generated: '2026-07-19'
method: searched
source: https://favro.com/developer
docs: https://favro.com/developer
summary:
  types: [http]
  http_schemes: [basic]
  api_key_in: []
  oauth2_flows: []
schemes:
- name: basicAuth
  type: http
  scheme: basic
  description: >-
    HTTP Basic authentication. The username is the account email address; the
    password is either the account password or, recommended, a per-user API
    token generated from the Favro user profile. API tokens are revocable at
    any time and can be restricted to read-only endpoints.
  credential: email + API token
  token_management: https://favro.com/organization/ (user profile > API tokens)
  read_only_tokens: true
  revocable: true
  sources: [docs]
notes:
- Organization-scoped requests additionally require an organizationId header.
- No OAuth 2.0 / OpenID Connect authorization surface is documented; the API
  is key/token based via HTTP Basic.
- SCIM 1.1 and 2.0 provisioning endpoints use bearer-token authentication
  configured per Favro organization.