Socket · Authentication Profile

Socket Authentication

Authentication

Socket authenticates REST API requests with an organization API token. The OpenAPI declares two HTTP schemes: bearer and basic. The same token is used either as an Authorization Bearer credential or as the Basic-auth username (with an empty password). Tokens carry fine-grained scopes (see scopes/socket-scopes.yml) and are metered by quota.

Socket secures its APIs with http across 2 declared security schemes, as derived from its OpenAPI definitions.

CompanySecuritySoftware Supply Chain SecurityDependency ScanningSoftware Composition AnalysisVulnerability ManagementOpen Source SecurityDevSecOpsSBOMPackage Analysis
Methods: http Schemes: 2 OAuth flows: API key in:

Security Schemes

bearerAuth http
scheme: bearer
basicAuth http
scheme: basic

Source

Authentication Profile

Raw ↑
generated: '2026-07-21'
method: searched
source: openapi/socket-openapi-original.json
docs: https://docs.socket.dev/reference/authentication
description: >-
  Socket authenticates REST API requests with an organization API token. The OpenAPI declares
  two HTTP schemes: bearer and basic. The same token is used either as an Authorization Bearer
  credential or as the Basic-auth username (with an empty password). Tokens carry fine-grained
  scopes (see scopes/socket-scopes.yml) and are metered by quota.
summary:
  types: [http]
  http_schemes: [bearer, basic]
  api_key_in: []
  oauth2_flows: []
  token_scopes: true
schemes:
- name: bearerAuth
  type: http
  scheme: bearer
  description: 'Authorization: Bearer <ORG_API_TOKEN>'
  sources: [openapi/socket-openapi-original.json]
- name: basicAuth
  type: http
  scheme: basic
  description: HTTP Basic with the API token as the username and an empty password.
  sources: [openapi/socket-openapi-original.json]
token_management:
  docs: https://docs.socket.dev/reference/creating-and-managing-api-tokens
  operations: [postAPIToken, getAPITokens, postAPITokenUpdate, postAPITokensRotate, postAPITokensRevoke]
  scopes_artifact: scopes/socket-scopes.yml

Work with this as data

Every security artifact here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for security posture

4 MCP tools reach this
  • find_securityBrowse and filter every security artifact in the catalog.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This security artifact
curl "https://apis.io/api/v1/security/socket-authentication"
All security posture
curl "https://apis.io/api/v1/security?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no email required.

A second provider on the same verified email joins the account you already have.