OSFI · Authentication Profile
Osfi Authentication
Authentication
OSFI runs two entirely separate surfaces with two different auth models: an anonymous READ surface (its data on Canada's Open Government Portal) and a gated WRITE/FILING surface (the Regulatory Reporting System behind Bank of Canada Connect).
OSFI secures its APIs with none and portal-login across 2 declared security schemes, as derived from its OpenAPI definitions.
InsuranceCanadaRegulatorLife InsuranceProperty and CasualtyFinancial RegulationPrudential SupervisionOpen DataRisk DataMarket InfrastructureBankingBasel IIICapital AdequacyRegulatory ReportingPensions
Methods: none, portal-login
Schemes: 2
OAuth flows:
API key in:
Security Schemes
anonymous none
bank-of-canada-connect portal-login
Source
Authentication Profile
Work with this as data
Every security artifact here is available over the APIs.io API and to AI agents over MCP.
MCP server
One button, every client — Claude, Cursor, VS Code and the rest.
https://apis.io/mcp
Tools for security posture
4 MCP tools reach this
find_securityBrowse and filter every security artifact in the catalog.apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.resolveTurn a domain, URL or GitHub org into the provider it belongs to.find_cohortsEvery scored population of providers in the catalog.
Call it yourself
curl for this page
This security artifact
curl "https://apis.io/api/v1/security/osfi-authentication"
All security posture
curl "https://apis.io/api/v1/security?limit=25"
Discovery needs no key. Ratings and market analysis are Pro.