CPZ Lab · Authentication Profile

CPZ Lab Authentication

Authentication

CPZ Lab secures its APIs with apiKey, http, and oauth2 across 3 declared security schemes, as derived from its OpenAPI definitions. OAuth 2.0 is offered via the authorizationCode and clientCredentials flow(s).

CompanyTradingAlgorithmic TradingQuantitative FinanceBacktestingRisk ManagementArtificial IntelligenceMCPPython SDK

Methods: apiKey, http, oauth2 Schemes: 3 OAuth flows: authorizationCode, clientCredentials API key in: header

Security Schemes

ApiKeyHeader apiKey

· in: header (X-CPZ-Key)

ApiKeyBearer http

scheme: bearer

OAuth2 oauth2

· flows: authorizationCode, clientCredentials

Source

Authentication Profile

generated: '2026-11-04'
method: searched
source:
- https://ai.cpz-lab.com/docs/api/introduction
- https://ai.cpz-lab.com/docs/sdk/authentication
- openapi/cpz-lab-com-openapi.yml
summary:
  types:
  - apiKey
  - http
  - oauth2
  api_key_in:
  - header
  oauth2_flows:
  - authorizationCode
  - clientCredentials
schemes:
- name: ApiKeyHeader
  type: apiKey
  in: header
  parameter: X-CPZ-Key
  description: Paired with X-CPZ-Secret. Recommended for SDK and server-to-server use.
  sources:
  - openapi/cpz-lab-com-openapi.yml
- name: ApiKeyBearer
  type: http
  scheme: bearer
  bearerFormat: cpz_key
  description: 'Single-header API key: Authorization: Bearer cpz_key_PREFIX.SECRET'
  sources:
  - openapi/cpz-lab-com-openapi.yml
- name: OAuth2
  type: oauth2
  flows:
  - flow: authorizationCode
    authorizationUrl: https://api.cpz-lab.com/oauth/authorize
    tokenUrl: https://api.cpz-lab.com/oauth/token
    scopes: 12
  - flow: clientCredentials
    tokenUrl: https://api.cpz-lab.com/oauth/token
    scopes: 8
  description: OAuth 2.0 + PKCE issued by the CPZAI authorization server.
  sources:
  - openapi/cpz-lab-com-openapi.yml
docs: https://ai.cpz-lab.com/docs/sdk/authentication
documented:
  headers:
  - X-CPZ-Key
  - X-CPZ-Secret
  credential_format:
    api_key: cpz_key_ + 24 hex characters
    secret: cpz_secret_ + 48 alphanumeric characters
  env_vars:
  - CPZ_AI_API_KEY
  - CPZ_AI_API_SECRET
  issuance: Settings > API Keys > Create API Key; the secret is only shown once.
  cli: Browser sign-in with token stored in the system keychain, or an API key pair.

Work with this as data

Every security artifact here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for security posture

4 MCP tools reach this

find_securityBrowse and filter every security artifact in the catalog.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This security artifact

curl "https://apis.io/api/v1/security/cpz-lab-com-authentication"

All security posture

curl "https://apis.io/api/v1/security?limit=25"

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.