Fintel Discovery · Authentication Profile

Fintel Discovery Authentication

Authentication

Fintel Discovery declares 3 security scheme(s) across its OpenAPI definitions.

Financial ServicesRegulatory DataBroker CheckSEC EDGARMarket DataMCP ServerAI AgentsCompliance
Methods: Schemes: 3 OAuth flows: API key in:

Security Schemes

none
user-supplied-upstream-key
user-supplied-upstream-key

Source

Authentication Profile

Raw ↑
generated: '2026-11-07'
method: searched
source: https://fin-discovery.com/
docs: https://fin-discovery.com/docs/api.html
name: Fintel Discovery authentication
summary: >-
  The Fintel Discovery MCP server is public. The homepage's Technical
  Specifications block states "Authentication: None required" for the MCP
  endpoint at https://ai.fin-discovery.com/mcp, and the docs' Tool Reference
  says "0 API keys required*" with a footnote that the FRED-backed tools
  (SearchFredSeries, GetFredSeriesData) accept an optional caller-provided FRED
  API key and the Census tool (GetTerritoryWealthProfile) accepts an optional
  caller-provided Census API key; without them those specific tools fall back
  to rate-limited public access.
schemes:
  - type: none
    scope: MCP server and all non-FRED/non-Census tools
    evidence: '"Authentication: None required" on https://fin-discovery.com/'
  - type: user-supplied-upstream-key
    scope: SearchFredSeries, GetFredSeriesData (optional FRED API key)
    evidence: '"FRED tools require a free FRED API key" on https://fin-discovery.com/docs/api.html'
  - type: user-supplied-upstream-key
    scope: GetTerritoryWealthProfile (optional Census API key)
    evidence: '"Free Census API key (api.census.gov/data/key_signup.html). Falls back to rate-limited access if omitted." on https://fin-discovery.com/docs/api.html'
notes: >-
  The published OpenAPI at https://ai.fin-discovery.com/openapi.json describes
  a FastAPI wrapper that exposes /login and /getAToken paths. These were NOT
  probed (safety rule: never GET /login or /token). The public-facing surface
  advertised on the website is unauthenticated MCP; any login flow in the
  OpenAPI is undocumented on the website and is not represented to end users.

Work with this as data

Every security artifact here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for security posture

4 MCP tools reach this
  • find_securityBrowse and filter every security artifact in the catalog.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This security artifact
curl "https://apis.io/api/v1/security/fin-discovery-com-authentication"
All security posture
curl "https://apis.io/api/v1/security?limit=25"

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

A second provider on the same verified email joins the account you already have.