FundGuard · Authentication Profile

Fundguard Authentication

Authentication

FundGuard secures its APIs with oauth2 across 1 declared security scheme, as derived from its OpenAPI definitions. OAuth 2.0 is offered via the authorizationCode flow(s).

investment-accountingFund AccountingiboraborNAVAsset Managementportfolio-accountingPrivate MarketsFinancial-ServicesFintechSoftware-as-a-ServiceArtificial IntelligenceMCP
Methods: oauth2 Schemes: 1 OAuth flows: authorizationCode API key in:

Security Schemes

mcp-oauth oauth2
· flows: authorizationCode

Source

Authentication Profile

fundguard-authentication.yml Raw ↑
generated: '2026-08-01'
method: probed
source: https://www.fundguard.com/.well-known/oauth-authorization-server
note: >-
  FundGuard publishes no OpenAPI, so no securitySchemes could be derived. The only machine-readable
  authentication contract FundGuard serves publicly is the RFC 8414 OAuth authorization-server metadata and
  the RFC 9728 protected-resource metadata that front the MCP server on www.fundguard.com. The investment
  accounting platform's own authentication model is not publicly documented; tenant logins live on per-tenant
  hosts (login-<tenant>-eastus.fundguard.com, seen only in certificate transparency logs and not resolvable
  from the public internet).
summary:
  types: [oauth2]
  api_key_in: []
  oauth2_flows: [authorizationCode]
  bearer_methods: [header]
  pkce: [S256]
schemes:
- name: mcp-oauth
  type: oauth2
  protected_resource: https://www.fundguard.com/wp-json/mcp/mcp-oauth-server
  issuer: https://www.fundguard.com
  flows:
  - flow: authorizationCode
    authorizationUrl: https://www.fundguard.com/oauth/authorize
    tokenUrl: https://www.fundguard.com/oauth/token
    revocationUrl: https://www.fundguard.com/oauth/revoke
    refresh_supported: true
    pkce: S256
    scopes:
      mcp: Access the FundGuard MCP server
  client_registration:
    dynamic_client_registration: false
    client_id_metadata_document_supported: true
  token_endpoint_auth_methods: [none]
  sources:
  - well-known/fundguard-oauth-authorization-server.json
  - well-known/fundguard-oauth-protected-resource.json
undocumented:
- surface: FundGuard investment accounting platform API
  reason: >-
    marketed as API-first for portfolio management, custodian, administrator and data-provider integration,
    but no developer portal, API reference, or auth documentation is published on any public FundGuard host
x-evidence:
  fetched: '2026-08-01'
  urls:
  - https://www.fundguard.com/.well-known/oauth-authorization-server
  - https://www.fundguard.com/.well-known/oauth-protected-resource
  http_status: 200

Work with this as data

Every security artifact here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for security posture

4 MCP tools reach this
  • find_securityBrowse and filter every security artifact in the catalog.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools

Call it yourself

curl for this page
This security artifact
curl "https://apis.io/api/v1/security/fundguard-authentication"
All security posture
curl "https://apis.io/api/v1/security?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no email required.

A second provider on the same verified email joins the account you already have.