Dejavoo · Authentication Profile

Dejavoo Authentication

Authentication

Dejavoo declares 3 security scheme(s) across its OpenAPI definitions.

CompanyPaymentsPayment TerminalsPoint-of-SalePayment GatewaySemi-IntegrationFintechMerchant Services

Methods: Schemes: 3 OAuth flows: API key in:

Security Schemes

token apiKey

· in: header ()

SPIn Register ID + Auth Key apiKey

Tap to Pay Basic Authentication http

scheme: basic

Source

Authentication Profile

generated: '2026-11-05'
method: searched
source:
- https://app.theneo.io/dejavoo/authentication-token/authentication
- https://app.theneo.io/dejavoo/ipospays-api/introduction
- https://app.theneo.io/dejavoo/recurring-payments/recurring-payments/api-docs
- https://app.theneo.io/dejavoo/transaction-status-check/api-docs
- https://app.theneo.io/dejavoo/spin-specification/spin-specification-api
- https://app.theneo.io/dejavoo/developer-central/tap-to-pay-on-android
docs: https://app.theneo.io/dejavoo/authentication-token/authentication
summary: The generated contract declares no securitySchemes; this profile is read from the docs. iPOSpays APIs send a JWT access token in a `token` request header. The token is either generated in the iPOSpays merchant portal (Settings > Generate Ecom/TOP Merchant Keys, per TPN; required for iPOS Transact v1/v2) or via the Authentication Token API from an apiKey + secretKey with a scope (v3, Recurring, Management). SPIn authenticates with a Register ID and Auth Key copied from the portal per TPN. Tap to Pay API uses Basic Authentication per its overview page.
schemes:
- name: token
  type: apiKey
  in: header
  header: token
  description: '"The generated transaction token is valid for up to 24 hours. You may set a shorter expiry time in the request, but the validity period cannot exceed 24 hours." A 15-minute grace period follows expiry.'
  issuance:
  - 'Authentication Token API: "generate a new JWT-based access token using your API Key and Secret Key"'
  - 'Merchant portal: Settings > Generate Ecom/TOP Merchant Keys > select TPN > Generate Token'
  credentials: apiKey and secretKey issued by iPOSpays via a Dejavoo representative (devsupport@dejavoo.io / support@dejavoo.io)
  scopes_documented: [Recurring]
- name: SPIn Register ID + Auth Key
  type: apiKey
  description: 'Per-TPN Register ID and Auth Key copied from iPOSpays (S.T.E.A.M -> Edit Parameters -> Integrations -> SPIn, Cloud mode), sent with SPIn requests.'
- name: Tap to Pay Basic Authentication
  type: http
  scheme: basic
  description: '"The Tap to Pay API provides easy programmatic access for contactless transactions, using standard REST, JSON, and Basic Authentication protocols."'

Work with this as data

Every security artifact here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for security posture

4 MCP tools reach this

find_securityBrowse and filter every security artifact in the catalog.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This security artifact

curl "https://apis.io/api/v1/security/dejavoo-authentication"

All security posture

curl "https://apis.io/api/v1/security?limit=25"

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.