Morningstar · Authentication Profile

Morningstar Authentication

Authentication

Morningstar secures its APIs with http-basic (token issuance), bearer (API calls), and oauth2 (MCP server) across 1 declared security scheme, as derived from its OpenAPI definitions. OAuth 2.0 is offered via the authorizationCode (MCP server only) flow(s).

FinancialMarket DataInvestingStocksFundsReal-TimeReference DataPortfolio AnalyticsResearchIndexes
Methods: http-basic (token issuance), bearer (API calls), oauth2 (MCP server) Schemes: 1 OAuth flows: authorizationCode (MCP server only) API key in:

Security Schemes

BasicAuth http
scheme: basic

Source

Authentication Profile

Raw ↑ 
generated: '2026-07-22'
method: searched
source: openapi/morningstar-accounts-api-openapi.yml, openapi/morningstar-activities-api-openapi.yml,
  openapi/morningstar-aggregates-financials-api-openapi.yml, openapi/morningstar-aggregates-market-capitalization-and-enterprise-value-api-openapi.yml,
  openapi/morningstar-aggregates-residual-risk-and-return-sensitivity-api-openapi.yml, openapi/morningstar-aggregates-returns-api-openapi.yml,
  openapi/morningstar-analyst-highlights-api-openapi.yml, openapi/morningstar-analyst-normalized-financials-api-openapi.yml,
  openapi/morningstar-attribution-api-openapi.yml, openapi/morningstar-autocomplete-api-openapi.yml, openapi/morningstar-basic-details-api-openapi.yml,
  openapi/morningstar-basic-reference-api-openapi.yml ...
summary:
  types:
  - http-basic (token issuance)
  - bearer (API calls)
  - oauth2 (MCP server)
  oauth2_flows:
  - authorizationCode (MCP server only)
schemes:
- name: BasicAuth
  type: http
  scheme: basic
  sources:
  - openapi/morningstar-accounts-api-openapi.yml
  - openapi/morningstar-activities-api-openapi.yml
  - openapi/morningstar-aggregates-financials-api-openapi.yml
  - openapi/morningstar-aggregates-market-capitalization-and-enterprise-value-api-openapi.yml
  - openapi/morningstar-aggregates-residual-risk-and-return-sensitivity-api-openapi.yml
  - openapi/morningstar-aggregates-returns-api-openapi.yml
  - openapi/morningstar-analyst-highlights-api-openapi.yml
  - openapi/morningstar-analyst-normalized-financials-api-openapi.yml
  - openapi/morningstar-attribution-api-openapi.yml
  - openapi/morningstar-autocomplete-api-openapi.yml
  - openapi/morningstar-basic-details-api-openapi.yml
  - openapi/morningstar-basic-reference-api-openapi.yml
  - openapi/morningstar-benchmarkfees-api-openapi.yml
  - openapi/morningstar-buckets-api-openapi.yml
  - openapi/morningstar-clients-api-openapi.yml
  - openapi/morningstar-company-entitlements-api-openapi.yml
  - openapi/morningstar-compensation-api-openapi.yml
  - openapi/morningstar-consensus-estimates-api-openapi.yml
  - openapi/morningstar-consensus-recommendations-api-openapi.yml
  - openapi/morningstar-corporate-actions-api-openapi.yml
  - openapi/morningstar-corporate-actions-price-mergers-and-acquisitions-api-openapi.yml
  - openapi/morningstar-credentials-api-openapi.yml
  - openapi/morningstar-cusip-api-openapi.yml
  - openapi/morningstar-cusip-change-api-openapi.yml
  - openapi/morningstar-custodians-api-openapi.yml
  - openapi/morningstar-data-points-api-openapi.yml
  - openapi/morningstar-decomposition-api-openapi.yml
  - openapi/morningstar-earnings-summaries-api-openapi.yml
  - openapi/morningstar-equity-company-research-api-openapi.yml
  - openapi/morningstar-equity-moat-framework-api-openapi.yml
  - openapi/morningstar-equity-reports-quant-and-enhanced-quant-api-openapi.yml
  - openapi/morningstar-equity-rps-document-api-openapi.yml
  - openapi/morningstar-esg-api-openapi.yml
  - openapi/morningstar-exposures-api-openapi.yml
  - openapi/morningstar-fees-expenses-api-openapi.yml
  - openapi/morningstar-financials-api-openapi.yml
  - openapi/morningstar-flow-attribution-api-openapi.yml
  - openapi/morningstar-fund-level-sustainability-ratings-research-and-analytics-api-openapi.yml
  - openapi/morningstar-fund-reports-carbon-report-api-openapi.yml
  - openapi/morningstar-fund-reports-esg-api-openapi.yml
  - openapi/morningstar-fund-reports-managed-investment-report-api-openapi.yml
  - openapi/morningstar-fund-reports-target-date-series-api-openapi.yml
  - openapi/morningstar-fund-research-ratings-and-analytics-api-openapi.yml
  - openapi/morningstar-governance-api-openapi.yml
  - openapi/morningstar-holdings-api-openapi.yml
  - openapi/morningstar-households-api-openapi.yml
  - openapi/morningstar-hypo-api-openapi.yml
  - openapi/morningstar-hypothetical-performance-api-openapi.yml
  - openapi/morningstar-idr-investment-details-report-api-openapi.yml
  - openapi/morningstar-industry-classification-api-openapi.yml
  - openapi/morningstar-industry-specific-metrics-api-openapi.yml
