Light & Wonder · Authentication Profile

Light And Wonder Authentication

Authentication

Light & Wonder declares 1 security scheme(s) across its OpenAPI definitions.

GamingCasinosiGamingMobile GamesEntertainmentSlot MachinesSocial Gaming
Methods: Schemes: 1 OAuth flows: API key in:

Security Schemes

oauth2-client-credentials oauth2

Source

Authentication Profile

light-and-wonder-authentication.yml Raw ↑ 
generated: '2026-10-20'
method: searched
source: https://docs.oracle.com/en/industries/hospitality/enterprise-integrations/gaming-integration/25.1/gamig/c_light_wonder_cmp_acsc.htm
docs: https://docs.oracle.com/en/industries/hospitality/enterprise-integrations/gaming-integration/25.1/gamig/c_light_wonder_cmp_acsc.htm
scope: Light & Wonder CMP (casino management) webservices, as documented by a THIRD PARTY (Oracle Hospitality OPERA Cloud gaming integration guide). Light & Wonder publishes no public API documentation of its own; its Gateway integration docs (gateway.lnw.com) sit behind an Okta/Auth0 customer login.
schemes:
- name: oauth2-client-credentials
  type: oauth2
  flow: clientCredentials
  token_url_pattern: http://{Rest API Based Service URL}/oauth?grant_type=client_credentials
  evidence: 'Access Token URI:[ex:http://{Rest API Based Service URL}/oauth?grant_type=client_credentials] Client id: Username of the token service Client Secret: password of the token service'
  additional_parameters:
  - name: client-id
    description: client id parameter of the service call
  - name: property-id
    description: property id of the Light & Wonder
  provisioning: Credentials and the per-property service URL are requested from the Light & Wonder point of contact; the host is deployment-specific ({hostname}:{port}), not a public multi-tenant endpoint.
note: Third-party evidence only. The scheme describes the on-property CMP webservices consumed by OPERA Cloud, not a publicly callable Light & Wonder API.

Work with this as data

Every security artifact here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for security posture

4 MCP tools reach this
  • find_securityBrowse and filter every security artifact in the catalog.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This security artifact 
curl "https://apis.io/api/v1/security/light-and-wonder-authentication"
All security posture 
curl "https://apis.io/api/v1/security?limit=25"

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.