ProjectDiscovery · Authentication Profile

Projectdiscovery Authentication

Authentication

ProjectDiscovery secures its APIs with apiKey across 1 declared security scheme, as derived from its OpenAPI definitions.

CompanyCybersecuritySecurityVulnerability ScanningAttack Surface ManagementVulnerability ManagementAsset DiscoveryDevSecOpsNucleiAPI
Methods: apiKey Schemes: 1 OAuth flows: API key in: header

Security Schemes

X-API-Key apiKey
· in: header (X-API-Key)

Source

Authentication Profile

Raw ↑ 
generated: '2026-07-20'
method: searched
source: openapi/projectdiscovery-openapi-original.yml
docs: https://docs.projectdiscovery.io/api-reference/introduction
summary:
  types:
  - apiKey
  api_key_in:
  - header
notes: >-
  The ProjectDiscovery Cloud Platform (PDCP) API authenticates every request
  with an API key sent in the custom X-API-Key request header. Keys are created
  and rotated from the cloud dashboard (Settings > API Key) or via the
  /v1/user/apikey endpoints. All calls must be made over HTTPS. A small number
  of leak-statistics endpoints (/v1/leaks/stats/domain, /v1/leaks/stats/email)
  are public and require no authentication.
schemes:
- name: X-API-Key
  type: apiKey
  in: header
  parameter: X-API-Key
  docs: https://cloud.projectdiscovery.io/settings/api-key
  sources:
  - openapi/projectdiscovery-openapi-original.yml