PlexTrac, LLC · Authentication Profile

Plextrac Llc Authentication

Authentication

PlexTrac, LLC secures its APIs with http across 1 declared security scheme, as derived from its OpenAPI definitions.

CompanyCybersecurityPenetration TestingVulnerability ManagementSecurity ReportingExposure ManagementOffensive SecurityMSSPRemediation
Methods: http Schemes: 1 OAuth flows: API key in:

Security Schemes

bearerAuth http
scheme: bearer

Source

Authentication Profile

plextrac-llc-authentication.yml Raw ↑ 
generated: '2026-07-20'
method: searched
source: https://docs.plextrac.com/
docs: https://docs.plextrac.com/
summary:
  types:
  - http
  http_scheme: bearer
  bearer_format: JWT
  token_endpoint: /api/v1/authenticate
  token_lifetime_minutes: 15
  mfa_supported: true
  refresh_supported: true
schemes:
- name: bearerAuth
  type: http
  scheme: bearer
  bearerFormat: JWT
  description: >-
    PlexTrac uses a JWT bearer token. Obtain the token by POSTing credentials to
    /api/v1/authenticate against your PlexTrac instance; the returned JWT is sent
    on subsequent requests in the Authorization header as "Bearer <token>". Tokens
    expire after 15 minutes and are renewed with the refresh-token endpoint.
    Accounts with multi-factor authentication enabled receive a code on the initial
    authenticate call and complete a follow-up MFA request before a token is issued.
  sources:
  - docs.plextrac.com
flows:
  password_style:
    authenticate: POST /api/v1/authenticate
    mfa: POST /api/v1/authenticate/mfa
    refresh: PUT /api/v1/token
notes:
- The API base URL is the customer's own PlexTrac instance host (the SaaS instance
  is app.plextrac.com); self-hosted/dedicated deployments use their own host.
- Authentication requests are rate limited to 10 per minute.