Versapay · Authentication Profile

Versapay Authentication

Authentication

Versapay secures its APIs with http, oauth2, and openIdConnect across 4 declared security schemes, as derived from its OpenAPI definitions. OAuth 2.0 is offered via the authorizationCode, clientCredentials, and password flow(s).

PaymentsCanadaAccounts ReceivableAR AutomationOrder-to-CashPayment AcceptancePayment ProcessingB2B PaymentsInvoicingE-CommerceCard PresentWebhook

Methods: http, oauth2, openIdConnect Schemes: 4 OAuth flows: authorizationCode, clientCredentials, password API key in:

Security Schemes

apiTokenKeyBasic http

scheme: basic

jwtBearer http

scheme: bearer

oauth2 oauth2

· flows: , ,

openIdConnect openIdConnect

Source

Authentication Profile

generated: '2026-07-24'
method: searched
source: https://developers.versapay.com/
docs: https://developers.versapay.com/
notes: >-
  The published OpenAPI specs do not declare components.securitySchemes, so this
  profile is searched from the docs Authentication section plus the live OAuth/OIDC
  discovery document at secure.versapay.com/.well-known/openid-configuration.
summary:
  types: [http, oauth2, openIdConnect]
  http_schemes: [basic, bearer]
  oauth2_flows: [authorizationCode, clientCredentials, password]
schemes:
  - name: apiTokenKeyBasic
    type: http
    scheme: basic
    description: >-
      Primary API auth. HTTPS Basic access authentication supplying the account's
      API Token as the username and API Key as the password (curl -u "Token:Key").
      Credentials are generated/disabled in the account console at
      https://secure.versapay.com/account (UAT: https://uat.versapay.com/account).
    sources: [https://developers.versapay.com/]
  - name: jwtBearer
    type: http
    scheme: bearer
    bearerFormat: JWT
    description: Alternative auth via HTTPS Bearer authentication with a JWT token.
    sources: [https://developers.versapay.com/]
  - name: oauth2
    type: oauth2
    description: >-
      Doorkeeper OAuth2/OIDC server on secure.versapay.com. Scopes: receivables,
      payables, read, write, update.
    flows:
      authorizationCode:
        authorizationUrl: https://secure.versapay.com/oauth/authorize
        tokenUrl: https://secure.versapay.com/oauth/token
        scopes: [receivables, payables, read, write, update]
      clientCredentials:
        tokenUrl: https://secure.versapay.com/oauth/token
        scopes: [receivables, payables, read, write, update]
      password:
        tokenUrl: https://secure.versapay.com/oauth/token
        scopes: [receivables, payables, read, write, update]
    sources: [https://secure.versapay.com/.well-known/openid-configuration]
  - name: openIdConnect
    type: openIdConnect
    openIdConnectUrl: https://secure.versapay.com/.well-known/openid-configuration
    description: OIDC discovery available; id_token signed RS256, userinfo + jwks endpoints published.
    sources: [https://secure.versapay.com/.well-known/openid-configuration]

Work with this as data

Every security artifact here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for security posture

4 MCP tools reach this

find_securityBrowse and filter every security artifact in the catalog.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This security artifact

curl "https://apis.io/api/v1/security/versapay-authentication"

All security posture

curl "https://apis.io/api/v1/security?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.