Processout Authentication
ProcessOut authenticates every API request with HTTP Basic auth using two project keys: the project ID as the username and a secret API key as the password. Sandbox and production keys are fully separate — the sandbox project ID carries a `test-` prefix and the secret is `key_sandbox_`/`key_test_`; production uses the un-prefixed project ID and a `key_live_` secret. API keys carry per-project permissions set at creation and cannot be edited afterward. The audit-logs endpoint authenticates with the organization ID as username and the API secret as password. Dashboard sign-in additionally supports SAML and OIDC SSO (enterprise).
ProcessOut secures its APIs with http across 1 declared security scheme, as derived from its OpenAPI definitions.
Security Schemes
Source
Authentication Profile
Work with this as data
Every security artifact here is available over the APIs.io API and to AI agents over MCP.