Revolut · Authentication Profile

Revolut Authentication

Authentication

Revolut secures its APIs with apiKey and http across 5 declared security schemes, as derived from its OpenAPI definitions.

CompanyFintechPaymentsBankingOpen BankingMerchant AcquiringCryptocurrencyCards
Methods: apiKey, http Schemes: 5 OAuth flows: API key in: header

Security Schemes

AccessToken http
scheme: bearer
AccessToken apiKey
· in: header (X-API-KEY)
Api-Key apiKey
· in: header (Authorization)
JWS apiKey
· in: header (x-jws-signature)
ApiKey apiKey
· in: header (X-Revx-API-Key)

Source

Authentication Profile

Raw ↑
generated: '2026-07-20'
method: derived
source: openapi/revolut-business-openapi.yaml, openapi/revolut-crypto-ramp-openapi.yaml, openapi/revolut-merchant-openapi.yaml,
  openapi/revolut-open-banking-openapi.yaml, openapi/revolut-x-openapi.yaml
summary:
  types:
  - apiKey
  - http
  api_key_in:
  - header
schemes:
- name: AccessToken
  type: http
  scheme: bearer
  description: "Each Business API request must contain an authorization header in the following\
    \ format to make a call: `Bearer <your_access_token>`.\n\nThe access token will be obtained\
    \ the first time you set up your application and has an expiration of 40 minutes. \nDuring\
    \ setup, a `refresh_token` will also be obtained which allows to obtain a new `access_token`.\n\
    \n:::danger\nNever share your client-assertion JWT (JS"
  sources:
  - openapi/revolut-business-openapi.yaml
- name: AccessToken
  type: apiKey
  in: header
  parameter: X-API-KEY
  description: "Each Crypto Ramp API request must contain an authorization header in the following\
    \ format to make a call: `X-API-KEY: {your_API_key}`. \n\nBefore you start, make sure that\
    \ you have the correct API key. For more information, see the **Get started** guides: [Integrate\
    \ with Revolut Ramp -> 2. Get Partner keys](https://developer.revolut.com/docs/guides/crypto-ramp/get-started/integrate-with-revolut-ramp"
  sources:
  - openapi/revolut-crypto-ramp-openapi.yaml
- name: Api-Key
  type: apiKey
  in: header
  parameter: Authorization
  description: |-
    Each Merchant API request must contain an authorization header in the following format:

    ```
    'Authorization: Bearer <yourSecretApiKey>'
    ```

    To use this API, you need to generate API keys from your Revolut Business account. The Secret key is used in the authorization header for all server calls, while the Public key is provided with payment methods at checkout.

    :::info
    For detailed instructions o
  sources:
  - openapi/revolut-merchant-openapi.yaml
  - openapi/revolut-open-banking-openapi.yaml
- name: JWS
  type: apiKey
  in: header
  parameter: x-jws-signature
  description: |-
    Open Banking API Payment requests additionally require a JSON Web Signature (JWS) which needs to be added to the header of the request.
    The JWS signature must be obtained using the full content of the payload.
  sources:
  - openapi/revolut-open-banking-openapi.yaml
- name: ApiKey
  type: apiKey
  in: header
  parameter: X-Revx-API-Key
  description: "The [API key](https://developer.revolut.com/docs/api/revolut-x-crypto-exchange#api-key)\
    \ obtained from the [Revolut X web app](https://exchange.revolut.com/).\nIt takes the form\
    \ of a 64-character alphanumeric string, and must be provided with other authentication\
    \ headers.\n\nA sample API key might look like this: \n```sh\nM1VKFtwB0M9C9QJO7goPlwrOytrJsSNE19txsmpsWIKz7xYu3f8aNucIyynAhYBy\n\
    ```\n\nEach API key"
  sources:
  - openapi/revolut-x-openapi.yaml

Work with this as data

Every security artifact here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for security posture

4 MCP tools reach this
  • find_securityBrowse and filter every security artifact in the catalog.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This security artifact
curl "https://apis.io/api/v1/security/revolut-authentication"
All security posture
curl "https://apis.io/api/v1/security?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

A second provider on the same verified email joins the account you already have.