Dragonfly Therapeutics · Authentication Profile

Dragonfly Therapeutics Authentication

Authentication

Dragonfly Therapeutics secures its APIs with none and bearer-visitor-token across 2 declared security schemes, as derived from its OpenAPI definitions.

CompanyBiotechnologyPharmaceuticalsImmunotherapyOncologyLife SciencesClinical StageDrug DiscoveryHealthcare

Methods: none, bearer-visitor-token Schemes: 2 OAuth flows: API key in:

Security Schemes

anonymous none

visitorToken http

scheme: bearer

Source

Authentication Profile

generated: '2026-08-12'
method: probed
source: https://www.dragonflytx.com/_api/mcp
docs: https://dev.wix.com/docs/develop-websites/articles/get-started/about-the-wix-site-mcp
note: >-
  Derived from live observation of the only callable surface this company serves — the
  Wix-provisioned Site MCP endpoint. There is no OpenAPI, no securitySchemes block and no
  first-party auth documentation to read, so derive-authentication.py produced nothing; this
  profile records what the endpoint actually did when probed anonymously on 2026-08-12.
summary:
  types: [none, bearer-visitor-token]
  api_key_in: []
  oauth2_flows: []
  oauth_discovery: absent
schemes:
- name: anonymous
  type: none
  applies_to:
  - tools/list
  - GetBusinessDetails
  - SearchInSite
  - SearchSiteApiDocs
  - GenerateVisitorToken
  evidence: >-
    POST tools/list and POST tools/call GetBusinessDetails both returned HTTP 200 with no
    credential of any kind supplied.
- name: visitorToken
  type: http
  scheme: bearer
  applies_to:
  - CallWixSiteAPI
  - ExecuteWixAPI
  issuance: >-
    Obtained anonymously from the GenerateVisitorToken tool on the same endpoint; no account,
    registration or API key is required.
  evidence: >-
    Both tools declare a required visitorToken property in the inputSchema returned by
    tools/list, and the llms.txt states GenerateVisitorToken must be called first.
discovery:
- path: /.well-known/oauth-authorization-server
  status: 400
  present: false
- path: /.well-known/oauth-protected-resource
  status: 400
  present: false
- path: /.well-known/openid-configuration
  status: 400
  present: false
scopes: []
x-evidence:
  fetched: '2026-08-12'
  url: https://www.dragonflytx.com/_api/mcp
  http_status: 200

Work with this as data

Every security artifact here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for security posture

4 MCP tools reach this

find_securityBrowse and filter every security artifact in the catalog.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This security artifact

curl "https://apis.io/api/v1/security/dragonfly-therapeutics-authentication"

All security posture

curl "https://apis.io/api/v1/security?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.