DeFi Fintech Directory · Authentication Profile

Defifintechdirectory Com Authentication

Authentication

DeFi Fintech Directory declares 2 security scheme(s) across its OpenAPI definitions.

CompanyDeFiFintechx402MicropaymentsUSDCBaseAI AgentsDirectoryMCP
Methods: Schemes: 2 OAuth flows: API key in:

Security Schemes

x402-payment payment
scheme: exact · in: header ()
human-workspace-session cookie

Source

Authentication Profile

Raw ↑ 
generated: '2026-11-05'
method: searched
source:
- https://defifintechdirectory.com/how-to-pay.html
- https://api.defifintechdirectory.com/llms.txt
- https://api.defifintechdirectory.com/developers
docs: https://defifintechdirectory.com/how-to-pay.html
summary: >-
  No API keys or buyer accounts. Paid tool calls are authorized per request with the x402 payment protocol
  (v2): an unpaid request returns HTTP 402 with a PAYMENT-REQUIRED header, and the client retries with a
  signed USDC authorization (EIP-3009) in the PAYMENT-SIGNATURE header. The OpenAPI contracts declare no
  securitySchemes. The browser workspace's /api/human interface uses a session cookie plus CSRF token
  (not an integration surface; not exercised).
schemes:
- name: x402-payment
  type: payment
  in: header
  header: PAYMENT-SIGNATURE
  challenge_header: PAYMENT-REQUIRED
  challenge_status: 402
  network: eip155:8453
  asset: USDC
  scheme: exact
  evidence: "No account, no Stripe, no API key for buyers."
  mcp_equivalent: _meta["x402/payment"]
- name: human-workspace-session
  type: cookie
  scope: local-only /api/human browser interface
  evidence: "It requires a session cookie, same-origin requests and a CSRF token for mutations."
  note: Production authentication is stated as not connected ("Production authentication, distributed credit storage, private artifact storage and Stripe test checkout are not connected.").

Work with this as data

Every security artifact here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for security posture

4 MCP tools reach this
  • find_securityBrowse and filter every security artifact in the catalog.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This security artifact 
curl "https://apis.io/api/v1/security/defifintechdirectory-com-authentication"
All security posture 
curl "https://apis.io/api/v1/security?limit=25"

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.