CueScout · Authentication Profile

CueScout Authentication

Authentication

CueScout declares 3 security scheme(s) across its OpenAPI definitions.

CompanyAI VisibilityGenerative Engine OptimizationBrand MonitoringSEOCompetitor AnalysisMCP
Methods: Schemes: 3 OAuth flows: API key in:

Security Schemes

none (public MCP checks) none
OAuth account connection oauth2
webhook signature (outbound) hmac

Source

Authentication Profile

cuescout-com-authentication.yml Raw ↑ 
generated: '2026-11-04'
method: searched
source: https://cuescout.com/mcp
docs: https://cuescout.com/mcp
name: CueScout authentication
schemes:
- name: none (public MCP checks)
  type: none
  applies_to: [check_ai_visibility, check_ai_readiness, check_ai_crawler_access, validate_structured_data, check_sitemap]
  evidence: 'There is no API key and nothing to install.'
- name: OAuth account connection
  type: oauth2
  authorization_server: https://api.cuescout.com
  scopes: [account:read]
  applies_to: [get_ai_visibility, list_prompts, get_prompt_answers, list_citation_sources, list_todos, get_todo, get_site_audit, list_brands, get_profile]
  evidence: 'You sign in on cuescout.com, approve it once, and from then on the chat can read what CueScout has already collected for you.'
  note: Docs state "Signing in to your CueScout account works in ChatGPT for now." Authorization server and scope are as recorded in apis.yml from the live MCP probe; endpoints were not called.
- name: webhook signature (outbound)
  type: hmac
  header: X-CueScout-Signature
  evidence: 'Every request carries an X-CueScout-Signature header: an HMAC-SHA256 of the exact body, under a secret shown on the settings screen.'
  source: https://cuescout.com/integrations/zapier

Work with this as data

Every security artifact here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for security posture

4 MCP tools reach this
  • find_securityBrowse and filter every security artifact in the catalog.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This security artifact 
curl "https://apis.io/api/v1/security/cuescout-com-authentication"
All security posture 
curl "https://apis.io/api/v1/security?limit=25"

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.