Receeve · Authentication Profile

Receeve Authentication

Authentication

Receeve secures its APIs with oauth2 and apiKey across 2 declared security schemes, as derived from its OpenAPI definitions. OAuth 2.0 is offered via the clientCredentials flow(s).

CompanyDebt CollectionReceivables ManagementDebt ServicingCollectionsFintechPaymentsWebhooksFinancial ServicesDunning
Methods: oauth2, apiKey Schemes: 2 OAuth flows: clientCredentials API key in: header

Security Schemes

oauth2_client_credentials oauth2
api_key apiKey
· in: header (Authorization)

Source

Authentication Profile

Raw ↑ 
generated: '2026-07-21'
method: searched
source: openapi/receeve-openapi-original.yml
docs: https://docs.indebted.co/docs/receive/integration/use-cases/authentication-use-case
summary:
  types:
  - oauth2
  - apiKey
  api_key_in:
  - header
  oauth2_flows:
  - clientCredentials
  notes: >-
    Authentication is a two-step OAuth2 client-credentials flow. The OpenAPI spec
    declares a single apiKey security scheme (Authorization header) because the
    same Authorization header carries the issued Bearer token on every call; the
    token itself is obtained from the getOauth2Token operation using HTTP Basic
    credentials.
schemes:
- name: oauth2_client_credentials
  type: oauth2
  flow: clientCredentials
  token_operation: getOauth2Token
  token_endpoint: https://api.receive-demo.com/v1/oauth2/token
  token_request_auth: >-
    HTTP Basic — Authorization: Basic base64(client_id:client_secret),
    Content-Type: application/x-www-form-urlencoded
  token_response_fields:
  - access_token
  - expires_in
  - token_type
  token_ttl_seconds: 3600
  token_type: Bearer
  bearer_header: 'Authorization: Bearer <access_token>'
  reusable: true
  sources:
  - openapi/receeve-openapi-original.yml
  - https://docs.indebted.co/docs/receive/integration/use-cases/authentication-use-case
- name: api_key
  type: apiKey
  in: header
  parameter: Authorization
  description: >-
    The Authorization header on all resource operations carries the OAuth2 Bearer
    access token obtained from getOauth2Token (not a static long-lived key).
  sources:
  - openapi/receeve-openapi-original.yml