Turnitin · Authentication Profile

Turnitin Authentication

Authentication

Turnitin secures its APIs with apiKey across 1 declared security scheme, as derived from its OpenAPI definitions.

CompanyEducationEdTechAcademic IntegrityPlagiarism DetectionSimilarityAI DetectionAssessmentResearch IntegrityPublishingLTI

Methods: apiKey Schemes: 1 OAuth flows: API key in:

Security Schemes

tca-api-key apiKey

· in: header ()

Source

Authentication Profile

generated: '2026-07-21'
method: searched
source: >-
  https://developers.turnitin.com/turnitin-core-api and
  https://developers.turnitin.com/turnitin-core-api/faq — the Turnitin Core API
  (TCA) developer guides. No public OpenAPI is available (the API Reference is
  behind a customer login), so this profile is captured from the published
  developer documentation rather than derived from a spec.
api: Turnitin Core API (TCA)
summary:
  types:
    - apiKey
schemes:
  - name: tca-api-key
    type: apiKey
    in: header
    description: >-
      TCA authenticates each request with an API key. An API key exists under an
      "integration instance"; a tenant can have multiple integration instances
      (typically at least one Sandbox and one Production instance). All data
      created within an integration instance is scoped to that instance. The key
      is issued from the Turnitin administrator console for the integration
      instance.
    docs: https://developers.turnitin.com/turnitin-core-api
required_headers:
  - name: X-Turnitin-Integration-Name
    description: >-
      Identifies the integrating platform. Set to the name of your LMS or
      software. Required on TCA requests.
  - name: X-Turnitin-Integration-Version
    description: >-
      The version of your integrating platform/software. Required on TCA
      requests; also used by Turnitin to track integration versions.
notes: >-
  TCA is a RESTful API. Turnitin also supports LTI (Learning Tools
  Interoperability) as a separate integration path
  (https://developers.turnitin.com/learning-tools-interoperability), which uses
  the LTI/OAuth handshake rather than the TCA API key. This profile covers the
  TCA REST surface only.

Work with this as data

Every security artifact here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for security posture

4 MCP tools reach this

find_securityBrowse and filter every security artifact in the catalog.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This security artifact

curl "https://apis.io/api/v1/security/turnitin-authentication"

All security posture

curl "https://apis.io/api/v1/security?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.