Vitally · Authentication Profile

Vitally Authentication

Authentication

Vitally's REST API authenticates with HTTP Basic authentication using a Vitally REST API key as the username and an empty password. Keys are created and managed in the Vitally UI under Settings -> Integrations -> Vitally REST API, where each key has an editable name, a copyable secret token, a copyable Basic Auth header, and per-key regenerate / revoke controls. Multiple keys can coexist for different integrations or environments. The Vitally MCP server authenticates separately with OAuth (see mcp/vitally-mcp.yml).

Vitally secures its APIs with http across 1 declared security scheme, as derived from its OpenAPI definitions.

CompanyCustomer SuccessSoftware-as-a-ServiceCRMNPSSurveysAnalyticsArtificial Intelligence
Methods: http Schemes: 1 OAuth flows: API key in: header

Security Schemes

basicAuth http
scheme: basic · in: header ()

Source

Authentication Profile

Raw ↑
generated: '2026-07-21'
method: searched
source: https://docs.vitally.io/en/articles/9880649-rest-api-overview
docs: https://docs.vitally.io/en/articles/9880649-rest-api-overview
description: >-
  Vitally's REST API authenticates with HTTP Basic authentication using a
  Vitally REST API key as the username and an empty password. Keys are created
  and managed in the Vitally UI under Settings -> Integrations -> Vitally REST
  API, where each key has an editable name, a copyable secret token, a copyable
  Basic Auth header, and per-key regenerate / revoke controls. Multiple keys can
  coexist for different integrations or environments. The Vitally MCP server
  authenticates separately with OAuth (see mcp/vitally-mcp.yml).
summary:
  types: [http]
  http_schemes: [basic]
  api_key_in: [header]
  oauth2_flows: []
schemes:
  - name: basicAuth
    type: http
    scheme: basic
    in: header
    header: Authorization
    format: 'Authorization: Basic base64(<api_key>:)'
    description: >-
      Basic auth with the REST API key as the username and an empty password.
      The docs also show the pre-computed header form, e.g.
      'Authorization: Basic c2VjcmV0X2tleTo='.
    sources:
      - openapi/vitally-rest-openapi.yml
key_management:
  location: 'Settings -> Integrations -> Vitally REST API (Quick Jump: Cmd/Alt + j)'
  multiple_keys: true
  rotation: Keys can be rolled (regenerated) or revoked individually.
related:
  mcp_oauth: mcp/vitally-mcp.yml
  data_centers:
    us: https://{subdomain}.rest.vitally.io
    eu: https://rest.vitally-eu.io

Work with this as data

Every security artifact here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for security posture

4 MCP tools reach this
  • find_securityBrowse and filter every security artifact in the catalog.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This security artifact
curl "https://apis.io/api/v1/security/vitally-authentication"
All security posture
curl "https://apis.io/api/v1/security?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no email required.

A second provider on the same verified email joins the account you already have.