Cuenca · Authentication Profile

Cuenca Authentication

Authentication

Cuenca secures its APIs with http-basic, jwt, and session-token across 4 declared security schemes, as derived from its OpenAPI definitions.

CompanyFintechPaymentsBankingNeobankSPEICard IssuingMoney TransferMexicoKYC

Methods: http-basic, jwt, session-token Schemes: 4 OAuth flows: API key in: http-basic

Security Schemes

apiKeySecretBasic http

scheme: basic

jwt http

scheme: bearer

loginToken apiKey

· in: header ()

sessionId apiKey

· in: header ()

Source

Authentication Profile

generated: '2026-07-18'
method: searched
source: https://github.com/cuenca-mx/cuenca-python (http/client.py, jwt.py, README)
docs: https://github.com/cuenca-mx/cuenca-python#authentication
summary:
  types: [http-basic, jwt, session-token]
  api_key_in: [http-basic]
  notes: >-
    Cuenca has no OpenAPI/OAuth2 scope surface. Primary auth is an API key +
    secret sent as HTTP Basic. Optional short-lived JWTs and login/session
    tokens layer on top for delegated/user-scoped access.
schemes:
- name: apiKeySecretBasic
  type: http
  scheme: basic
  description: >-
    Primary credential: an API key (id prefixed `PK...`) and API secret sent as
    HTTP Basic auth on every request. Configured via CUENCA_API_KEY /
    CUENCA_API_SECRET env vars or cuenca.configure(api_key=..., api_secret=...).
  credential_prefix: PK
- name: jwt
  type: http
  scheme: bearer
  bearerFormat: JWT
  description: >-
    Optional JWT auth (cuenca.configure(use_jwt=True)). A JWT is created from the
    API key/secret and auto-renewed when under 5 minutes to expiry. Requires
    sufficient permissions on the credential.
- name: loginToken
  type: apiKey
  in: header
  parameterName: X-Cuenca-LoginToken
  description: >-
    A LoginToken (7-day validity, created via biometric/user login) supplied in
    the X-Cuenca-LoginToken header for user-scoped sessions.
- name: sessionId
  type: apiKey
  in: header
  parameterName: X-Cuenca-SessionId
  description: Session identifier supplied in the X-Cuenca-SessionId header.
headers:
  api_version: X-Cuenca-Api-Version

Work with this as data

Every security artifact here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for security posture

4 MCP tools reach this

find_securityBrowse and filter every security artifact in the catalog.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This security artifact

curl "https://apis.io/api/v1/security/cuenca-authentication"

All security posture

curl "https://apis.io/api/v1/security?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no email required.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.