IEX Cloud · Authentication Profile

Iex Cloud Authentication

Authentication

IEX Cloud secures its APIs with apiKey across 2 declared security schemes, as derived from its OpenAPI definitions.

FintechMarket DataStocksReferenceSunsetHistorical
Methods: apiKey Schemes: 2 OAuth flows: API key in: query

Security Schemes

publishableToken apiKey
· in: query (token)
secretToken apiKey
· in: query (token)

Source

Authentication Profile

iex-cloud-authentication.yml Raw ↑
generated: '2026-07-22'
method: searched
source: https://raw.githubusercontent.com/iexcloud/docs/main/source/administration/access-and-security.md
docs: https://github.com/iexcloud/docs/blob/main/source/administration/access-and-security.md
notes: >-
  IEX Cloud sunset on 2024-08-31; this profile is preserved from the official
  documentation source that survives in the public github.com/iexcloud/docs
  repository (Apperate era). No live endpoints accept these credentials anymore.
summary:
  types: [apiKey]
  api_key_in: [query]
  oauth2_flows: []
schemes:
  - name: publishableToken
    type: apiKey
    in: query
    parameter: token
    description: >-
      Publishable (public) API tokens granted Core dataset read access by default;
      could additionally be granted Premium Data access and per-dataset
      read/write/delete permissions. Supported optional restrictions: allowed
      domains, and core-credit usage limits per token.
    sources:
      - https://github.com/iexcloud/docs/blob/main/source/administration/access-and-security.md
  - name: secretToken
    type: apiKey
    in: query
    parameter: token
    description: >-
      Secret tokens allowed any action on data and account; docs warned never to
      share them publicly. Hidden from dataset overview pages as of 2022-12-06.
    sources:
      - https://github.com/iexcloud/docs/blob/main/source/administration/access-and-security.md
features:
  signed_requests: >-
    Tokens could require a signature per request (available to Business plan and
    legacy Grow/Scale users on legacy plans).
  domain_restriction: >-
    Tokens could be restricted to requests originating from specified domains.
  per_token_limits: Core-credit usage limits could be set per token.
  token_tiers: Launch up to 2 tokens, Grow up to 50, Scale up to 1,000 (Apperate limits page).