Runware · Authentication Profile

Runware Authentication

Authentication

Runware secures its APIs with apiKey and oauth2 across 2 declared security schemes, as derived from its OpenAPI definitions. OAuth 2.0 is offered via the authorizationCode-pkce flow(s).

CompanyArtificial IntelligenceMachine-LearningInferenceImage-GenerationVideo GenerationAudio GenerationText Generation3D GenerationGenerative AIModelsDeveloper Tools

Methods: apiKey, oauth2 Schemes: 2 OAuth flows: authorizationCode-pkce API key in: header, body

Security Schemes

apiKey apiKey

· in: header ()

mcp-oauth oauth2

scheme: OAuth 2.1 with PKCE

Source

Authentication Profile

generated: '2026-07-21'
method: searched
source: https://runware.ai/docs/platform/authentication ; https://runware.ai/docs/platform/mcp
docs: https://runware.ai/docs/platform/authentication
summary:
  types: [apiKey, oauth2]
  api_key_in: [header, body]
  oauth2_flows: [authorizationCode-pkce]
schemes:
- name: apiKey
  type: apiKey
  description: >-
    API key created in the Runware dashboard. Sent as a Bearer token on HTTP
    requests, or as an authentication task at the start of a WebSocket session.
  in: header
  header: Authorization
  format: Bearer <RUNWARE_API_KEY>
  websocket_note: >-
    WebSocket connections require an initial authentication task carrying the API
    key; the socket stays open until 120 seconds of inactivity.
- name: mcp-oauth
  type: oauth2
  scheme: OAuth 2.1 with PKCE
  description: >-
    The hosted MCP server (mcp.runware.ai) authenticates clients with OAuth 2.1
    + PKCE; the user supplies their Runware API key through a server-rendered
    page rather than passing it directly to the MCP client.
  applies_to: mcp.runware.ai
notes: >-
  No public OpenAPI is published (the API is a single task-based POST endpoint),
  so this profile is searched from the documentation rather than derived from a
  spec. There is no OAuth scope surface on the core inference API — access is
  key-based — so scopes/ is intentionally omitted.

Work with this as data

Every security artifact here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for security posture

4 MCP tools reach this

find_securityBrowse and filter every security artifact in the catalog.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This security artifact

curl "https://apis.io/api/v1/security/runware-authentication"

All security posture

curl "https://apis.io/api/v1/security?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.