Nowlun Holding Corp. · Authentication Profile

Nowlun Holding Corp Authentication

Authentication

Nowlun Holding Corp. secures its APIs with oauth2 across 1 declared security scheme, as derived from its OpenAPI definitions. OAuth 2.0 is offered via the authorizationCode flow(s).

CompanyLogisticsFreight ForwardingShippingSupply ChainSea FreightCustomsMENAMCP

Methods: oauth2 Schemes: 1 OAuth flows: authorizationCode API key in:

Security Schemes

OAuth2 oauth2

· flows: authorizationCode

Source

Authentication Profile

generated: '2026-07-20'
method: searched
source: https://nowlun.com/.well-known/oauth-authorization-server
summary:
  types: [oauth2]
  oauth2_flows: [authorizationCode]
  pkce: S256
  token_endpoint_auth_methods: [none, client_secret_basic, client_secret_post]
schemes:
- name: OAuth2
  type: oauth2
  flows:
  - flow: authorizationCode
    issuer: https://nowlun.com
    authorizationUrl: https://nowlun.com/oauth/authorize
    tokenUrl: https://nowlun.com/oauth/token
    revocationUrl: https://nowlun.com/oauth/revoke
    jwksUri: https://nowlun.com/oauth/discovery/keys
    grantTypes: [authorization_code, refresh_token]
    codeChallengeMethods: [S256]
    scopes: [excel, mcp, mind]
  sources: [well-known/nowlun-holding-corp-oauth-authorization-server.json]
notes: >-
  Auth model derived from Nowlun's published RFC 8414 authorization-server metadata.
  Authorization Code + PKCE (S256) with refresh tokens. No dynamic client registration
  endpoint discovered. The MCP server at https://nowlun.com/mcp is gated on the "mcp" scope.