Authorization http

scheme: basic

Source

Authentication Profile

generated: '2026-10-12'
method: derived
source: openapi/bigcommerce-abandoned-cart-emails-api-openapi.yml, openapi/bigcommerce-abandoned-cart-settings-api-openapi.yml,
  openapi/bigcommerce-abandoned-carts-api-openapi.yml, openapi/bigcommerce-abandoned-carts-settings-api-openapi.yml,
  openapi/bigcommerce-active-theme-api-openapi.yml, openapi/bigcommerce-addresses-api-openapi.yml,
  openapi/bigcommerce-analytics-api-openapi.yml, openapi/bigcommerce-api-token-api-openapi.yml,
  openapi/bigcommerce-attribute-values-api-openapi.yml, openapi/bigcommerce-attributes-api-openapi.yml,
  openapi/bigcommerce-banners-api-openapi.yml, openapi/bigcommerce-batch-metafields-api-openapi.yml
  ...
summary:
  types:
  - apiKey
  - http
  api_key_in:
  - header
schemes:
- name: X-Auth-Token
  type: apiKey
  in: header
  parameter: X-Auth-Token
  description: |-
    ### OAuth scopes

    | UI Name | Permission | Parameter |
    |:--|:--|:-|
    | Information & Settings  | read-only  | `store_v2_information_read_only`|
    | Information & Settings  | modify     | `store_v2_information`          |

