Nasdaq Private Market · Authentication Profile

Nasdaq Private Market Authentication

Authentication

Nasdaq Private Market secures its APIs with openIdConnect and oauth2 across 2 declared security schemes, as derived from its OpenAPI definitions. OAuth 2.0 is offered via the authorizationCode, implicit, clientCredentials, deviceCode, and refreshToken flow(s).

CompanyPrivate MarketsSecondary MarketsMarket DataFinancial-ServicesValuationsPre-IPO EquityCapital Markets
Methods: openIdConnect, oauth2 Schemes: 2 OAuth flows: authorizationCode, implicit, clientCredentials, deviceCode, refreshToken API key in:

Security Schemes

NPM Platform OIDC (Okta) openIdConnect
NPM Platform OAuth 2.0 Authorization Server oauth2

Source

Authentication Profile

nasdaq-private-market-authentication.yml Raw ↑ 
generated: '2026-08-04'
method: searched
source: https://fe.login.secondmarket.com/.well-known/openid-configuration
docs: https://www.nasdaqprivatemarket.com/data-intelligence/
notes: 'Nasdaq Private Market publishes no OpenAPI and no developer authentication
  documentation. This profile is derived entirely from the live OpenID Connect / RFC
  8414 discovery documents served by the platform identity host, plus the published
  access tiers on the Data & Intelligence page. It describes how a human signs in to
  the NPM / SecondMarket trading platform — it is NOT a documented machine-to-machine
  contract for the Tape D data API, which is sold on the Premium (Talk to Sales) tier
  and delivered through Nasdaq Data Link.'
summary:
  types:
  - openIdConnect
  - oauth2
  api_key_in: []
  oauth2_flows:
  - authorizationCode
  - implicit
  - clientCredentials
  - deviceCode
  - refreshToken
  pkce: true
  pkce_methods:
  - S256
  dynamic_client_registration: true
schemes:
- name: NPM Platform OIDC (Okta)
  type: openIdConnect
  openIdConnectUrl: https://fe.login.secondmarket.com/.well-known/openid-configuration
  issuer: https://fe.login.secondmarket.com
  endpoints:
    authorization: https://fe.login.secondmarket.com/oauth2/v1/authorize
    token: https://fe.login.secondmarket.com/oauth2/v1/token
    userinfo: https://fe.login.secondmarket.com/oauth2/v1/userinfo
    jwks: https://fe.login.secondmarket.com/oauth2/v1/keys
    registration: https://fe.login.secondmarket.com/oauth2/v1/clients
    introspection: https://fe.login.secondmarket.com/oauth2/v1/introspect
    revocation: https://fe.login.secondmarket.com/oauth2/v1/revoke
  id_token_signing_alg:
  - RS256
  response_types:
  - code
  - id_token
  - code id_token
  - code token
  - id_token token
  - code id_token token
  token_endpoint_auth_methods:
  - client_secret_basic
  - client_secret_post
  - client_secret_jwt
  - private_key_jwt
  - none
  sources:
  - well-known/nasdaq-private-market-openid-configuration.json
- name: NPM Platform OAuth 2.0 Authorization Server
  type: oauth2
  metadata: https://fe.login.secondmarket.com/.well-known/oauth-authorization-server
  issuer: https://fe.login.secondmarket.com
  grant_types:
  - authorization_code
  - implicit
  - refresh_token
  - password
  - client_credentials
  - urn:ietf:params:oauth:grant-type:device_code
  - urn:openid:params:grant-type:ciba
  sources:
  - well-known/nasdaq-private-market-oauth-authorization-server.json
gaps:
- No public API authentication guide — the "Learn about API Access" link on the Data
  & Intelligence page is an empty "#" anchor.
- No API key / token provisioning surface is documented for the Tape D dataset; the
  only published path is "Talk to Sales" for the Premium tier.
- No scope reference for the data products; the scopes advertised by the identity host
  are identity/profile scopes and Okta org-management scopes, not NPM business scopes.

Work with this as data

Every security artifact here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for security posture

4 MCP tools reach this
  • find_securityBrowse and filter every security artifact in the catalog.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This security artifact 
curl "https://apis.io/api/v1/security/nasdaq-private-market-authentication"
All security posture 
curl "https://apis.io/api/v1/security?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.