CoroNet · Authentication Profile

Coronet Authentication

Authentication

CoroNet secures its APIs with oauth2 across 1 declared security scheme, as derived from its OpenAPI definitions. OAuth 2.0 is offered via the clientCredentials flow(s).

CompanyEnterpriseCybersecuritySecurityEndpoint SecurityEmail SecurityNetwork SecurityCloud SecurityManaged Service ProvidersComplianceWebhook

Methods: oauth2 Schemes: 1 OAuth flows: clientCredentials API key in:

Security Schemes

OAuth2ClientCredentials oauth2

Source

Authentication Profile

generated: '2026-07-18'
method: searched
source: https://docs.coro.net/developer-portal/authentication
docs: https://docs.coro.net/developer-portal/authentication
summary:
  types: [oauth2]
  oauth2_flows: [clientCredentials]
  token_type: bearer
  token_lifetime: 24h
  request_headers: [Authentication, Workspace]
schemes:
- name: OAuth2ClientCredentials
  type: oauth2
  description: >-
    To use the Coro API you must first authenticate and obtain a session
    (bearer) token. Generate a Client ID and Secret credential pair in the Coro
    console under Control Panel > Connectors > API Credentials (these are not
    the same as console username/password). POST the credentials to the client
    authentication endpoint (/oath/token) to receive a bearer token valid for
    24 hours.
  flow: clientCredentials
  token_endpoint: /oath/token
  token_lifetime: 24h
  credential_source: Coro console > Control Panel > Connectors > API Credentials
  usage:
    authorization_header: Authentication
    additional_headers:
    - name: Workspace
      description: The Workspace ID against which the request is executed.
  sources: [docs.coro.net/developer-portal/authentication]
notes:
- Every request sets an Authentication header carrying the bearer token and a
  Workspace header carrying the target Workspace ID.
- Token is valid for 24 hours; re-request from /oath/token to refresh.
- No OpenAPI securityScheme document was retrievable (api.secure.coro.net
  requires auth); this profile is captured from the published auth docs.

Work with this as data

Every security artifact here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for security posture

4 MCP tools reach this

find_securityBrowse and filter every security artifact in the catalog.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This security artifact

curl "https://apis.io/api/v1/security/coronet-authentication"

All security posture

curl "https://apis.io/api/v1/security?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no email required.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.