Coinbase Global · Authentication Profile

Coinbase Global Authentication

Authentication

Coinbase Global secures its APIs with apiKey, http, and oauth2 across 4 declared security schemes, as derived from its OpenAPI definitions. OAuth 2.0 is offered via the authorizationCode flow(s).

CompanyCryptocurrencyBlockchainPaymentsWalletsTradingOnchainWeb3Financial-ServicesDeveloper PlatformAI AgentsStablecoins

Methods: apiKey, http, oauth2 Schemes: 4 OAuth flows: authorizationCode API key in: header

Security Schemes

CDP JWT Bearer http

scheme: bearer

Wallet Secret apiKey

· in: header ()

Coinbase App API Key (HMAC) apiKey

· in: header ()

OAuth2 oauth2

· flows:

Source

Authentication Profile

generated: '2026-07-18'
method: searched
source: https://docs.cdp.coinbase.com/get-started/authentication/overview
docs: https://docs.cdp.coinbase.com/get-started/authentication/overview
summary:
  types: [apiKey, http, oauth2]
  api_key_in: [header]
  oauth2_flows: [authorizationCode]
schemes:
  - name: CDP JWT Bearer
    type: http
    scheme: bearer
    bearerFormat: JWT
    description: >-
      Coinbase Developer Platform API v2 / Advanced Trade authenticate server
      requests with a short-lived JWT signed by the project's API key
      (Ed25519 or EC key pair). See JWT Authentication docs.
    docs: https://docs.cdp.coinbase.com/get-started/authentication/jwt-authentication
    products: [CDP API v2, Advanced Trade API]
  - name: Wallet Secret
    type: apiKey
    in: header
    description: >-
      Non-custodial wallet write operations additionally require a wallet
      secret configured in the CDP portal.
    docs: https://docs.cdp.coinbase.com/get-started/authentication/security-best-practices
    products: [CDP Wallets]
  - name: Coinbase App API Key (HMAC)
    type: apiKey
    in: header
    description: >-
      The legacy Coinbase App / Sign in with Coinbase (API v2) supports API key
      + secret with an HMAC request signature (CB-ACCESS-KEY / CB-ACCESS-SIGN).
    products: [Coinbase App API v2]
  - name: OAuth2
    type: oauth2
    description: >-
      Sign in with Coinbase (Coinbase App API) supports OAuth2 authorization
      code flow for delegated end-user access.
    flows:
      authorizationCode:
        authorizationUrl: https://login.coinbase.com/oauth2/auth
        tokenUrl: https://login.coinbase.com/oauth2/token
    products: [Coinbase App API v2, Sign in with Coinbase]

Work with this as data

Every security artifact here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for security posture

4 MCP tools reach this

find_securityBrowse and filter every security artifact in the catalog.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This security artifact

curl "https://apis.io/api/v1/security/coinbase-global-authentication"

All security posture

curl "https://apis.io/api/v1/security?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.