Enapi · Authentication Profile

Enapi Authentication

Authentication

Enapi secures its APIs with ocpi-token across 1 declared security scheme, as derived from its OpenAPI definitions.

CompanyEV ChargingOCPIRoamingE-MobilityCharge Point OperatoreMSPElectric VehicleCDR ClearingInteroperabilityHub
Methods: ocpi-token Schemes: 1 OAuth flows: API key in:

Security Schemes

OCPI Token token
· in: header ()

Source

Authentication Profile

enapi-authentication.yml Raw ↑
generated: '2026-07-19'
method: searched
source: https://docs.enapi.com/getting-started/set-up-your-ocpi-handshake-with-enapi
docs: https://docs.enapi.com/getting-started/set-up-your-ocpi-handshake-with-enapi
summary:
  types: [ocpi-token]
  model: OCPI credentials handshake (token exchange)
  transport: Authorization header
  note: >-
    Enapi does not expose a proprietary auth scheme. Access follows the OCPI
    Credentials module: a one-time handshake exchanges credentials between partner
    and Enapi, producing a credential (token) pair. There is no OAuth2/OpenID
    Connect and no OAuth scope surface.
schemes:
- name: OCPI Token
  type: token
  in: header
  header: Authorization
  encoding:
    base64_header_2_2_1_plus: >-
      OCPI 2.2.1+ introduced Base64 encoding of the token in the Authorization
      header. The token value in the credentials body is unchanged; only the
      header representation differs. Configured per connection to match the
      partner platform.
  handshake:
    module: Credentials
    setup: Portal > Settings > Roaming Settings > New Handshake (4-step wizard)
    methods:
    - enapi-initiates: partner provides Versions URL + Token A; Enapi initiates
    - partner-initiates: Enapi provides its Versions URL + Token A; partner initiates
    enapi_party_id: DE*ENA
    versions_url_production: https://roaming.enapi.com/ocpi/versions
    versions_url_staging: https://roaming.staging.enapi.com/ocpi/versions
  sources:
  - docs://getting-started/set-up-your-ocpi-handshake-with-enapi
  - docs://technical-documentation/supported-ocpi-modules-and-capabilities

Work with this as data

Every security artifact here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for security posture

4 MCP tools reach this
  • find_securityBrowse and filter every security artifact in the catalog.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This security artifact
curl "https://apis.io/api/v1/security/enapi-authentication"
All security posture
curl "https://apis.io/api/v1/security?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

A second provider on the same verified email joins the account you already have.