Good Timing · Authentication Profile

Good Timing Authentication

Authentication

Good Timing secures its APIs with apiKey across 3 declared security schemes, as derived from its OpenAPI definitions.

CompanyMCPProduct AnalyticsAI AgentsObservabilitySDK

Methods: apiKey Schemes: 3 OAuth flows: API key in: header

Security Schemes

BearerApiKey apiKey

· in: header (Authorization)

TenantId apiKey

· in: header (x-baton-tenant-id)

PublishableKeyDSN apiKey

· in: header (Authorization)

Source

Authentication Profile

generated: '2026-11-09'
method: searched
source:
- https://goodtiming.ai/docs.html
- openapi/goodtiming-ai-openapi.yml
summary:
  types:
  - apiKey
  api_key_in:
  - header
schemes:
- name: BearerApiKey
  type: apiKey
  in: header
  parameter: Authorization
  description: '''Bearer <your API key>''.'
  sources:
  - openapi/goodtiming-ai-openapi.yml
- name: TenantId
  type: apiKey
  in: header
  parameter: x-baton-tenant-id
  description: 'Auth key: the tenant identifier the Bearer token belongs to.'
  sources:
  - openapi/goodtiming-ai-openapi.yml
- name: PublishableKeyDSN
  type: apiKey
  in: header
  parameter: Authorization
  description: Per-server DSN carrying a publishable key (baton_pk_…), the events host, the workspace id (ten_…) and the server id (srv-…). HttpSink posts batches to {url}/v0/events/batch with the key as
    a bearer token. "A publishable key can only write events, and only for the server its DSN names, so it is safe in your source."
  key_prefixes:
  - baton_pk_
  obtain: Sign in at baton.goodtiming.ai/account and press Add a server; DSNs are listed under Publishable keys.
  sources:
  - https://goodtiming.ai/docs.html
docs: https://goodtiming.ai/docs.html
notes:
- Console API keys for the proxy sink are shown with prefix bk_live_ (BATON_API_KEY example "bk_live_..."); tenant id sent as BATON_TENANT_ID / x-baton-tenant-id.
- No OAuth scopes are documented.

Work with this as data

Every security artifact here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for security posture

4 MCP tools reach this

find_securityBrowse and filter every security artifact in the catalog.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This security artifact

curl "https://apis.io/api/v1/security/goodtiming-ai-authentication"

All security posture

curl "https://apis.io/api/v1/security?limit=25"

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.