Exabeam · Authentication Profile

Exabeam Authentication

Authentication

Exabeam secures its APIs with oauth2 across 1 declared security scheme, as derived from its OpenAPI definitions. OAuth 2.0 is offered via the clientCredentials and authorizationCode flow(s).

CompanyCybersecuritySecuritySIEMUEBAThreat DetectionSecurity OperationsSOCLog ManagementIncident Response
Methods: oauth2 Schemes: 1 OAuth flows: clientCredentials, authorizationCode API key in:

Security Schemes

OAuth2 oauth2
· flows: clientCredentials, authorizationCode

Source

Authentication Profile

exabeam-authentication.yml Raw ↑
generated: '2026-07-19'
method: searched
source: https://developers.exabeam.com/exabeam/docs/api-keys
docs: https://developers.exabeam.com/exabeam/docs/api-keys
well_known: well-known/exabeam-oauth-authorization-server.json
summary:
  types: [oauth2]
  oauth2_flows: [clientCredentials, authorizationCode]
  token_endpoint: https://api.us-west.exabeam.cloud/oauth/token
  pkce: true
schemes:
- name: OAuth2
  type: oauth2
  description: >-
    Exabeam secures its REST APIs with OAuth2 bearer tokens. Developers generate
    an API Key and Secret in the console (Settings > API Keys); the Secret is
    shown in plaintext only once at creation. The key/secret pair is exchanged
    for a short-lived bearer access token at the regional token endpoint, which
    is then sent on API requests. The published RFC 8414 authorization-server
    metadata additionally advertises an authorization_code flow with PKCE (S256).
  flows:
  - flow: clientCredentials
    tokenUrl: https://api.us-west.exabeam.cloud/oauth/token
    note: API key + secret exchanged for a bearer access token.
  - flow: authorizationCode
    authorizationUrl: https://api.us-west.exabeam.cloud/oauth/authorize
    tokenUrl: https://api.us-west.exabeam.cloud/oauth/token
    pkce: S256
    scopes:
      openid: OpenID Connect authentication
      profile: Access to the authenticated principal's profile
      offline_access: Issue a refresh token for offline access
regional_endpoints:
  token_endpoint_pattern: https://api.<region>.exabeam.cloud/oauth/token
  regions: [us-west, us-east, eu, au, sg, jp, ca, ch]
rate_limits:
  authentication_api: 50 requests per 5 minutes per client source IP address

Work with this as data

Every security artifact here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for security posture

4 MCP tools reach this
  • find_securityBrowse and filter every security artifact in the catalog.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This security artifact
curl "https://apis.io/api/v1/security/exabeam-authentication"
All security posture
curl "https://apis.io/api/v1/security?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no email required.

A second provider on the same verified email joins the account you already have.