Tickwire · Authentication Profile

Tickwire Io Authentication

Authentication

Authentication schemes as published on Tickwire documentation.

Tickwire declares 6 security scheme(s) across its OpenAPI definitions.

CompanyFinanceTradingAPIMetaTrader

Methods: Schemes: 6 OAuth flows: API key in:

Security Schemes

X-Tickwire-Agent-Key apiKey

Authorization Bearer http-bearer

X-API-Key apiKey

auth-token apiKey

auth-token (query) apiKey

api_key (query) apiKey

Source

Authentication Profile

generated: '2026-10-26'
method: searched
generator: extract-docs-artifacts.py (local)
source: https://tickwire.io/docs/authentication.md
sources:
- https://tickwire.io/docs/authentication.md
- https://tickwire.io/docs/reference/oauth.md
- https://tickwire.io/blog/keep-trading-api-keys-safe.md
- https://tickwire.io/docs/errors/api_key_expired.md
description: Authentication schemes as published on Tickwire documentation.
schemes:
- type: apiKey
  name: X-Tickwire-Agent-Key
  evidence: The header forms Tickwire accepts, token kinds, and how to narrow a token's reach.
  location: header
  header: X-Tickwire-Agent-Key
  how_to_obtain: Created under **AI agents > Keys** in the dashboard.
- type: http-bearer
  name: Authorization Bearer
  evidence: 'Every request carries a key or token. We accept each of the forms the APIs we''re compatible with use, so existing clients work unchanged:'
  location: header
  header: Authorization
  how_to_obtain: Created as API keys (`tw_live_`, `tw_ro_`) or Agent keys (`twag_`) in the dashboard.
- type: apiKey
  name: X-API-Key
  evidence: '`X-API-Key` header | `X-API-Key: <key>` | The `/v1` API and terminal routes'
  location: header
  header: X-API-Key
  how_to_obtain: Created under **API keys** in the dashboard.
- type: apiKey
  name: auth-token
  evidence: '`auth-token` header | `auth-token: <token>` | The `/users/current/…` REST API'
  location: header
  header: auth-token
  how_to_obtain: Derived as a scoped token from an API key for browser pages.
- type: apiKey
  name: auth-token (query)
  evidence: Query parameter | `?auth-token=<token>` or `?api_key=<key>` | WebSocket and socket.io connections only, for clients that can't set
    headers (browsers)
  location: query
  header: auth-token
  how_to_obtain: Derived as a scoped token from an API key for browser pages.
- type: apiKey
  name: api_key (query)
  evidence: Query parameter | `?auth-token=<token>` or `?api_key=<key>` | WebSocket and socket.io connections only, for clients that can't set
    headers (browsers)
  location: query
  header: api_key
  how_to_obtain: Derived as a scoped token from an API key for browser pages.
note: OAuth flows are not described with token or authorize URLs; all OAuth endpoints require an X-API-Key header as shown in the OAuth reference
  pages.
docs: https://tickwire.io/docs/authentication.md

Work with this as data

Every security artifact here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for security posture

4 MCP tools reach this

find_securityBrowse and filter every security artifact in the catalog.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This security artifact

curl "https://apis.io/api/v1/security/tickwire-io-authentication"

All security posture

curl "https://apis.io/api/v1/security?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.