Mobilecoin · Authentication Profile

Mobilecoin Authentication

Authentication

Mobilecoin secures its APIs with apiKey across 1 declared security scheme, as derived from its OpenAPI definitions.

CompanyCryptocurrencyPaymentsBlockchainDigital WalletStablecoinsPrivacyJSON-RPC
Methods: apiKey Schemes: 1 OAuth flows: API key in: header

Security Schemes

ApiKeyAuth apiKey
· in: header ()

Source

Authentication Profile

mobilecoin-authentication.yml Raw ↑ 
generated: '2026-07-20'
method: searched
source: https://mobilecoin.gitbook.io/full-service-api/usage/api-key
summary:
  types: [apiKey]
  api_key_in: [header]
  oauth2_flows: []
  notes: >-
    The Full-Service JSON-RPC API runs locally (default 127.0.0.1:9090) and is
    unauthenticated by default. Optional API-key protection is enabled by
    setting MC_API_KEY in the service .env; when set, every request must carry
    the key in the X-API-KEY header. There is no OAuth/OIDC and no scope
    surface. Network transport can additionally be secured with TLS for the
    validator and mirror services.
schemes:
- name: ApiKeyAuth
  type: apiKey
  in: header
  parameter_name: X-API-KEY
  optional: true
  configured_via: MC_API_KEY environment variable (.env)
  docs: https://mobilecoin.gitbook.io/full-service-api/usage/api-key