Episode Six · Authentication Profile

Episode Six Authentication

Authentication

Episode Six secures its APIs with oauth2 across 1 declared security scheme, as derived from its OpenAPI definitions. OAuth 2.0 is offered via the authorizationCode and clientCredentials flow(s).

CompanyPaymentsCard IssuingIssuer ProcessingLedgerBankingFinancial ServicesEmbedded FinanceFinTechVirtual AccountsVirtual CardsCreditPrepaidMulti-Currency
Methods: oauth2 Schemes: 1 OAuth flows: authorizationCode, clientCredentials API key in:

Security Schemes

MCPOAuth2 oauth2
· flows: authorizationCode, clientCredentials

Source

Authentication Profile

episode-six-authentication.yml Raw ↑ 
generated: '2026-08-12'
method: probed
source: https://docs.episodesix.com/.well-known/oauth-authorization-server
docs: null
docs_note: >-
  Episode Six publishes no public authentication reference. The TRITIUM platform API's auth
  model (key vs. OAuth vs. mTLS) is documented only inside docs.episodesix.com, which is
  behind an access-code gate. Nothing is asserted about it here.
summary:
  types:
  - oauth2
  api_key_in: []
  oauth2_flows:
  - authorizationCode
  - clientCredentials
  covers:
  - episode-six-docs-mcp
  does_not_cover:
  - episode-six-tritium-platform-api
schemes:
- name: MCPOAuth2
  type: oauth2
  applies_to: https://docs.episodesix.com/mcp
  sources:
  - well-known/episode-six-oauth-authorization-server.json
  issuer: https://docs.episodesix.com/mcp/oauth
  flows:
  - flow: authorizationCode
    authorizationUrl: https://docs.episodesix.com/mcp/oauth/authorize
    tokenUrl: https://docs.episodesix.com/mcp/oauth/token
    scopes:
    - mcp:search
  - flow: clientCredentials
    tokenUrl: https://docs.episodesix.com/mcp/oauth/token
    scopes:
    - mcp:search
  refresh_supported: true
  pkce:
    supported: true
    code_challenge_methods:
    - S256
  dynamic_client_registration:
    supported: true
    standard: RFC 7591
    registration_endpoint: https://docs.episodesix.com/mcp/oauth/register
  token_endpoint_auth_methods:
  - none
  - client_secret_post
  - client_secret_basic
  response_types:
  - code
gaps:
- id: tritium-auth-undocumented
  detail: >-
    The production TRITIUM platform API authentication model is not publicly documented. An
    integrator cannot determine the credential type, header, or token lifetime before
    completing the access-request form.
x-evidence:
  fetched: '2026-08-12'
  url: https://docs.episodesix.com/.well-known/oauth-authorization-server
  http_status: 200
  content_type: application/json