Revolut · Authentication Profile
Revolut Authentication
Authentication
Revolut secures its APIs with apiKey and http across 5 declared security schemes, as derived from its OpenAPI definitions.
CompanyFintechPaymentsBankingOpen BankingMerchant AcquiringCryptocurrencyCards
Methods: apiKey, http
Schemes: 5
OAuth flows:
API key in: header
Security Schemes
AccessToken http
scheme: bearer
AccessToken apiKey
· in: header (X-API-KEY)
Api-Key apiKey
· in: header (Authorization)
JWS apiKey
· in: header (x-jws-signature)
ApiKey apiKey
· in: header (X-Revx-API-Key)
Source
Authentication Profile
generated: '2026-07-20'
method: derived
source: openapi/revolut-business-openapi.yaml, openapi/revolut-crypto-ramp-openapi.yaml, openapi/revolut-merchant-openapi.yaml,
openapi/revolut-open-banking-openapi.yaml, openapi/revolut-x-openapi.yaml
summary:
types:
- apiKey
- http
api_key_in:
- header
schemes:
- name: AccessToken
type: http
scheme: bearer
description: "Each Business API request must contain an authorization header in the following\
\ format to make a call: `Bearer <your_access_token>`.\n\nThe access token will be obtained\
\ the first time you set up your application and has an expiration of 40 minutes. \nDuring\
\ setup, a `refresh_token` will also be obtained which allows to obtain a new `access_token`.\n\
\n:::danger\nNever share your client-assertion JWT (JS"
sources:
- openapi/revolut-business-openapi.yaml
- name: AccessToken
type: apiKey
in: header
parameter: X-API-KEY
description: "Each Crypto Ramp API request must contain an authorization header in the following\
\ format to make a call: `X-API-KEY: {your_API_key}`. \n\nBefore you start, make sure that\
\ you have the correct API key. For more information, see the **Get started** guides: [Integrate\
\ with Revolut Ramp -> 2. Get Partner keys](https://developer.revolut.com/docs/guides/crypto-ramp/get-started/integrate-with-revolut-ramp"
sources:
- openapi/revolut-crypto-ramp-openapi.yaml
- name: Api-Key
type: apiKey
in: header
parameter: Authorization
description: |-
Each Merchant API request must contain an authorization header in the following format:
```
'Authorization: Bearer <yourSecretApiKey>'
```
To use this API, you need to generate API keys from your Revolut Business account. The Secret key is used in the authorization header for all server calls, while the Public key is provided with payment methods at checkout.
:::info
For detailed instructions o
sources:
- openapi/revolut-merchant-openapi.yaml
- openapi/revolut-open-banking-openapi.yaml
- name: JWS
type: apiKey
in: header
parameter: x-jws-signature
description: |-
Open Banking API Payment requests additionally require a JSON Web Signature (JWS) which needs to be added to the header of the request.
The JWS signature must be obtained using the full content of the payload.
sources:
- openapi/revolut-open-banking-openapi.yaml
- name: ApiKey
type: apiKey
in: header
parameter: X-Revx-API-Key
description: "The [API key](https://developer.revolut.com/docs/api/revolut-x-crypto-exchange#api-key)\
\ obtained from the [Revolut X web app](https://exchange.revolut.com/).\nIt takes the form\
\ of a 64-character alphanumeric string, and must be provided with other authentication\
\ headers.\n\nA sample API key might look like this: \n```sh\nM1VKFtwB0M9C9QJO7goPlwrOytrJsSNE19txsmpsWIKz7xYu3f8aNucIyynAhYBy\n\
```\n\nEach API key"
sources:
- openapi/revolut-x-openapi.yaml
Work with this as data
Every security artifact here is available over the APIs.io API and to AI agents over MCP.
MCP server
One button, every client — Claude, Cursor, VS Code and the rest.
https://apis.io/mcp
Tools for security posture
4 MCP tools reach this
find_securityBrowse and filter every security artifact in the catalog.apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.resolveTurn a domain, URL or GitHub org into the provider it belongs to.find_cohortsEvery scored population of providers in the catalog.
Call it yourself
curl for this page
This security artifact
curl "https://apis.io/api/v1/security/revolut-authentication"
All security posture
curl "https://apis.io/api/v1/security?limit=25"
Discovery needs no key. Ratings and market analysis are Pro.
Get an API key
Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.
A second provider on the same verified email joins the account you already have.