LiveRamp · Authentication Profile

Liveramp Authentication

Authentication

LiveRamp secures its APIs with http and oauth2 across 3 declared security schemes, as derived from its OpenAPI definitions. OAuth 2.0 is offered via the password and clientCredentials flow(s).

Data ConnectivityData CollaborationIdentity ResolutionActivationCleanroomPrivacyAdTechMarketingConsentAudience Segments

Methods: http, oauth2 Schemes: 3 OAuth flows: password, clientCredentials API key in:

Security Schemes

application oauth2

· flows: clientCredentials

BearerAuth http

scheme: bearer

bearerAuth http

scheme: bearer

Source

Authentication Profile

generated: '2026-08-13'
method: searched
source: openapi/liveramp-activation-api-openapi.yml, openapi/liveramp-clean-room-api-openapi.yml,
  openapi/liveramp-privacy-api-openapi.yml
docs: https://developers.liveramp.com/activation-api/reference/oauth2defaultv1token
notes: >-
  LiveRamp issues API credentials as "Service Accounts" that are provisioned by a LiveRamp
  representative — there is no self-serve key issuance. The Activation, AbiliTec, RampID and
  Privacy APIs share one OAuth 2.0 token service at serviceaccounts.liveramp.com; the Clean Room
  API (the former Habu platform, acquired by LiveRamp) runs its own client-credentials token
  endpoint on api.habu.com.
summary:
  types:
  - http
  - oauth2
  oauth2_flows:
  - password
  - clientCredentials
  api_key_in: []
token_services:
- name: LiveRamp Service Accounts
  token_url: https://serviceaccounts.liveramp.com/authn/v1/oauth2/token
  grant_type: password
  client_id: liveramp-api
  scope: openid
  token_type: Bearer
  expires_in_seconds: 600
  applies_to:
  - LiveRamp Activation API
  - LiveRamp AbiliTec API
  - LiveRamp RampID API
  - LiveRamp Privacy API
  docs: https://developers.liveramp.com/activation-api/reference/oauth2defaultv1token
  note: >-
    Username is the service-account Account ID, password is the Secret Key, both delivered by a
    LiveRamp representative as a JSON credentials file. Access tokens are short lived (the
    documented example is 600 seconds); the docs instruct clients to fetch a new token on a 403
    token-expiration response and to share one token across a thread rather than refresh per call.
- name: Clean Room (Habu) OAuth
  token_url: https://api.habu.com/v1/oauth/token
  grant_type: client_credentials
  applies_to:
  - LiveRamp Clean Room API
  source: openapi/liveramp-clean-room-api-openapi.yml
schemes:
- name: application
  type: oauth2
  flows:
  - flow: clientCredentials
    tokenUrl: https://api.habu.com/v1/oauth/token
    scopes: 0
  sources:
  - openapi/liveramp-clean-room-api-openapi.yml
- name: BearerAuth
  type: http
  scheme: bearer
  bearerFormat: JWT
  sources:
  - openapi/liveramp-privacy-api-openapi.yml
- name: bearerAuth
  type: http
  scheme: bearer
  description: >-
    Authorization: Bearer <access_token>, where the access token comes from the LiveRamp service
    account token service. Documented for the Activation API, which publishes no securitySchemes
    block in its own OpenAPI.
  sources:
  - https://developers.liveramp.com/activation-api/reference/oauth2defaultv1token
required_headers:
- name: LR-Org-Id
  applies_to:
  - LiveRamp Activation API
  note: >-
    Replaced the former LR-Customer-Id header (see the Activation API changelog entry "LR-Org-Id
    replaces LR-Customer-Id").
  source: https://developers.liveramp.com/activation-api/changelog/lr-org-id-replaces-lr-customer-id
transport:
  tls_minimum: '1.2'
  source: https://developers.liveramp.com/rampid-api/changelog/tls-requirement-upgrade
x-evidence:
- url: https://developers.liveramp.com/activation-api/reference/oauth2defaultv1token.md
  http_status: 200
- url: https://developers.liveramp.com/activation-api/reference/getting-started-1.md
  http_status: 200

Work with this as data

Every security artifact here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for security posture

4 MCP tools reach this

find_securityBrowse and filter every security artifact in the catalog.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This security artifact

curl "https://apis.io/api/v1/security/liveramp-authentication"

All security posture

curl "https://apis.io/api/v1/security?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.