Public · Authentication Profile

Public Authentication

Authentication

Public secures its APIs with http and oauth2 across 2 declared security schemes, as derived from its OpenAPI definitions. OAuth 2.0 is offered via the authorizationCode flow(s).

CompanyConsumerInvestingBrokerageTradingFintechStocksOptionsCryptoMarket DataAgenticMCP

Methods: http, oauth2 Schemes: 2 OAuth flows: authorizationCode API key in:

Security Schemes

PersonalAccessToken http

scheme: bearer

OAuth2 oauth2

Source

Authentication Profile

generated: '2026-07-20'
method: searched
source: https://public.com/api/docs/quickstart
docs: https://public.com/api/docs/resources/authorization/create-personal-access-token
summary:
  types: [http, oauth2]
  http_schemes: [bearer]
  bearer_format: JWT
  oauth2_flows: [authorizationCode]
schemes:
- name: PersonalAccessToken
  type: http
  scheme: bearer
  bearer_format: JWT
  description: >-
    Primary auth for the direct Trading API. A long-lived, revocable secret key
    is generated in account settings (https://public.com/settings/v2/api), then
    exchanged for a short-lived access-token JWT via
    POST https://api.public.com/userapiauthservice/personal/access-tokens
    (body: {secret, validityInMinutes}; default validity 15 min). The returned
    accessToken is sent as `Authorization: Bearer <token>` on gateway calls under
    https://api.public.com/userapigateway/trading/.
  sources: [https://public.com/api/docs/quickstart]
- name: OAuth2
  type: oauth2
  description: >-
    Used by the hosted MCP server (mcp.public.com) for AI-assistant connectors
    (Claude, ChatGPT). Authorization server:
    https://prod-api.154310543964.hellopublic.com/userapiauthservice/oauth2.
    Scopes: trading.read, trading.write, marketdata, openid (see scopes/).
  sources: [https://mcp.public.com/.well-known/oauth-protected-resource]

Work with this as data

Every security artifact here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for security posture

4 MCP tools reach this

find_securityBrowse and filter every security artifact in the catalog.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This security artifact

curl "https://apis.io/api/v1/security/public-authentication"

All security posture

curl "https://apis.io/api/v1/security?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.