FLINT Network · Authentication Profile

FLINT Network Authentication

Authentication

FLINT Network secures its APIs with apiKey and http across 6 declared security schemes, as derived from its OpenAPI definitions.

Artificial IntelligenceFraud PreventionComplianceAgentic CommerceReal-Time

Methods: apiKey, http Schemes: 6 OAuth flows: API key in: cookie, header

Security Schemes

WorkOSOwnerSession apiKey

· in: cookie (flint_session)

PartnerServiceBearer http

scheme: bearer

X402Payment apiKey

· in: header (PAYMENT-SIGNATURE)

FlintCapability apiKey

· in: header (FLINT-CAPABILITY)

DPoP apiKey

· in: header (DPoP)

X401Proof apiKey

· in: header (PROOF-RESPONSE)

Source

Authentication Profile

generated: '2026-11-08'
method: derived
source: openapi/flint-network-openapi.json
summary:
  types:
  - apiKey
  - http
  api_key_in:
  - cookie
  - header
schemes:
- name: WorkOSOwnerSession
  type: apiKey
  in: cookie
  parameter: flint_session
  description: Sealed WorkOS session required for claimed-Passport owner actions. Unclaimed
    mandate updates require the claim token as a management capability.
  sources:
  - openapi/flint-network-openapi.json
- name: PartnerServiceBearer
  type: http
  scheme: bearer
  description: Server-only partner credential. The authenticated partner must match the partner
    in the stored signed verification record.
  sources:
  - openapi/flint-network-openapi.json
- name: X402Payment
  type: apiKey
  in: header
  parameter: PAYMENT-SIGNATURE
  description: Canonical x402 v2 payment proof on a paid retry. Initial unpaid challenge requests
    require no payment proof.
  sources:
  - openapi/flint-network-openapi.json
- name: FlintCapability
  type: apiKey
  in: header
  parameter: FLINT-CAPABILITY
  description: Short-lived Passport-owner-issued capability bound to the exact x402 Verify request.
  sources:
  - openapi/flint-network-openapi.json
- name: DPoP
  type: apiKey
  in: header
  parameter: DPoP
  description: Fresh caller proof bound to the capability, request, and x402 payment proof.
  sources:
  - openapi/flint-network-openapi.json
- name: X401Proof
  type: apiKey
  in: header
  parameter: PROOF-RESPONSE
  description: Base64url-encoded x401 principal-identity presentation. Omit to request a proof
    challenge.
  sources:
  - openapi/flint-network-openapi.json

Work with this as data

Every security artifact here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for security posture

4 MCP tools reach this

find_securityBrowse and filter every security artifact in the catalog.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This security artifact

curl "https://apis.io/api/v1/security/flint-network-authentication"

All security posture

curl "https://apis.io/api/v1/security?limit=25"

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.