Virtru · Authentication Profile

Virtru Authentication

Authentication

The Virtru Data Security Platform (OpenTDF) authenticates all service calls with OpenID Connect (OIDC) / OAuth 2.0. Clients obtain an access token from the platform's configured identity provider (Keycloak by default) and present it as a Bearer token on every Connect/gRPC request to the Policy, Key Access (KAS), Authorization, Entity Resolution and Well-Known services. Key operations additionally use PKCS#11 for HSM-backed key material and ABAC (attribute-based access control) for authorization decisions.

Virtru secures its APIs with oauth2 and openIdConnect across 3 declared security schemes, as derived from its OpenAPI definitions. OAuth 2.0 is offered via the clientCredentials and authorizationCode flow(s).

CompanyCybersecurityData SecurityEncryptionAccess ControlZero TrustData PrivacyOpenTDFKey Management
Methods: oauth2, openIdConnect Schemes: 3 OAuth flows: clientCredentials, authorizationCode API key in:

Security Schemes

OIDC openIdConnect
OAuth2 oauth2
· flows: clientCredentials, authorizationCode
PKCS11 mutualTLS

Source

Authentication Profile

Raw ↑ 
generated: '2026-07-21'
method: searched
source: https://www.virtru.com/developers/get-started
docs: https://opentdf.io/quickstart
description: >-
  The Virtru Data Security Platform (OpenTDF) authenticates all service calls with
  OpenID Connect (OIDC) / OAuth 2.0. Clients obtain an access token from the platform's
  configured identity provider (Keycloak by default) and present it as a Bearer token on
  every Connect/gRPC request to the Policy, Key Access (KAS), Authorization, Entity
  Resolution and Well-Known services. Key operations additionally use PKCS#11 for HSM-backed
  key material and ABAC (attribute-based access control) for authorization decisions.
summary:
  types: [oauth2, openIdConnect]
  api_key_in: []
  oauth2_flows: [clientCredentials, authorizationCode]
schemes:
  - name: OIDC
    type: openIdConnect
    description: >-
      OpenID Connect discovery via the platform Well-Known configuration service. Tokens
      issued by the deployment's IdP (Keycloak by default).
    sources: [docs]
  - name: OAuth2
    type: oauth2
    flows:
      - flow: clientCredentials
        description: Machine-to-machine service auth for SDKs and pipelines.
      - flow: authorizationCode
        description: Interactive user auth for web/console clients.
    sources: [docs]
  - name: PKCS11
    type: mutualTLS
    description: >-
      PKCS#11 HSM interface for KAS key wrapping/unwrapping (hardware-backed key custody).
    sources: [docs]
notes: >-
  The published Connect-protocol OpenAPI specs do not declare securitySchemes inline
  (auth is enforced at the gateway), so this profile is sourced from the OpenTDF
  platform authentication documentation rather than derived from the spec.

Work with this as data

Every security artifact here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for security posture

4 MCP tools reach this
  • find_securityBrowse and filter every security artifact in the catalog.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This security artifact 
curl "https://apis.io/api/v1/security/virtru-authentication"
All security posture 
curl "https://apis.io/api/v1/security?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.