Market Data · Authentication Profile

Marketdata App Authentication

Authentication

Market Data secures its APIs with http and apiKey across 2 declared security schemes, as derived from its OpenAPI definitions.

Market DataFinancial DataStocksOptionsIndicesReal-Time DataHistorical DataQuotes
Methods: http, apiKey Schemes: 2 OAuth flows: API key in: query

Security Schemes

bearerAuth http
scheme: bearer
tokenQueryParameter apiKey
· in: query (token)

Source

Authentication Profile

Raw ↑
generated: '2026-07-22'
method: searched
source: https://www.marketdata.app/docs/api/authentication/
docs: https://www.marketdata.app/docs/api/authentication/
summary:
  types:
  - http
  - apiKey
  api_key_in:
  - query
  oauth2_flows: []
schemes:
- name: bearerAuth
  type: http
  scheme: bearer
  description: >-
    Bearer token generated in the Market Data customer dashboard (delivered by
    email) and passed in the Authorization header. The token is a programmatic
    representation of the account credentials and must be kept secret.
  sources:
  - openapi/marketdata-app-openapi-original.yml
  - https://www.marketdata.app/docs/api/authentication/
- name: tokenQueryParameter
  type: apiKey
  in: query
  parameter: token
  description: >-
    A read-only access token may be supplied as a token query parameter for
    quick browser or spreadsheet use. The provider discourages this - tokens
    in URLs are exposed in server logs and caches - and recommends header
    authentication.
  sources:
  - https://www.marketdata.app/docs/api/universal-parameters/token/
policies:
  single_ip: >-
    Each account may only connect from one IP address at a time; switching
    back and forth between IPs within a 5-minute window triggers a temporary
    block (HTTP 403).
  demo_without_auth: >-
    Stock endpoints with AAPL, options endpoints with any AAPL contract
    (e.g. AAPL271217C00250000), and fund endpoints with VFINX work with no
    token at all (historical data only).

Work with this as data

Every security artifact here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for security posture

4 MCP tools reach this
  • find_securityBrowse and filter every security artifact in the catalog.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This security artifact
curl "https://apis.io/api/v1/security/marketdata-app-authentication"
All security posture
curl "https://apis.io/api/v1/security?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no email required.

A second provider on the same verified email joins the account you already have.