Public Transport Victoria · Authentication Profile

Public Transport Victoria Authentication

Authentication

Public Transport Victoria declares 1 security scheme(s) across its OpenAPI definitions.

CompanyPublic TransportGovernmentTransitTimetablesAustraliaOpen Data

Methods: Schemes: 1 OAuth flows: API key in:

Security Schemes

devid-hmac-signature apiKey

· in: query ()

Source

Authentication Profile

generated: '2026-10-22'
method: searched
source: https://www.vic.gov.au/sites/default/files/2025-06/PTV-Timetable-API-key-and-signature-document.rtf
docs: https://www.vic.gov.au/public-transport-timetable-api
note: The Swagger 2.0 contract declares no securityDefinitions; every operation instead takes `devid` ("Your developer id") and `signature` ("Authentication signature for request") query parameters. Scheme details below are from PTV's key-and-signature document.
schemes:
- name: devid-hmac-signature
  type: apiKey
  in: query
  parameters:
  - name: devid
    description: User Id ("devid") issued by PTV
  - name: signature
    description: HMAC-SHA1 of the request path and query (minus the base URL, including devid), keyed with the API key
  algorithm: HMAC-SHA1
  key_format: The API key consists of a 128bit GUID.
  signature_text: 'The signature value is a HMAC-SHA1 hash of the completed request (minus the base URL but including your user ID, known as "devid") and the API key'
  case_sensitive: true
  provisioning:
    self_service: false
    text: Send an email to APIKeyRequest@ptv.vic.gov.au with "PTV Timetable API – request for key" in the subject line; PTV sends an API key and a user Id by return email.
  key_expiry: If you haven't used the API for over 3 months, we may disable your API key and remove you from the list – but you can always register for a new key if you need one.
  samples: [C#, Java, Objective C, Python]
oauth: false

Work with this as data

Every security artifact here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for security posture

4 MCP tools reach this

find_securityBrowse and filter every security artifact in the catalog.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This security artifact

curl "https://apis.io/api/v1/security/public-transport-victoria-authentication"

All security posture

curl "https://apis.io/api/v1/security?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.