Open Government, New South Wales · Authentication Profile

Open Government New South Wales Authentication

Authentication

API NSW generates API keys for APIs and enables authentication to your APIs using policies. Credential pairs consisting of consumer key and secret are provisioned to clients and stored for future validation. Apps must be approved by an api.nsw administrator before keys are usable.

Open Government, New South Wales declares 2 security scheme(s) across its OpenAPI definitions.

GovernmentPublic APIsOpen DataAustraliaNew South WalesPublic SectorFuel Prices
Methods: Schemes: 2 OAuth flows: API key in:

Security Schemes

oauth2
apikey apiKey
· in: header ()

Source

Authentication Profile

Raw ↑ 
generated: '2026-10-21'
method: searched
source: https://api.nsw.gov.au/Product/Index/22
docs: https://api.nsw.gov.au/Support
schemes:
- type: oauth2
  flow: clientCredentials
  tokenUrl: https://api.onegov.nsw.gov.au/oauth/client_credential/accesstoken?grant_type=client_credentials
  credential_exchange: HTTP Basic header carrying base64 of "Key:Secret"
  token_lifetime_text: an authorisation token that would last approximately 12 hours from the time when request was made
  token_usage: Authorization Bearer header on every subsequent request
- type: apiKey
  in: header
  name: apikey
  description: API key sent alongside the bearer token on each data call (spec header parameter apikey)
description: API NSW generates API keys for APIs and enables authentication to your APIs using policies. Credential pairs consisting of consumer key and secret are provisioned to clients and stored for future validation. Apps must be approved by an api.nsw administrator before keys are usable.
note: The contract declares no securitySchemes; the token operation (OauthClientCredentialAccesstokenGet, GET /oauth/client_credential/accesstoken) and the Authorization/apikey header parameters are in openapi/open-government-new-south-wales-fuel-openapi.yml. Not probed.

Work with this as data

Every security artifact here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for security posture

4 MCP tools reach this
  • find_securityBrowse and filter every security artifact in the catalog.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This security artifact 
curl "https://apis.io/api/v1/security/open-government-new-south-wales-authentication"
All security posture 
curl "https://apis.io/api/v1/security?limit=25"

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.