Fatora · Authentication Profile

Fatora Authentication

Authentication

Fatora secures its APIs with apiKey and http across 2 declared security schemes, as derived from its OpenAPI definitions.

PaymentsInvoicingPayment GatewayE-CommerceBillingFintechCheckoutMENAQatarSoftware-as-a-Service
Methods: apiKey, http Schemes: 2 OAuth flows: API key in: header

Security Schemes

api_key apiKey
· in: header ()
bearerAuth http
scheme: bearer

Source

Authentication Profile

fatora-authentication.yml Raw ↑
generated: '2026-07-19'
method: searched
source: https://fatora.io/api/authentication.php
docs: https://fatora.io/api/authentication.php
summary:
  types:
  - apiKey
  - http
  api_key_in:
  - header
  http_schemes:
  - bearer
  note: >-
    Two coexisting mechanisms. Payment endpoints (checkout, refund, recurring, verify) take a
    static merchant API key in an api_key header. Invoice/client/product endpoints require a
    short-lived Bearer JWT that is first minted by calling the Authorization endpoint with the
    api_key.
schemes:
- name: api_key
  type: apiKey
  in: header
  parameter_name: api_key
  description: >-
    Static merchant API key sent in the api_key request header. Used for payment-related
    endpoints (checkout, refund, recurring, verify). Found in the merchant dashboard under
    Integration in the sidebar.
  applies_to:
  - POST /v1/payments/checkout
  - refund
  - recurring
  - verify
  sources:
  - https://fatora.io/api/authentication.php
- name: bearerAuth
  type: http
  scheme: bearer
  bearer_format: JWT
  description: >-
    Bearer JWT required for invoice, client and product endpoints. Obtained by POSTing to the
    Authorization endpoint with the api_key header; the response returns a bearer_token JWT that
    is then sent as Authorization Bearer on subsequent calls.
  token_endpoint: https://api.fatora.io/v1/Authorization/Authorize
  applies_to:
  - invoices
  - clients
  - products
  sources:
  - https://fatora.io/api/authentication.php

Work with this as data

Every security artifact here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for security posture

4 MCP tools reach this
  • find_securityBrowse and filter every security artifact in the catalog.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools

Call it yourself

curl for this page
This security artifact
curl "https://apis.io/api/v1/security/fatora-authentication"
All security posture
curl "https://apis.io/api/v1/security?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no email required.

A second provider on the same verified email joins the account you already have.