Threatconnect Authentication

generated: '2026-10-14'
method: searched
generator: extract-docs-artifacts.py (local)
source: https://docs.threatconnect.com/en/latest/tcex/authorization.html
sources:
- https://docs.threatconnect.com/en/latest/tcex/authorization.html
- https://docs.threatconnect.com/en/latest/getting_started.html
- https://docs.threatconnect.com/en/latest/rest_api/quick_start.html
- https://docs.threatconnect.com/en/latest/python/quick_start.html
description: Authentication methods for ThreatConnect API
schemes:
- type: apiKey
  name: TC-Token
  evidence: The value of the Authorization header must be in the format TC-Token $API_TOKEN , where $API_TOKEN is the value of your API token.
  location: header
  header: Authorization
  how_to_obtain: Generate an API token via the ThreatConnect UI (Org Settings → Create API User or Edit API User and click GENERATE TOKEN).
- type: hmac
  name: HMAC
  evidence: HMAC authorization is typically only used for running Apps outside the ThreatConnect platform. Generation of the authorization headers
    when using HMAC will utilize the api_access_id and api_secret_key arguments.
  location: header
  how_to_obtain: Provide the API Access ID and API Secret Key in the install.json configuration file.
docs: https://docs.threatconnect.com/en/latest/tcex/authorization.html