InstaClaim
    FunzionalitàPrezziChi siamo
    Sviluppatori

    API, SDK, MCP e webhook.

    Piattaforma per sviluppatoriAvvio rapidoAutenticazioneRiferimento APISDKMCPGuida ai webhookErroriImpaginazioneLimiti di velocitàIdempotenzaRegistro delle modifichePolitica di migrazione e controllo delle versioni
    Documentazione API grezzaSpecifica OpenAPI (YAML)Specifica AsyncAPI (YAML)
    1. Pagina iniziale
    2. /
    3. Sviluppatori
    4. /
    5. Autenticazione

    Authentication

    API keys

    API keys are best for customer-owned server automation. Send them with X-API-Key on every request.

    • Prefixes: pk_test_* and pk_live_*
    • Scope model: least-privilege OAuth-style scopes such as claim_projects:read and webhooks:write
    • Management: Settings -> Integrations -> API
    • Safety: rotate exposed keys, revoke unused keys, and use IP allowlists where available

    OAuth

    OAuth is the partner-app model. Approved applications can use Authorization Code with PKCE for user-mediated access and Client Credentials for approved confidential machine-to-machine access.

    Public endpoints:

    • GET /oauth/authorize
    • POST /oauth/token
    • POST /oauth/revoke

    The access token is an opaque credential accepted by the public API as Authorization: Bearer <token>. The API re-checks tenant, plan, app status, and scopes on requests.

    Hosted MCP authorization

    Hosted MCP requests should use bearer credentials scoped to the public API resource. MCP tools map one-to-one to public API scopes, write tools require explicit confirmation inputs, and credentials are not persisted by the MCP process.

    InstaClaim
    Pagina inizialeFunzionalitàPrezziChi siamoArticoliDocumentazioneSviluppatori
    © instaClaim. Tutti i diritti riservati.PrivacyTerminiVisualizza stato dettagliato