Supermetrics · Authentication Profile

Supermetrics Authentication

Authentication

Supermetrics secures its APIs with http, oauth2, and openIdConnect across 4 declared security schemes, as derived from its OpenAPI definitions. OAuth 2.0 is offered via the authorizationCode flow(s).

CompanyMarketingAnalyticsAdvertisingDataReportingBusiness IntelligenceData Warehouse

Methods: http, oauth2, openIdConnect Schemes: 4 OAuth flows: authorizationCode API key in: header, query

Security Schemes

ApiKeyBearer http

scheme: bearer

ApiKeyQuery apiKey

· in: query ()

OAuth2 oauth2

· flows: authorizationCode

OpenIDConnect openIdConnect

Source

Authentication Profile

generated: '2026-07-21'
method: searched
source: https://docs.supermetrics.com/apidocs/authentication.md
docs: https://docs.supermetrics.com/apidocs/authentication
oauth_docs: https://supermetrics.com/docs/product-api-oauth/
discovery:
  openid_configuration: https://api.supermetrics.com/.well-known/openid-configuration
  oauth_authorization_server: https://api.supermetrics.com/.well-known/oauth-authorization-server
summary:
  types: [http, oauth2, openIdConnect]
  api_key_in: [header, query]
  oauth2_flows: [authorizationCode]
schemes:
- name: ApiKeyBearer
  type: http
  scheme: bearer
  description: >-
    Access to the Supermetrics API is through an API key plus a valid Supermetrics
    API license. Preferred transport is the Authorization header
    "Authorization: Bearer <api key>"; an api_key query/body parameter is also accepted.
  sources: [docs/apidocs/authentication]
- name: ApiKeyQuery
  type: apiKey
  in: query
  parameter_name: api_key
  description: API key passed as the api_key request parameter (header form preferred).
  sources: [docs/apidocs/authentication]
- name: OAuth2
  type: oauth2
  description: >-
    Full OAuth2 / OIDC surface advertised at api.supermetrics.com. Supports
    authorization_code and refresh_token grants, PKCE (S256), Dynamic Client
    Registration (RFC 7591), and the client_id metadata document. Token endpoint auth
    methods: client_secret_post, client_secret_basic, none.
  flows:
  - flow: authorizationCode
    authorizationUrl: https://api.supermetrics.com/oauth/authorize
    tokenUrl: https://api.supermetrics.com/oauth/token
    refreshUrl: https://api.supermetrics.com/oauth/token
    registrationUrl: https://api.supermetrics.com/oauth/register
    revocationUrl: https://api.supermetrics.com/oauth/revoke
    scope_count: 13
  sources: [well-known/supermetrics-openid-configuration.json]
- name: OpenIDConnect
  type: openIdConnect
  openIdConnectUrl: https://api.supermetrics.com/.well-known/openid-configuration
  id_token_signing_alg: [RS256]
  userinfo_endpoint: https://api.supermetrics.com/oauth/userinfo
  jwks_uri: https://api.supermetrics.com/oauth/certs
  sources: [well-known/supermetrics-openid-configuration.json]

Work with this as data

Every security artifact here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for security posture

4 MCP tools reach this

find_securityBrowse and filter every security artifact in the catalog.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This security artifact

curl "https://apis.io/api/v1/security/supermetrics-authentication"

All security posture

curl "https://apis.io/api/v1/security?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no email required.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.