Indico Data · Authentication Profile

Indico Data Authentication

Authentication

Indico Data secures its APIs with http-basic and http-bearer across 2 declared security schemes, as derived from its OpenAPI definitions.

CompanyIntelligent Document ProcessingIntelligent Process AutomationDocument AIMachine LearningUnstructured DataData ExtractionInsurance
Methods: http-basic, http-bearer Schemes: 2 OAuth flows: API key in:

Security Schemes

basicAuth http
scheme: basic
bearerAuth http
scheme: bearer

Source

Authentication Profile

Raw ↑ 
generated: '2026-07-19'
method: searched
source: https://developer.indicodata.ai/docs/getting-started
docs: https://developer.indicodata.ai/docs/getting-started
summary:
  types: [http-basic, http-bearer]
  api_key_in: []
  oauth2_flows: []
  model: >-
    Two-step token auth. Download an API token from the Account page of the
    Intake / Agent Studio app. POST it via HTTP Basic Authentication to
    /restapi/api/v1/auth/refreshToken to receive a short-lived JWT access_token
    (expires after 15 minutes). Send that JWT as a Bearer token on all other REST
    endpoints. Generating a new API token immediately expires all prior tokens.
schemes:
  - name: basicAuth
    type: http
    scheme: basic
    used_for: /api/v1/auth/refreshToken (token exchange only)
    sources: [openapi/indico-data-openapi.yml]
  - name: bearerAuth
    type: http
    scheme: bearer
    bearer_format: JWT
    token_lifetime: 15 minutes
    used_for: all data endpoints
    sources: [openapi/indico-data-openapi.yml]
notes:
  - The GraphQL API (served at /graph/api/graphql) uses the same JWT bearer token.
  - No OAuth2 authorization/scope surface is documented; there are no OAuth scopes.