    ### Authentication header

    | Header | Argument | Description |
    |:-|:|:|
    | `X-Auth-Token` | `access_token` | For more about API accounts that generate `access_token`s, see our [Guide
  sources:
  - openapi/bigcommerce-abandoned-cart-emails-api-openapi.yml
  - openapi/bigcommerce-abandoned-cart-settings-api-openapi.yml
  - openapi/bigcommerce-abandoned-carts-api-openapi.yml
  - openapi/bigcommerce-abandoned-carts-settings-api-openapi.yml
  - openapi/bigcommerce-active-theme-api-openapi.yml
  - openapi/bigcommerce-addresses-api-openapi.yml
  - openapi/bigcommerce-analytics-api-openapi.yml
  - openapi/bigcommerce-api-token-api-openapi.yml
  - openapi/bigcommerce-attribute-values-api-openapi.yml
  - openapi/bigcommerce-attributes-api-openapi.yml
  - openapi/bigcommerce-banners-api-openapi.yml
  - openapi/bigcommerce-batch-metafields-api-openapi.yml
  - openapi/bigcommerce-blog-posts-api-openapi.yml
  - openapi/bigcommerce-blog-tags-api-openapi.yml
  - openapi/bigcommerce-brands-api-openapi.yml
  - openapi/bigcommerce-bulk-pricing-rules-api-openapi.yml
  - openapi/bigcommerce-carts-single-api-openapi.yml
  - openapi/bigcommerce-catalog-api-openapi.yml
  - openapi/bigcommerce-categories-api-openapi.yml
  - openapi/bigcommerce-categories-deprecated-api-openapi.yml
  - openapi/bigcommerce-category-assignments-api-openapi.yml
  - openapi/bigcommerce-category-trees-api-openapi.yml
  - openapi/bigcommerce-channel-assignments-api-openapi.yml
  - openapi/bigcommerce-channel-settings-api-openapi.yml
  - openapi/bigcommerce-channels-api-openapi.yml
  - openapi/bigcommerce-checkout-api-openapi.yml
  - openapi/bigcommerce-checkout-billing-address-api-openapi.yml
  - openapi/bigcommerce-checkout-consignments-api-openapi.yml
  - openapi/bigcommerce-checkout-coupons-api-openapi.yml
  - openapi/bigcommerce-checkout-discounts-api-openapi.yml
  - openapi/bigcommerce-checkout-orders-api-openapi.yml
  - openapi/bigcommerce-checkout-settings-api-openapi.yml
  - openapi/bigcommerce-checkout-token-api-openapi.yml
  - openapi/bigcommerce-complex-rules-api-openapi.yml
  - openapi/bigcommerce-consent-api-openapi.yml
  - openapi/bigcommerce-countries-api-openapi.yml
  - openapi/bigcommerce-coupons-api-openapi.yml
  - openapi/bigcommerce-currencies-bulk-api-openapi.yml
  - openapi/bigcommerce-currencies-single-api-openapi.yml
  - openapi/bigcommerce-currency-assignments-api-openapi.yml
  - openapi/bigcommerce-custom-fields-api-openapi.yml
  - openapi/bigcommerce-custom-template-associations-api-openapi.yml
  - openapi/bigcommerce-customer-batch-metafields-api-openapi.yml
  - openapi/bigcommerce-customer-impersonation-token-api-openapi.yml
  - openapi/bigcommerce-customer-metafields-api-openapi.yml
  - openapi/bigcommerce-customers-api-openapi.yml
  - openapi/bigcommerce-customs-information-api-openapi.yml
  - openapi/bigcommerce-email-statuses-api-openapi.yml
  - openapi/bigcommerce-email-templates-api-openapi.yml
  - openapi/bigcommerce-favicon-image-api-openapi.yml
  - openapi/bigcommerce-form-field-values-api-openapi.yml
  - openapi/bigcommerce-gift-certificates-api-openapi.yml
  - openapi/bigcommerce-global-settings-api-openapi.yml
  - openapi/bigcommerce-images-api-openapi.yml
  - openapi/bigcommerce-import-export-api-openapi.yml
  - openapi/bigcommerce-inventory-api-openapi.yml
  - openapi/bigcommerce-inventory-notifications-api-openapi.yml
  - openapi/bigcommerce-items-api-openapi.yml
  - openapi/bigcommerce-listings-api-openapi.yml
  - openapi/bigcommerce-logo-api-openapi.yml
  - openapi/bigcommerce-logo-image-api-openapi.yml
  - openapi/bigcommerce-manage-webhooks-bulk-api-openapi.yml
  - openapi/bigcommerce-manage-webhooks-single-api-openapi.yml
  - openapi/bigcommerce-menus-api-openapi.yml
  - openapi/bigcommerce-meta-fields-api-openapi.yml
  - openapi/bigcommerce-methods-api-openapi.yml
  - openapi/bigcommerce-order-settings-api-openapi.yml
  - openapi/bigcommerce-pages-api-openapi.yml
  - openapi/bigcommerce-pages-bulk-api-openapi.yml
  - openapi/bigcommerce-pages-single-api-openapi.yml
  - openapi/bigcommerce-payment-actions-api-openapi.yml
  - openapi/bigcommerce-placement-api-openapi.yml
  - openapi/bigcommerce-price-lists-api-openapi.yml
  - openapi/bigcommerce-price-lists-assignments-api-openapi.yml
  - openapi/bigcommerce-price-lists-records-api-openapi.yml
  - openapi/bigcommerce-product-modifiers-api-openapi.yml
  - openapi/bigcommerce-product-tax-properties-api-openapi.yml
  - openapi/bigcommerce-product-variant-options-api-openapi.yml
  - openapi/bigcommerce-product-variants-api-openapi.yml
  - openapi/bigcommerce-products-api-openapi.yml
  - openapi/bigcommerce-redirects-api-openapi.yml
  - openapi/bigcommerce-redirects-cart-redirect-urls-api-openapi.yml
  - openapi/bigcommerce-regions-api-openapi.yml
  - openapi/bigcommerce-reviews-api-openapi.yml
  - openapi/bigcommerce-scripts-api-openapi.yml
  - openapi/bigcommerce-search-filters-api-openapi.yml
  - openapi/bigcommerce-settings-api-openapi.yml
  - openapi/bigcommerce-site-api-openapi.yml
  - openapi/bigcommerce-site-certificate-api-openapi.yml
  - openapi/bigcommerce-site-checkout-url-api-openapi.yml
  - openapi/bigcommerce-site-routes-api-openapi.yml
  - openapi/bigcommerce-sites-api-openapi.yml
  - openapi/bigcommerce-sort-order-api-openapi.yml
  - openapi/bigcommerce-states-api-openapi.yml
  - openapi/bigcommerce-store-information-api-openapi.yml
  - openapi/bigcommerce-store-locale-api-openapi.yml
  - openapi/bigcommerce-store-profile-api-openapi.yml
  - openapi/bigcommerce-stored-instruments-api-openapi.yml
  - openapi/bigcommerce-storefront-category-api-openapi.yml
  - openapi/bigcommerce-storefront-product-api-openapi.yml
  - openapi/bigcommerce-storefront-robotstxt-api-openapi.yml
  - openapi/bigcommerce-storefront-search-api-openapi.yml
  - openapi/bigcommerce-storefront-security-api-openapi.yml
  - openapi/bigcommerce-storefront-seo-api-openapi.yml
  - openapi/bigcommerce-storefront-status-api-openapi.yml
  - openapi/bigcommerce-subscribers-api-openapi.yml
  - openapi/bigcommerce-summary-api-openapi.yml
  - openapi/bigcommerce-system-logs-api-openapi.yml
  - openapi/bigcommerce-tax-properties-api-openapi.yml
  - openapi/bigcommerce-tax-provider-connection-api-openapi.yml
  - openapi/bigcommerce-tax-rates-api-openapi.yml
  - openapi/bigcommerce-tax-settings-api-openapi.yml
  - openapi/bigcommerce-tax-zone-check-api-openapi.yml
  - openapi/bigcommerce-tax-zones-api-openapi.yml
  - openapi/bigcommerce-taxes-api-openapi.yml
  - openapi/bigcommerce-template-settings-api-openapi.yml
  - openapi/bigcommerce-theme-actions-api-openapi.yml
  - openapi/bigcommerce-theme-configurations-api-openapi.yml
  - openapi/bigcommerce-theme-custom-templates-api-openapi.yml
  - openapi/bigcommerce-theme-jobs-api-openapi.yml
  - openapi/bigcommerce-themes-api-openapi.yml
  - openapi/bigcommerce-timezone-api-openapi.yml
  - openapi/bigcommerce-tokens-api-openapi.yml
  - openapi/bigcommerce-transactions-api-openapi.yml
  - openapi/bigcommerce-units-of-measurement-api-openapi.yml
  - openapi/bigcommerce-validate-credentials-api-openapi.yml
  - openapi/bigcommerce-values-api-openapi.yml
  - openapi/bigcommerce-variants-batch-api-openapi.yml
  - openapi/bigcommerce-videos-api-openapi.yml
  - openapi/bigcommerce-webhook-events-api-openapi.yml
  - openapi/bigcommerce-webhooks-admin-api-openapi.yml
  - openapi/bigcommerce-widget-api-openapi.yml
  - openapi/bigcommerce-widget-template-api-openapi.yml
  - openapi/bigcommerce-wishlists-api-openapi.yml
  - openapi/bigcommerce-wishlists-items-api-openapi.yml
- name: BearerPAT
  type: http
  scheme: bearer
  bearerFormat: PAT {{PAYMENT_ACCESS_TOKEN}}
  description: |-
    ### OAuth scopes

