Pyth · Authentication Profile

Pyth Authentication

Authentication

Pyth secures its APIs with none and http across 3 declared security schemes, as derived from its OpenAPI definitions.

CompanyCrypto Web3OraclePrice FeedsMarket DataDeFiBlockchainFinancial Data
Methods: none, http Schemes: 3 OAuth flows: API key in:

Security Schemes

HermesPublic none
BenchmarksPublic none
PythProBearer http
scheme: bearer

Source

Authentication Profile

Raw ↑ 
generated: '2026-07-20'
method: searched
source: https://docs.pyth.network/price-feeds/pro/acquire-api-key, docs.pyth.network/SKILL.md
docs: https://docs.pyth.network/price-feeds/pro/acquire-api-key
summary:
  types: [none, http]
  http_schemes: [bearer]
  note: >-
    Read APIs are historically public. Pyth Pro (Lazer) and the MCP/history endpoints use a
    Bearer API key. The Hermes public price API is scheduled to require a Pyth API key from
    2026-08-18.
schemes:
  - name: HermesPublic
    type: none
    applies_to: openapi/pyth-hermes-openapi-original.json
    description: >-
      Hermes REST/SSE endpoints are currently public (rate-limited, no auth in the OpenAPI).
      An API key becomes required 2026-08-18 (see lifecycle/pyth-lifecycle.yml).
  - name: BenchmarksPublic
    type: none
    applies_to: openapi/pyth-benchmarks-openapi-original.json
    description: Benchmarks (historical / TradingView shim) endpoints are public; no securityScheme declared.
  - name: PythProBearer
    type: http
    scheme: bearer
    applies_to: Pyth Pro (Lazer) WebSocket + authenticated HTTP (History/REST) + MCP price tools
    description: >-
      API key issued from the Pyth Terminal (https://pythdata.app -> View your API key), passed as
      `Authorization: Bearer {key}`. In the MCP server it is passed as the `access_token` argument.
      Provider guidance: never embed the key in browser/frontend apps — proxy through your backend.

Work with this as data

Every security artifact here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for security posture

4 MCP tools reach this
  • find_securityBrowse and filter every security artifact in the catalog.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This security artifact 
curl "https://apis.io/api/v1/security/pyth-authentication"
All security posture 
curl "https://apis.io/api/v1/security?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.