IEX Cloud · Authentication Profile

Iex Cloud Authentication

Authentication

IEX Cloud secures its APIs with apiKey across 2 declared security schemes, as derived from its OpenAPI definitions.

FintechMarket DataStocksReferenceSunsetHistorical
Methods: apiKey Schemes: 2 OAuth flows: API key in: query

Security Schemes

publishableToken apiKey
· in: query (token)
secretToken apiKey
· in: query (token)

Source

Authentication Profile

iex-cloud-authentication.yml Raw ↑
generated: '2026-07-22'
method: searched
source: https://raw.githubusercontent.com/iexcloud/docs/main/source/administration/access-and-security.md
docs: https://github.com/iexcloud/docs/blob/main/source/administration/access-and-security.md
notes: >-
  IEX Cloud sunset on 2024-08-31; this profile is preserved from the official
  documentation source that survives in the public github.com/iexcloud/docs
  repository (Apperate era). No live endpoints accept these credentials anymore.
summary:
  types: [apiKey]
  api_key_in: [query]
  oauth2_flows: []
schemes:
  - name: publishableToken
    type: apiKey
    in: query
    parameter: token
    description: >-
      Publishable (public) API tokens granted Core dataset read access by default;
      could additionally be granted Premium Data access and per-dataset
      read/write/delete permissions. Supported optional restrictions: allowed
      domains, and core-credit usage limits per token.
    sources:
      - https://github.com/iexcloud/docs/blob/main/source/administration/access-and-security.md
  - name: secretToken
    type: apiKey
    in: query
    parameter: token
    description: >-
      Secret tokens allowed any action on data and account; docs warned never to
      share them publicly. Hidden from dataset overview pages as of 2022-12-06.
    sources:
      - https://github.com/iexcloud/docs/blob/main/source/administration/access-and-security.md
features:
  signed_requests: >-
    Tokens could require a signature per request (available to Business plan and
    legacy Grow/Scale users on legacy plans).
  domain_restriction: >-
    Tokens could be restricted to requests originating from specified domains.
  per_token_limits: Core-credit usage limits could be set per token.
  token_tiers: Launch up to 2 tokens, Grow up to 50, Scale up to 1,000 (Apperate limits page).

Work with this as data

Every security artifact here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for security posture

4 MCP tools reach this
  • find_securityBrowse and filter every security artifact in the catalog.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools

Call it yourself

curl for this page
This security artifact
curl "https://apis.io/api/v1/security/iex-cloud-authentication"
All security posture
curl "https://apis.io/api/v1/security?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no email required.

A second provider on the same verified email joins the account you already have.