Clari · Authentication Profile

Clari Authentication

Authentication

Clari runs three distinct authentication schemes across three surfaces. The Revenue API uses a single `apikey` header (plus a `partnerkey` header on partner/ingest endpoints). The Copilot REST API requires BOTH `X-Api-Key` and `X-Api-Password` — either alone returns 401. The MCP server uses OAuth 2.0 via Okta and is the only Clari surface with delegated authorization; see scopes/clari-scopes.yml.

Clari secures its APIs with apiKey across 3 declared security schemes, as derived from its OpenAPI definitions.

Revenue OperationsForecastingPipeline ManagementSales IntelligenceActivity IntelligenceDeal InsightsCRMConversation IntelligenceB2BEnterpriseMCPAgentsSales EngagementBulk ExportData Ingestion
Methods: apiKey Schemes: 3 OAuth flows: API key in: header

Security Schemes

api_key apiKey
· in: header (apikey)
api_key apiKey
· in: header (X-Api-Key)
api_password apiKey
· in: header (X-Api-Password)

Source

Authentication Profile

Raw ↑ 
generated: '2026-08-13'
method: searched
docs:
- https://developer.clari.com/documentation/external_spec
- https://api-doc.copilot.clari.com/
- https://community.clari.com/product-q-a-6/how-to-use-copilot-apis-2258
description: >-
  Clari runs three distinct authentication schemes across three surfaces. The Revenue
  API uses a single `apikey` header (plus a `partnerkey` header on partner/ingest
  endpoints). The Copilot REST API requires BOTH `X-Api-Key` and `X-Api-Password` —
  either alone returns 401. The MCP server uses OAuth 2.0 via Okta and is the only
  Clari surface with delegated authorization; see scopes/clari-scopes.yml.
issuance:
  revenue_api:
    location: Account Settings > API Token > "Generate New API Token"
    caveats:
    - The token value is displayed once and cannot be retrieved again.
    - Revoking a token breaks every integration using it.
    - Deactivating a user revokes every token that user created.
    - A CSM must grant access to the token generation tool if it is not visible.
  copilot_api:
    location: Workspace Settings > Integrations > Clari Copilot API
    note: Yields both the key and the password.
  mcp:
    type: oauth2
    authorization_endpoint: https://app.clari.com/authorize
    issuer: https://clariciam.okta.com/oauth2/aus13shznanP7WOkp698
    dynamic_client_registration: https://mcp.clari.com/okta/clients
    see: scopes/clari-scopes.yml
source: openapi/clari-activity-api-api-openapi.yml, openapi/clari-administrative-api-api-openapi.yml,
  openapi/clari-audit-api-api-openapi.yml, openapi/clari-bulk-export-framework-api-openapi.yml,
  openapi/clari-bulk-ingest-job-status-api-api-openapi.yml, openapi/clari-copilot-api-openapi.yml,
  openapi/clari-export-api-openapi.yml, openapi/clari-forecast-api-api-openapi.yml, openapi/clari-ingestion-api-api-openapi.yml,
  openapi/clari-opportunity-api-api-openapi.yml
summary:
  types:
  - apiKey
  api_key_in:
  - header
schemes:
- name: api_key
  type: apiKey
  in: header
  parameter: apikey
  sources:
  - openapi/clari-activity-api-api-openapi.yml
  - openapi/clari-administrative-api-api-openapi.yml
  - openapi/clari-audit-api-api-openapi.yml
  - openapi/clari-bulk-export-framework-api-openapi.yml
  - openapi/clari-bulk-ingest-job-status-api-api-openapi.yml
  - openapi/clari-export-api-openapi.yml
  - openapi/clari-forecast-api-api-openapi.yml
  - openapi/clari-ingestion-api-api-openapi.yml
  - openapi/clari-opportunity-api-api-openapi.yml
- name: api_key
  type: apiKey
  in: header
  parameter: X-Api-Key
  sources:
  - openapi/clari-copilot-api-openapi.yml
- name: api_password
  type: apiKey
  in: header
  parameter: X-Api-Password
  sources:
  - openapi/clari-copilot-api-openapi.yml

Work with this as data

Every security artifact here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for security posture

4 MCP tools reach this
  • find_securityBrowse and filter every security artifact in the catalog.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This security artifact 
curl "https://apis.io/api/v1/security/clari-authentication"
All security posture 
curl "https://apis.io/api/v1/security?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.