generated: '2026-07-18'
method: searched
source: https://developer.codesignal.com/graphql
docs: https://developer.codesignal.com/
summary:
  types: [http]
  http_schemes: [bearer]
  api_key_in: [header]
  oauth2_flows: []
schemes:
- name: bearerAuth
  type: http
  scheme: bearer
  description: >-
    CodeSignal GraphQL and Webhook APIs authenticate with a static API key sent
    as an HTTP Authorization header formatted "Bearer [example key]". API keys
    are provisioned per-company; existing customers request keys via
    support@codesignal.com. Per-key permissions gate operations (insufficient
    scope yields an Access Denied error).
  header: Authorization
  format: Bearer [example key]
  sources: [https://developer.codesignal.com/graphql]
notes: >-
  No OpenAPI is published (the primary surface is GraphQL at
  https://app.codesignal.com/graphql). Webhook deliveries are separately
  verified with an X-CodeSignal-Signature HMAC-SHA256 header over the endpoint
  URL + event type + timestamp using a per-endpoint secret.