  - openapi/morningstar-investment-details-api-openapi.yml
  - openapi/morningstar-investment-list-api-openapi.yml
  - openapi/morningstar-investment-profiles-api-openapi.yml
  - openapi/morningstar-investments-universe-api-openapi.yml
  - openapi/morningstar-key-events-api-openapi.yml
  - openapi/morningstar-macro-shock-scenarios-api-openapi.yml
  - openapi/morningstar-market-capitalization-and-enterprise-value-api-openapi.yml
  - openapi/morningstar-market-shock-scenarios-api-openapi.yml
  - openapi/morningstar-models-api-openapi.yml
  - openapi/morningstar-morningstar-agent-api-openapi.yml
  - openapi/morningstar-oauth-api-openapi.yml
  - openapi/morningstar-office-client-api-openapi.yml
  - openapi/morningstar-office-institution-client-api-openapi.yml
  - openapi/morningstar-office-members-api-openapi.yml
  - openapi/morningstar-ownership-asset-managers-api-openapi.yml
  - openapi/morningstar-ownership-insiders-api-openapi.yml
  - openapi/morningstar-ownership-managed-investments-api-openapi.yml
  - openapi/morningstar-ownership-regulatory-reporting-api-openapi.yml
  - openapi/morningstar-ownership-summary-api-openapi.yml
  - openapi/morningstar-performance-api-openapi.yml
  - openapi/morningstar-persons-api-openapi.yml
  - openapi/morningstar-pjm-professional-judgement-matrix-api-openapi.yml
  - openapi/morningstar-plan-api-openapi.yml
  - openapi/morningstar-plannames-api-openapi.yml
  - openapi/morningstar-portfolio-analytics-api-openapi.yml
  - openapi/morningstar-portfolio-holdings-api-openapi.yml
  - openapi/morningstar-portfolio-holdings-dates-api-openapi.yml
  - openapi/morningstar-portfolio-risk-score-api-openapi.yml
  - openapi/morningstar-portfoliooptimizer-api-openapi.yml
  - openapi/morningstar-portfolios-api-openapi.yml
  - openapi/morningstar-positions-api-openapi.yml
  - openapi/morningstar-professional-judgement-matrices-api-openapi.yml
  - openapi/morningstar-profiles-api-openapi.yml
  - openapi/morningstar-quantitative-comparables-api-openapi.yml
  - openapi/morningstar-quantitative-equity-rating-analysis-api-openapi.yml
  - openapi/morningstar-quantitative-equity-research-ratings-api-openapi.yml
  - openapi/morningstar-questionnaires-api-openapi.yml
  - openapi/morningstar-reference-api-openapi.yml
  - openapi/morningstar-reference-change-api-openapi.yml
  - openapi/morningstar-report-files-api-openapi.yml
  - openapi/morningstar-reports-api-openapi.yml
  - openapi/morningstar-research-ratings-most-recent-and-historical-api-openapi.yml
  - openapi/morningstar-research-ratings-most-recent-api-openapi.yml
  - openapi/morningstar-residual-risk-and-return-sensitivity-api-openapi.yml
  - openapi/morningstar-returns-api-openapi.yml
  - openapi/morningstar-risk-scores-api-openapi.yml
  - openapi/morningstar-scenario-analysis-api-openapi.yml
  - openapi/morningstar-screener-api-openapi.yml
  - openapi/morningstar-securities-api-openapi.yml
  - openapi/morningstar-sedol-api-openapi.yml
  - openapi/morningstar-sedol-change-api-openapi.yml
  - openapi/morningstar-sensitivity-analysis-api-openapi.yml
  - openapi/morningstar-shareholder-stewardship-api-openapi.yml
  - openapi/morningstar-short-interest-api-openapi.yml
  - openapi/morningstar-solutions-api-openapi.yml
  - openapi/morningstar-statement-details-api-openapi.yml
  - openapi/morningstar-statistics-api-openapi.yml
  - openapi/morningstar-style-box-api-openapi.yml
  - openapi/morningstar-time-series-api-openapi.yml
  - openapi/morningstar-timeseries-api-openapi.yml
  - openapi/morningstar-token-api-openapi.yml
  - openapi/morningstar-total-shares-outstanding-api-openapi.yml
  - openapi/morningstar-transcripts-api-openapi.yml
  - openapi/morningstar-views-api-openapi.yml
  - openapi/morningstar-x-ray-api-openapi.yml
  - openapi/morningstar-x-rays-api-openapi.yml
docs: https://developer.morningstar.com/direct-web-services/documentation/api-utilities/authentication-api/overview
details:
  token_issuance: POST /token/oauth on the regional base (us/emea/apac-api.morningstar.com) with Basic
    Base64 username:password returns an unscoped bearer access token.
  token_ttl_minutes: 60
  token_cache_note: Requests within ten minutes of issuance return the same cached token.
  credential_provisioning: Sales-gated - usernames/passwords are provisioned during Morningstar onboarding;
    no self-serve signup.
  market_data_note: Market Data Web Services uses IP-allowlisted username/password on client-specific
    servers.
  mcp_oauth: The MCP server at mcp.morningstar.com runs a full OAuth 2.0 authorization server with PKCE
    (S256) and dynamic client registration - see well-known/morningstar-oauth-authorization-server.json
    and scopes/morningstar-scopes.yml.