Jasper · Authentication Profile

Jasper Authentication

Authentication

Jasper secures its APIs with apiKey, oauth2, and openIdConnect across 3 declared security schemes, as derived from its OpenAPI definitions. OAuth 2.0 is offered via the authorizationCode flow(s).

CompanyAi MlArtificial IntelligenceContent GenerationMarketingGenerative AIAgentsMCP
Methods: apiKey, oauth2, openIdConnect Schemes: 3 OAuth flows: authorizationCode API key in: header

Security Schemes

ApiKeyAuth apiKey
· in: header ()
OAuth2 oauth2
· flows: authorizationCode
OpenIDConnect openIdConnect

Source

Authentication Profile

Raw ↑ 
generated: '2026-08-13'
method: searched
source: >-
  https://developers.jasper.ai/docs/authentication ;
  https://api.jasper.ai/.well-known/openid-configuration ;
  https://api.jasper.ai/.well-known/oauth-authorization-server ;
  https://mcp.jasper.ai/.well-known/oauth-protected-resource ;
  openapi/jasper-api-openapi.yml
docs: https://developers.jasper.ai/docs/authentication
spec_confirmation: >-
  Confirmed against the OpenAPI captured this round: components.securitySchemes declares `X-API-Key`
  (apiKey, in header, name X-API-Key) and `oauth2` (authorizationCode flow, authorize/token/refresh
  at https://api.jasper.ai/oauth2/*). There is no global `security` object — all 50 operations
  declare `security: [{X-API-Key: []}, {oauth2: [user]}]` individually, so both schemes are
  accepted everywhere and neither is optional.
summary:
  types: [apiKey, oauth2, openIdConnect]
  api_key_in: [header]
  oauth2_flows: [authorizationCode]
schemes:
- name: ApiKeyAuth
  type: apiKey
  in: header
  parameter_name: X-API-KEY
  description: >-
    Workspace-scoped API token sent in the X-API-KEY request header. Token management is
    restricted to users with the Admin or Developer role and is done at
    https://app.jasper.ai/settings/dev-tools/tokens. API access requires the Jasper Business plan.
- name: OAuth2
  type: oauth2
  description: >-
    OAuth 2.0 authorization-code flow with PKCE (S256) and Dynamic Client Registration, used by
    the hosted MCP server and agent integrations. Bearer access token sent as Authorization: Bearer.
  flows:
  - flow: authorizationCode
    issuer: https://api.jasper.ai
    authorizationUrl: https://api.jasper.ai/oauth2/authorize
    tokenUrl: https://api.jasper.ai/oauth2/token
    revocationUrl: https://api.jasper.ai/oauth2/revoke
    introspectionUrl: https://api.jasper.ai/oauth2/introspect
    registrationUrl: https://api.jasper.ai/oauth2/register
    pkce: S256
    grant_types: [authorization_code, refresh_token]
    token_endpoint_auth_methods: [client_secret_post, client_secret_basic]
    scopes: [mcp, user:read, user, openid, email, profile]
- name: OpenIDConnect
  type: openIdConnect
  openIdConnectUrl: https://api.jasper.ai/.well-known/openid-configuration
  description: OIDC discovery is published; response_types [code], scopes include openid/email/profile.

Work with this as data

Every security artifact here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for security posture

4 MCP tools reach this
  • find_securityBrowse and filter every security artifact in the catalog.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This security artifact 
curl "https://apis.io/api/v1/security/jasper-authentication"
All security posture 
curl "https://apis.io/api/v1/security?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no email required.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.