EcoFlow · Authentication Profile

Ecoflow Authentication

Authentication

EcoFlow secures its APIs with apiKey across 4 declared security schemes, as derived from its OpenAPI definitions.

CompanyTechnologyEnergyEnergy StoragePortable PowerIoTSmart HomeSolarDeveloper API
Methods: apiKey Schemes: 4 OAuth flows: API key in: header

Security Schemes

accessKey apiKey
· in: header (accessKey)
nonce apiKey
· in: header (nonce)
timestamp apiKey
· in: header (timestamp)
sign apiKey
· in: header (sign)

Source

Authentication Profile

Raw ↑ 
generated: '2026-07-19'
method: derived
source: openapi/ecoflow-iot-openapi.yml
summary:
  types:
  - apiKey
  api_key_in:
  - header
schemes:
- name: accessKey
  type: apiKey
  in: header
  parameter: accessKey
  description: Access key issued in the EcoFlow developer console.
  sources:
  - openapi/ecoflow-iot-openapi.yml
- name: nonce
  type: apiKey
  in: header
  parameter: nonce
  description: Random nonce (typically a 6-digit number) regenerated per request.
  sources:
  - openapi/ecoflow-iot-openapi.yml
- name: timestamp
  type: apiKey
  in: header
  parameter: timestamp
  description: Unix timestamp in milliseconds at request time.
  sources:
  - openapi/ecoflow-iot-openapi.yml
- name: sign
  type: apiKey
  in: header
  parameter: sign
  description: HMAC-SHA256 signature (hex) over the ASCII-sorted request parameters concatenated
    with `accessKey`, `nonce` and `timestamp`, keyed by the secretKey.
  sources:
  - openapi/ecoflow-iot-openapi.yml