JB Hi-Fi · Authentication Profile

Jb Hi Fi Authentication

Authentication

JB Hi-Fi declares 3 security scheme(s) across its OpenAPI definitions.

CompanyRetailConsumer ElectronicsE-CommerceHome EntertainmentAustraliaAgentic Commerce
Methods: Schemes: 3 OAuth flows: API key in:

Security Schemes

meta.ucp-agent.profile agent-profile
· in: tool-arguments ()
Web Bot Auth http-message-signatures
identity_linking (app.shop.accounts) oauth2

Source

Authentication Profile

jb-hi-fi-authentication.yml Raw ↑ 
generated: '2026-10-21'
method: searched
source:
- https://www.jbhifi.com.au/agents.md
- https://www.jbhifi.com.au/.well-known/ucp
docs: https://www.jbhifi.com.au/agents.md
summary: No OpenAPI and no API keys. The UCP shopping MCP service identifies agents by a UCP agent profile URI passed in every tool call's meta, and agents.md requires Web Bot Auth for server-to-server and hosted-browser traffic. Buyer account linking is OAuth2 through Shop accounts as declared in the UCP profile. The preflight also recorded a /.well-known/oauth-protected-resource document on www.jbhifi.com.au.
schemes:
- type: agent-profile
  name: meta.ucp-agent.profile
  in: tool-arguments
  description: Required "Agent profile URI for UCP discovery." on all 13 tools.
- type: http-message-signatures
  name: Web Bot Auth
  description: '"Server-to-server requests and hosted or remote browsers must use Web Bot Auth and follow the service''s authentication requirements."'
  docs: https://shopify.dev/docs/api/storefront#identifying-bots-with-web-bot-auth
- type: oauth2
  name: identity_linking (app.shop.accounts)
  auth_url: https://accounts.shop.app
  description: UCP dev.ucp.common.identity_linking capability; scopes object is empty in the profile.

Work with this as data

Every security artifact here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for security posture

4 MCP tools reach this
  • find_securityBrowse and filter every security artifact in the catalog.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This security artifact 
curl "https://apis.io/api/v1/security/jb-hi-fi-authentication"
All security posture 
curl "https://apis.io/api/v1/security?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.