Gridlines · Authentication Profile

Gridline Authentication

Authentication

Gridlines declares 3 security scheme(s) across its OpenAPI definitions.

CompanyOnboardingIdentityVerificationKYCeSigningFraudDetectionVideoKYCDigitalOnboardingFintech
Methods: Schemes: 3 OAuth flows: API key in:

Security Schemes

X-API-Key apiKey
· in: header ()
X-Auth-Type apiKey
· in: header ()
http
scheme: bearer

Source

Authentication Profile

Raw ↑ 
generated: '2026-10-28'
method: searched
source: https://gridlines.stoplight.io/
docs: https://gridlines.stoplight.io/
summary: API keys are generated in the Gridlines account after enabling an API; each key can be authorised for one or more Gridlines APIs. All requests must use HTTPS and carry the X-Auth-Type and X-API-Key headers. For the Aadhaar OVSE Web SDK, the client backend exchanges the server-side API key for a short-lived bearer session and passes only that token to the browser/app.
schemes:
  - type: apiKey
    name: X-API-Key
    in: header
    description: API key for authentication. Keys "carry many privileges" and must not be placed in client-side code.
  - type: apiKey
    name: X-Auth-Type
    in: header
    description: Must be set to 'API-Key'.
  - type: http
    scheme: bearer
    description: SDK session token. Documented as POST /v1/auth/tokens with X-Auth-Type API-Key and the server-side X-API-Key, returning access_token, token_type 'Bearer', access_token_expires_in, refresh_token and refresh_token_expires_in. Documented only; not called by this pipeline.
    docs: https://gridlines.stoplight.io/docs/gridlines-api-docs/9e848f3922672-aadhaar-ovse-web-sdk-react-native-integration-guide
key_management:
  per_module_keys: true
  note: "You can choose to generate different API Keys for each of your modules invoking Gridlines APIs or you can choose to use a single API key across your account."

Work with this as data

Every security artifact here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for security posture

4 MCP tools reach this
  • find_securityBrowse and filter every security artifact in the catalog.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This security artifact 
curl "https://apis.io/api/v1/security/gridline-authentication"
All security posture 
curl "https://apis.io/api/v1/security?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.