Tecton · Authentication Profile

Tecton Authentication

Authentication

Tecton secures its APIs with apiKey across 2 declared security schemes, as derived from its OpenAPI definitions.

CompanyMachine LearningFeature StoreFeature PlatformMLOpsArtificial IntelligenceReal-Time DataSDK
Methods: apiKey Schemes: 2 OAuth flows: API key in: header

Security Schemes

ApiKeyAuth apiKey
· in: header ()
InteractiveLogin sso

Source

Authentication Profile

tecton-authentication.yml Raw ↑
generated: '2026-07-21'
method: searched
source: https://docs.tecton.ai/docs/reading-feature-data/reading-online-features-for-inference-using-the-http-api
docs: https://docs.tecton.ai/docs/security
summary:
  types: [apiKey]
  api_key_in: [header]
  oauth2_flows: []
  notes: >-
    Two authentication surfaces. (1) The FeatureService HTTP API (online inference) is
    authenticated with a Tecton API key presented in the Authorization header using the
    "Tecton-key" scheme. API keys are issued to Service Accounts and governed by
    Tecton's access-control (RBAC) model. (2) The Python SDK and `tecton` CLI authenticate
    interactively via `tecton login` (SSO / identity provider) for humans, and via
    Service Account API keys for automation/CI.
schemes:
  - name: ApiKeyAuth
    type: apiKey
    in: header
    parameter_name: Authorization
    scheme_value: "Tecton-key <API_KEY>"
    bound_to: Service Account
    sources: [https://docs.tecton.ai/docs/reading-feature-data/reading-online-features-for-inference-using-the-http-api]
  - name: InteractiveLogin
    type: sso
    mechanism: "tecton login (browser SSO via configured identity provider)"
    audience: Python SDK + CLI (human users)
    sources: [https://docs.tecton.ai/docs/cli]
access_control:
  model: RBAC
  principals: [User, Service Account]
  docs: https://docs.tecton.ai/docs/security