HumanAPI · Authentication Profile

Humanapi Authentication

Authentication

HumanAPI secures its APIs with http across 1 declared security scheme, as derived from its OpenAPI definitions.

HealthHealthcareHealth DataMedical RecordsInsuranceUnderwritingWellnessData AggregationReportsFHIR-adjacent
Methods: http Schemes: 1 OAuth flows: API key in:

Security Schemes

bearerAuth http
scheme: bearer

Source

Authentication Profile

Raw ↑ 
generated: '2026-07-19'
method: searched
source: openapi/humanapi-admin-openapi.yml, openapi/humanapi-auth-openapi.yml, https://reference.humanapi.co/docs/admin-api
docs: https://reference.humanapi.co
summary:
  types:
  - http
  http_schemes:
  - bearer
  model: >-
    Bearer JWT. A client exchanges its client_id/client_secret at the HAPI Auth
    Public token endpoints (auth.humanapi.co) for a JWT, then calls the Admin API
    (admin.humanapi.co) with Authorization: Bearer <jwt>.
schemes:
- name: bearerAuth
  type: http
  scheme: bearer
  bearerFormat: JWT
  applies_to: openapi/humanapi-admin-openapi.yml
  sources:
  - openapi/humanapi-admin-openapi.yml
token_endpoints:
- url: https://auth.humanapi.co/v1/admin/token
  client_type: admin
  request_fields: [client_id, client_secret, type]
  description: Admin API client-type token
- url: https://auth.humanapi.co/v1/connect/token
  client_type: connect
  request_fields: [client_id, client_user_id, client_secret, client_user_email, type, extra_scopes]
  description: Public Connect token; supports per-user tokens and extra_scopes