Tabcorp · Authentication Profile

Tabcorp Authentication

Authentication

Tabcorp secures its APIs with oauth2 across 1 declared security scheme, as derived from its OpenAPI definitions.

CompanyWageringBettingGamingMediaRacingAustralia

Methods: oauth2 Schemes: 1 OAuth flows: API key in:

Security Schemes

TAB Digital API OAuth 2.0 oauth2

scheme: bearer · flows: , , ,

Source

Authentication Profile

generated: '2026-10-22'
method: searched
source: https://web.archive.org/web/20170219083237/https://studio.tab.com.au/intro/authentication.html
docs: https://studio.tab.com.au/intro/authentication.html
note: "Live TAB Studio docs (www.studio.tab.com.au) answered 403 Akamai Access Denied (geo-restricted) on 2026-10-22; content read from the Internet Archive snapshot of the provider's own docs, captured February 2017, and may be out of date."
summary:
  types:
  - oauth2
schemes:
- name: TAB Digital API OAuth 2.0
  type: oauth2
  scheme: bearer
  description: "Applicants are issued a client_id and client_secret; the Digital API uses OAuth 2.0 and credentials are exchanged for a short-lived Bearer token sent as 'Authorization: Bearer <token>'. Token responses show expires_in: 10800 and token_type: bearer."
  tokenUrl: https://api.beta.tab.com.au/oauth/token
  authorizationUrl: https://api.beta.tab.com.au/oauth/authorize
  grant_types:
  - client_credentials
  - password
  - authorization_code
  - refresh_token
  flows:
    client_credentials: "Informational use only, for applications that only need non-customer data e.g. racing feeds, odds and results."
    password: "Single customer API access; requires TAB account number and password (or account_pin) plus brand=TAB; API support must enable password grant for the account."
    authorization_code: "Delegated authorisation (3-legged OAuth) for applications acting on behalf of any TAB customer; customer is redirected to tab.com.au; client_id must be configured for this access."
    refresh_token: "Post API credentials with refresh_token to receive a new access_token with the same scopes."
  sources:
  - https://web.archive.org/web/20170219083237/https://studio.tab.com.au/intro/authentication.html
  - https://web.archive.org/web/20170219083239/https://studio.tab.com.au/intro/authentication/client-credentials-grant.html
  - https://web.archive.org/web/20170219083241/https://studio.tab.com.au/intro/authentication/password-grant.html
  - https://web.archive.org/web/20170219083244/https://studio.tab.com.au/intro/authentication/auth-code-grant.html
  - https://web.archive.org/web/20170219083250/https://studio.tab.com.au/intro/authentication/refresh-tokens.html

Work with this as data

Every security artifact here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for security posture

4 MCP tools reach this

find_securityBrowse and filter every security artifact in the catalog.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This security artifact

curl "https://apis.io/api/v1/security/tabcorp-authentication"

All security posture

curl "https://apis.io/api/v1/security?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.