    The required scopes are granted to the `payment_access_token` upon generation.

    ### Authentication header

    | Header | Argument | Description |
    |:-|:|:|
    |`Authorization`|`PAT {{PAYMENT_ACCESS_TOKEN}}`| Obtained using the Create Access Token endpoint.|

    ### Further reading

    For an outline of the Process Payment API call flow and more information about authenticating, see [Authentic
  sources:
  - openapi/bigcommerce-processing-api-openapi.yml
- name: Authorization
  type: http
  scheme: basic
  description: The [HTTP Basic Authentication](https://developer.mozilla.org/en-US/docs/Web/HTTP/Authentication)
    (developer.mozilla.org) credentials used to authenticate each API request to the Tax Provider
    from the associated store; set and update `username`, `password`, and optionally `profile`,
    using the [Update a Connection](/docs/rest-contracts/tax-app-connection#update-a-connection)
    request. `profile` is a
  sources:
  - openapi/bigcommerce-tax-provider-api-openapi.yml

Work with this as data

Every security artifact here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for security posture

4 MCP tools reach this

find_securityBrowse and filter every security artifact in the catalog.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This security artifact

curl "https://apis.io/api/v1/security/bigcommerce-authentication"

All security posture

curl "https://apis.io/api/v1/security?limit=25"

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.