Toucan · Authentication Profile

Toucan Authentication

Authentication

Toucan secures its APIs with apiKey and web3-wallet across 2 declared security schemes, as derived from its OpenAPI definitions.

CompanyPlanetary HealthCarbon CreditsClimateWeb3Carbon MarketsTokenizationGraphQLBiochar

Methods: apiKey, web3-wallet Schemes: 2 OAuth flows: API key in:

Security Schemes

graphApiKey apiKey

· in: path ()

walletSigner web3-wallet

Source

Authentication Profile

generated: '2026-07-21'
method: searched
source: https://docs.toucan.earth/developers/subgraph
docs: https://docs.toucan.earth/developers/sdk/quickstart
summary:
  types: [apiKey, web3-wallet]
  notes: >-
    Toucan has no proprietary REST auth. Its two developer surfaces authenticate
    differently: (1) the Toucan Subgraphs are served through The Graph's gateway
    and require a Graph API key in the request path, generated at
    https://thegraph.com/studio/apikeys/ after creating an account; (2) smart
    contract interactions (directly or via the toucan-sdk ToucanClient) are
    authorized by an EVM wallet signer (e.g. ethers.js Signer) — a provider alone
    gives read-only access, a signer enables writes.
schemes:
  - name: graphApiKey
    type: apiKey
    in: path
    description: >-
      The Graph gateway API key embedded in the subgraph endpoint URL:
      https://gateway-arbitrum.network.thegraph.com/api/[api-key]/subgraphs/id/<subgraph-id>
    docs: https://thegraph.com/studio/apikeys/
    surfaces: [subgraphs]
  - name: walletSigner
    type: web3-wallet
    description: >-
      EVM wallet signer/provider (ethers.js ^5.6.4 recommended; wagmi <1.0
      supported) used by the toucan-sdk ToucanClient for contract reads and
      writes on Celo, Polygon, and Base networks.
    docs: https://docs.toucan.earth/developers/sdk/quickstart
    surfaces: [smart-contracts, sdk]

Work with this as data

Every security artifact here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for security posture

4 MCP tools reach this

find_securityBrowse and filter every security artifact in the catalog.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This security artifact

curl "https://apis.io/api/v1/security/toucan-authentication"

All security posture

curl "https://apis.io/api/v1/security?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.