Clarafintech Authentication

generated: '2026-10-08'
method: searched
generator: extract-docs-artifacts.py (local)
source: https://developers.clara.team/authentication
sources:
- https://developers.clara.team/authentication
description: 'Clara API uses two‑layer authentication: mutual TLS (mTLS) for the connection and OAuth 2.0 Bearer token for each request. Both
  must be present.'
schemes:
- type: mtls
  name: mutual TLS
  evidence: 'Clara’s API uses two-layer authentication: mTLS (mutual TLS) for the connection and OAuth 2.0 Bearer token for each request.'
  how_to_obtain: Create a project in the Clara dashboard and download the client certificate (public key) and private key; the certificate is
    used during the TLS handshake.
- type: oauth2
  name: OAuth 2.0 Bearer token
  evidence: 'Each HTTP request must include an Authorization: Bearer <token> header. Tokens are short‑lived JWTs obtained from the /oauth/token
    endpoint using your client_id and client_secret.'
  location: header
  header: Authorization
  token_url: https://public-api.mx.clara.com/oauth/token
  how_to_obtain: 'Use your client certificate, private key, client_id, and client_secret to POST to the token endpoint (e.g., curl --request POST
    "https://public-api.mx.clara.com/oauth/token" --header "Authorization: Basic $( echo -n ''CLIENT_ID:CLIENT_SECRET'' | base64 )" --cert client.crt
    --key client.key).'
docs: https://developers.clara.team/authentication