Revolut · Authentication Profile

Revolut Authentication

Authentication

Revolut secures its APIs with apiKey and http across 5 declared security schemes, as derived from its OpenAPI definitions.

CompanyFintechPaymentsBankingOpen BankingMerchant AcquiringCryptocurrencyCards
Methods: apiKey, http Schemes: 5 OAuth flows: API key in: header

Security Schemes

AccessToken http
scheme: bearer
AccessToken apiKey
· in: header (X-API-KEY)
Api-Key apiKey
· in: header (Authorization)
JWS apiKey
· in: header (x-jws-signature)
ApiKey apiKey
· in: header (X-Revx-API-Key)

Source

Authentication Profile

Raw ↑
generated: '2026-07-20'
method: derived
source: openapi/revolut-business-openapi.yaml, openapi/revolut-crypto-ramp-openapi.yaml, openapi/revolut-merchant-openapi.yaml,
  openapi/revolut-open-banking-openapi.yaml, openapi/revolut-x-openapi.yaml
summary:
  types:
  - apiKey
  - http
  api_key_in:
  - header
schemes:
- name: AccessToken
  type: http
  scheme: bearer
  description: "Each Business API request must contain an authorization header in the following\
    \ format to make a call: `Bearer <your_access_token>`.\n\nThe access token will be obtained\
    \ the first time you set up your application and has an expiration of 40 minutes. \nDuring\
    \ setup, a `refresh_token` will also be obtained which allows to obtain a new `access_token`.\n\
    \n:::danger\nNever share your client-assertion JWT (JS"
  sources:
  - openapi/revolut-business-openapi.yaml
- name: AccessToken
  type: apiKey
  in: header
  parameter: X-API-KEY
  description: "Each Crypto Ramp API request must contain an authorization header in the following\
    \ format to make a call: `X-API-KEY: {your_API_key}`. \n\nBefore you start, make sure that\
    \ you have the correct API key. For more information, see the **Get started** guides: [Integrate\
    \ with Revolut Ramp -> 2. Get Partner keys](https://developer.revolut.com/docs/guides/crypto-ramp/get-started/integrate-with-revolut-ramp"
  sources:
  - openapi/revolut-crypto-ramp-openapi.yaml
- name: Api-Key
  type: apiKey
  in: header
  parameter: Authorization
  description: |-
    Each Merchant API request must contain an authorization header in the following format:

    ```
    'Authorization: Bearer <yourSecretApiKey>'
    ```

    To use this API, you need to generate API keys from your Revolut Business account. The Secret key is used in the authorization header for all server calls, while the Public key is provided with payment methods at checkout.

    :::info
    For detailed instructions o
  sources:
  - openapi/revolut-merchant-openapi.yaml
  - openapi/revolut-open-banking-openapi.yaml
- name: JWS
  type: apiKey
  in: header
  parameter: x-jws-signature
  description: |-
    Open Banking API Payment requests additionally require a JSON Web Signature (JWS) which needs to be added to the header of the request.
    The JWS signature must be obtained using the full content of the payload.
  sources:
  - openapi/revolut-open-banking-openapi.yaml
- name: ApiKey
  type: apiKey
  in: header
  parameter: X-Revx-API-Key
  description: "The [API key](https://developer.revolut.com/docs/api/revolut-x-crypto-exchange#api-key)\
    \ obtained from the [Revolut X web app](https://exchange.revolut.com/).\nIt takes the form\
    \ of a 64-character alphanumeric string, and must be provided with other authentication\
    \ headers.\n\nA sample API key might look like this: \n```sh\nM1VKFtwB0M9C9QJO7goPlwrOytrJsSNE19txsmpsWIKz7xYu3f8aNucIyynAhYBy\n\
    ```\n\nEach API key"
  sources:
  - openapi/revolut-x-openapi.yaml