Strateos · Authentication Profile

Strateos Authentication

Authentication

Strateos secures its APIs with apiKey, httpSignature, and http across 3 declared security schemes, as derived from its OpenAPI definitions.

CompanyLife SciencesLaboratory AutomationRoboticsCloud LabDrug DiscoveryBiotechnologyAutoprotocolJSON:APIResearch

Methods: apiKey, httpSignature, http Schemes: 3 OAuth flows: API key in: header

Security Schemes

apiKey apiKey

· in: header ()

httpSignature httpSignature

scheme: signature

bearer http

scheme: bearer

Source

Authentication Profile

generated: '2026-07-21'
method: searched
source: >-
  https://developers.strateos.com/docs/developer-settings ;
  https://github.com/strateos/transcriptic (transcriptic/auth.py)
docs: https://developers.strateos.com/docs/developer-settings
summary:
  types:
  - apiKey
  - httpSignature
  - http
  api_key_in:
  - header
  notes: >-
    Strateos issues a per-user API Key from the Developer Settings tab of the user
    administration page after developer access is requested. The official TxPy client
    supports three request-auth mechanisms against the api_root (default
    https://secure.strateos.com).
schemes:
- name: apiKey
  type: apiKey
  in: header
  description: >-
    Per-user email + API token retrieved from Developer Settings, sent to authenticate
    API requests (historically X-User-Email / X-User-Token headers).
  source: https://developers.strateos.com/docs/developer-settings
- name: httpSignature
  type: httpSignature
  scheme: signature
  description: >-
    HTTP Message Signatures (draft-cavage httpsig). TxPy's StrateosSign signs requests
    over the (request-target), Date, and Host headers; write requests additionally sign
    Digest (SHA-256 of the body) and Content-Length, using an RSA secret.
  signed_headers:
  - (request-target)
  - Date
  - Host
  - Digest
  - Content-Length
  source: https://github.com/strateos/transcriptic
- name: bearer
  type: http
  scheme: bearer
  description: >-
    Bearer token placed in the Authorization header (TxPy StrateosBearerAuth) for
    session/JWT-based access.
  source: https://github.com/strateos/transcriptic

Work with this as data

Every security artifact here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for security posture

4 MCP tools reach this

find_securityBrowse and filter every security artifact in the catalog.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This security artifact

curl "https://apis.io/api/v1/security/strateos-authentication"

All security posture

curl "https://apis.io/api/v1/security?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.