forecast · Authentication Profile

Forecast Authentication

Authentication

forecast declares 1 security scheme(s) across its OpenAPI definitions.

CompanyProject ManagementResource ManagementProfessional Services AutomationTime TrackingPSA
Methods: Schemes: 1 OAuth flows: API key in:

Security Schemes

X-FORECAST-API-KEY apiKey
· in: header ()

Source

Authentication Profile

forecast-authentication.yml Raw ↑
generated: '2026-07-19'
method: searched
source: https://github.com/Forecast-it/API/blob/master/README.md
docs: https://support.forecast.app/hc/en-us/articles/33378026998289-Using-API-Keys
api: Forecast API
base_url: https://api.forecast.it/api/v1/
summary: >-
  Forecast uses a single static API-key scheme. Each integration is issued its
  own API key from the Admin module and presents it on every request in the
  X-FORECAST-API-KEY header over TLS. There is no OAuth 2.0, OpenID Connect, or
  short-lived token flow. Keys grant full account access and can be disabled or
  deleted from Admin if compromised.
schemes:
- id: forecast_api_key
  type: apiKey
  in: header
  name: X-FORECAST-API-KEY
  description: >-
    Per-integration API key generated in the Forecast Admin module (Admin ->
    API Keys -> Generate New API Key). Sent on every request. Grants full
    access to the account; treat like a password. Keys can be individually
    disabled or deleted if compromised.
  required: true
transport:
  tls_required: true
  notes: SSL only; all requests must be HTTPS.
oauth2: false
openid_connect: false
mutual_tls: false
key_management:
  provisioning: Admin module, one key per integration recommended
  rotation: supported (generate new key, disable/delete old)
  revocation: supported (disable or delete key in Admin)
notes: >-
  Forecast was acquired by Accelo (2025) and the forecast.app brand now
  redirects to accelo.com, but the api.forecast.it API host and X-FORECAST-API-KEY
  scheme remain live.

Work with this as data

Every security artifact here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for security posture

4 MCP tools reach this
  • find_securityBrowse and filter every security artifact in the catalog.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This security artifact
curl "https://apis.io/api/v1/security/forecast-authentication"
All security posture
curl "https://apis.io/api/v1/security?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

A second provider on the same verified email joins the account you already have.