Oddcast · Authentication Profile

Oddcast Authentication

Authentication

Oddcast secures its APIs with apiKey and checksum across 2 declared security schemes, as derived from its OpenAPI definitions.

CompanyText-to-SpeechSpeech SynthesisAvatarsVoiceMediaCreative TechnologyEducationDevelopers

Methods: apiKey, checksum Schemes: 2 OAuth flows: API key in: query

Security Schemes

VocalwareRequestSignature apiKey

· in: query ()

SitePalAccount apiKey

· in: embed ()

Source

Authentication Profile

generated: '2026-07-20'
method: searched
source: https://www.vocalware.com/support/reference
docs: https://www.vocalware.com/support/reference
summary:
  types: [apiKey, checksum]
  api_key_in: [query]
  notes: >-
    Oddcast's developer products do not use OAuth. Vocalware authenticates each
    text-to-speech request with an account identifier plus a secret API key and a
    per-request checksum (signature) computed over the request parameters, so the
    secret key is never sent in the clear. SitePal avatars are provisioned to an
    account and embedded/controlled client-side; server-side account access is via
    the VHost admin login.
schemes:
- name: VocalwareRequestSignature
  product: Vocalware Text-to-Speech API
  type: apiKey
  in: query
  mechanism: >-
    Account id (ACC) and API key are issued from the Vocalware account. Each
    HTTP/REST or JavaScript request carries the account id and a checksum (CS)
    derived from the request parameters and the secret API key; the secret key
    itself is not transmitted on the request. Requests are metered per audio
    stream (one playback instance up to 60 seconds).
  docs: https://www.vocalware.com/support/reference
  sources: [searched:https://www.vocalware.com/support/reference]
- name: SitePalAccount
  product: SitePal Avatar API
  type: apiKey
  in: embed
  mechanism: >-
    A SitePal scene is bound to an account id and embedded via the SitePal
    JavaScript (VHost) API; runtime control (sayText, sayAI, etc.) executes in the
    browser under that account. Account/admin access is via the VHost login.
  docs: https://www.sitepal.com/guide
  login: https://vhost.oddcast.com/admin/index.php
  sources: [searched:https://www.sitepal.com/guide]

Work with this as data

Every security artifact here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for security posture

4 MCP tools reach this

find_securityBrowse and filter every security artifact in the catalog.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This security artifact

curl "https://apis.io/api/v1/security/oddcast-authentication"

All security posture

curl "https://apis.io/api/v1/security?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.