Capy · Authentication Profile

Capy Authentication

Authentication

Capy secures its APIs with http across 1 declared security scheme, as derived from its OpenAPI definitions.

CompanyAiAI Coding AgentSoftware EngineeringDeveloper ToolsAutomationCode ReviewDevOps
Methods: http Schemes: 1 OAuth flows: API key in:

Security Schemes

bearerAuth http
scheme: bearer

Source

Authentication Profile

Raw ↑ 
generated: '2026-07-18'
method: searched
source: openapi/capy-openapi-original.json
docs: https://docs.capy.ai/api-reference/overview
summary:
  types:
  - http
  http_schemes:
  - bearer
  token_format: capy_xxxx
  header: 'Authorization: Bearer [example key]'
  token_management: https://capy.ai/settings/tokens
schemes:
- name: bearerAuth
  type: http
  scheme: bearer
  description: API token (capy_xxxx). Generate at capy.ai/settings/tokens
  token_prefix: capy_
  sources:
  - openapi/capy-openapi-original.json
notes:
- Session identity tokens (verifySession / getThreadSessionToken) are a separate,
  short-lived token issued per captain session and written inside the VM at
  /etc/capy/session-token (mode 0600); they are not API auth credentials but let
  code prove a request came from a genuine Capy session.