CUQU · Authentication Profile

CUQU Authentication

Authentication

CUQU secures its APIs with none and http across 2 declared security schemes, as derived from its OpenAPI definitions.

CompanySocialEventActivitiesCommunityConsumerMCPAI AgentsChinaWeChat Mini Program
Methods: none, http Schemes: 2 OAuth flows: API key in:

Security Schemes

anonymous none
personalApiKey http
scheme: bearer

Source

Authentication Profile

Raw ↑ 
generated: '2026-11-04'
method: searched
source: https://cuqu.net/ai-agent/
docs: https://cuqu.net/ai-agent/
sources:
- https://cuqu.net/llms.txt
- https://github.com/cuqu-net/cuqu-skill/blob/main/docs/open-platform-spec.md
summary:
  types:
  - none
  - http
schemes:
- name: anonymous
  type: none
  applies_to: REST GET /api/activity (listActivities) on https://cuqu.net; MCP initialize / tools/list and read-only tools (query_activities, get_activity_card, query_venues, generate_urllink)
  description: The OpenAPI document at cuqu.net/openapi.json declares no securitySchemes; the ai-agent page states initialize/tools/list can be read without a key ("无需密钥即可读取 initialize / tools/list").
- name: personalApiKey
  type: http
  scheme: bearer
  key_format: cq-sk- prefix + 32 random hex characters
  applies_to: MCP tools/call on https://agent.cuqu.net/mcp, required for write tools create_activity, register_event, create_payment, check_in
  description: 'Personal API key issued on the open platform agent.cuqu.net via WeChat scan login, sent as Authorization: Bearer cq-sk-... The gateway hashes the key (SHA-256) to resolve the user uid and injects it into tool arguments. One active key per user; refreshing revokes the old key. The ai-agent page says write operations need an authorized key with scope restrictions ("需要你授权的 API Key 且有作用域限制"); no scope names are published.'
  issuance: https://agent.cuqu.net/
  revocation: key refresh invalidates the previous key (open-platform-spec.md)
note: Neither the REST contract nor the MCP gateway uses OAuth; scopes are mentioned but never enumerated, so no scopes/ artifact was written.

Work with this as data

Every security artifact here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for security posture

4 MCP tools reach this
  • find_securityBrowse and filter every security artifact in the catalog.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This security artifact 
curl "https://apis.io/api/v1/security/cuqu-net-authentication"
All security posture 
curl "https://apis.io/api/v1/security?limit=25"

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.