Custodo · Authentication Profile

Custodo Authentication

Authentication

Custodo declares 2 security scheme(s) across its OpenAPI definitions.

CompanyDocument ManagementBusiness ManagementSmall BusinessDigital PreservationE-SignatureCRMExpense ManagementTime and AttendanceAI AssistantMCPItaly
Methods: Schemes: 2 OAuth flows: API key in:

Security Schemes

Custodo OAuth 2.1 (MCP) oauth2
API key apiKey

Source

Authentication Profile

custodo-ai-authentication.yml Raw ↑ 
generated: '2026-11-04'
method: searched
source: https://custodo.ai/llms.txt
docs: https://custodo.ai/en/ai-assistants/
note: No OpenAPI is published; schemes read from Custodo's own AI-assistant guide and Integrations module page (https://custodo.ai/en/modules/). The API reference itself is not public.
schemes:
- name: Custodo OAuth 2.1 (MCP)
  type: oauth2
  applies_to: https://api.custodo.ai/mcp
  description: >-
    "The first time it connects, it opens Custodo's own authorisation page (OAuth 2.1): you sign in with your usual
    Custodo account and choose two things" -- which organisations, and «Everything you can do» or «Read only».
    Access is revoked from «Integrations» → «OAuth clients».
  access_levels:
  - Everything you can do
  - Read only
  observed: Anonymous MCP initialize returns 401 "Missing bearer token" (recorded in apis.yml).
- name: API key
  type: apiKey
  description: >-
    "One key, one address, and every function of Custodo is available to your line-of-business system or your script." A key never exceeds the person who created it and can be narrowed to certain modules, a ceiling per minute and per day, allowed source addresses, and destructive actions off until turned on.
  source: https://custodo.ai/en/modules/

Work with this as data

Every security artifact here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for security posture

4 MCP tools reach this
  • find_securityBrowse and filter every security artifact in the catalog.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This security artifact 
curl "https://apis.io/api/v1/security/custodo-ai-authentication"
All security posture 
curl "https://apis.io/api/v1/security?limit=25"

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.