Vana · Authentication Profile

Vana Authentication

Authentication

Vana secures its APIs with web3-signed, eip712-grants, and oauth2-oidc across 4 declared security schemes, as derived from its OpenAPI definitions.

CompanyCrypto AiData PortabilityPersonal DataData SovereigntyBlockchainWeb3AgentsArtificial Intelligence

Methods: web3-signed, eip712-grants, oauth2-oidc Schemes: 4 OAuth flows: API key in:

Security Schemes

Web3Signed http

scheme: web3-signed

EIP-712 grants (v2) grant

Context Gateway OAuth/OIDC oauth2

Passport abstraction

Source

Authentication Profile

generated: '2026-07-21'
method: searched
source: https://docs.vana.org/protocol-reference/personal-servers
docs:
  - https://docs.vana.org/protocol-reference/identity
  - https://docs.vana.org/protocol-reference/grants-permissions
  - https://docs.vana.org/applications/context-gateway
summary:
  types: [web3-signed, eip712-grants, oauth2-oidc]
  notes: >-
    No OpenAPI securitySchemes exist to derive from; profile captured from the
    protocol documentation.
schemes:
  - name: Web3Signed
    type: http
    scheme: web3-signed
    header: 'Authorization: Web3Signed <base64url(json)>.<signature>'
    description: >-
      Wallet-based request signing for the Personal Server REST API. The
      payload is alphabetically-sorted JSON with aud (server origin), method,
      uri, bodyHash, iat/exp timestamps, and grantId; the signature is EIP-191
      over the base64url-encoded string, binding it to a specific server,
      method, and path.
  - name: EIP-712 grants (v2)
    type: grant
    description: >-
      Scope-native data-access permissions signed by the user's wallet
      (domain "Vana Data Portability" version 2; message: grantor, granteeId,
      scopes[], expiresAt, nonce) and recorded onchain on Vana L1
      (DataPortabilityPermissions). Verified on every request — existence,
      non-revocation, expiry, scope coverage, and fee payment.
  - name: Context Gateway OAuth/OIDC
    type: oauth2
    description: >-
      ODL's optional commercial layer on top of the protocol offers OAuth/OIDC
      sign-in and USD billing — distinct from the protocol's RPC gateway.
    docs: https://docs.vana.org/applications/context-gateway
  - name: Passport
    type: abstraction
    description: >-
      The protocol's authentication abstraction for users, builders, and
      Personal Servers (wallet-based identity; builder registration via
      DataPortabilityGrantees, server registration via DataPortabilityServers).
    docs: https://docs.vana.org/protocol-reference/identity

Work with this as data

Every security artifact here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for security posture

4 MCP tools reach this

find_securityBrowse and filter every security artifact in the catalog.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This security artifact

curl "https://apis.io/api/v1/security/vana-authentication"

All security posture

curl "https://apis.io/api/v1/security?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.