ThetaRay · Authentication Profile

Thetaray Authentication

Authentication

ThetaRay secures its APIs with oauth2 across 1 declared security scheme, as derived from its OpenAPI definitions. OAuth 2.0 is offered via the authorizationCode and clientCredentials flow(s).

Anti-Money LaunderingFinancial CrimeTransaction MonitoringSanctions ScreeningKYCRegTechRisk AssessmentArtificial IntelligenceBankingFintechPaymentsComplianceMCP

Methods: oauth2 Schemes: 1 OAuth flows: authorizationCode, clientCredentials API key in:

Security Schemes

RedoclyPortalOAuth2 oauth2

· flows: authorizationCode, clientCredentials

Source

Authentication Profile

generated: '2026-08-05'
method: probed
source: https://api.thetaray.com/.well-known/oauth-authorization-server
raw: well-known/thetaray-oauth-authorization-server.json
scope_note: >-
  Derived entirely from the anonymous RFC 8414 metadata document that api.thetaray.com serves. It
  governs access to the ThetaRay developer portal and its MCP endpoint (both Redocly Cloud). The
  authentication model of ThetaRay's AML transaction-monitoring and screening product API is NOT
  described here — that contract sits behind the customer SSO wall and was not retrievable. No
  OpenAPI securitySchemes were available to derive from.
summary:
  types:
  - oauth2
  oauth2_flows:
  - authorizationCode
  - clientCredentials
  refresh_tokens: true
  pkce: true
  pkce_methods:
  - S256
  dynamic_client_registration: true
  api_key_in: []
schemes:
- name: RedoclyPortalOAuth2
  type: oauth2
  issuer: https://auth.cloud.redocly.com
  jwks_uri: https://auth.cloud.redocly.com/.well-known/jwks.json
  registration_endpoint: https://api.thetaray.com/_mcp/register
  token_endpoint_auth_methods:
  - none
  id_token_signing_alg_values:
  - RS256
  subject_types:
  - public
  client_id_metadata_document_supported: true
  flows:
  - flow: authorizationCode
    authorizationUrl: https://api.thetaray.com/_mcp/oauth2/auth
    tokenUrl: https://api.thetaray.com/_mcp/oauth2/token-portal
    scopes:
    - openid
    - profile
    - email
    - offline_access
  - flow: clientCredentials
    tokenUrl: https://api.thetaray.com/_mcp/oauth2/token-portal
  sources:
  - well-known/thetaray-oauth-authorization-server.json
protected_resources:
- resource: https://api.thetaray.com/mcp
  bearer_methods:
  - header
  token_types:
  - Bearer
  source: well-known/thetaray-oauth-protected-resource-mcp.json
gated_surfaces:
- url: https://api.thetaray.com/openapi
  status: 302
  to: https://auth.cloud.redocly.com/oidc/oauth2/auth
  note: developer portal / API reference requires a ThetaRay customer account
- url: http://docs.thetaray.com/
  status: 302
  to: https://login.microsoftonline.com/f176e0ee-1f77-4c82-94c8-fb98d2d81117/saml2
  note: documentation host requires Microsoft Entra SAML sign-in
x-evidence:
- fetched: '2026-08-05'
  url: https://api.thetaray.com/.well-known/oauth-authorization-server
  http_status: 200
  content_type: application/json

Work with this as data

Every security artifact here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for security posture

4 MCP tools reach this

find_securityBrowse and filter every security artifact in the catalog.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This security artifact

curl "https://apis.io/api/v1/security/thetaray-authentication"

All security posture

curl "https://apis.io/api/v1/security?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.