generated: '2026-10-18'
method: searched
generator: extract-docs-artifacts.py (local)
source: https://plainrouter.com/docs/api/authentication
sources:
- https://plainrouter.com/docs/api/authentication
- https://plainrouter.com/auth.md
- https://plainrouter.com/api/v1/sandbox.md
- https://plainrouter.com/api/v1/sandbox
description: Authentication methods for Plainrouter APIs
schemes:
- type: http-bearer
  name: Server secret
  evidence: Send the Server secret as a bearer token to the server-side Conversion API at https://plainrouter.com/api/v1
  location: header
  header: Authorization
  how_to_obtain: Create the Server secret in Settings → Workspace → Server secret for the workspace
- type: http-bearer
  name: Workspace key
  evidence: 'Send it as a bearer token, kept in an environment variable or secret manager:'
  location: header
  header: Authorization
  how_to_obtain: A workspace owner or member creates a key in Settings → Workspace keys
- type: oauth2
  name: MCP OAuth 2.1
  evidence: OAuth clients connect to https://plainrouter.com/mcp, open the browser authorization flow, and let the human user choose exactly one
    advertising account and Read or Write access.
  flows:
  - authorization_code
  authorize_url: https://plainrouter.com/oauth2/authorize
  scopes:
  - mcp:use
  how_to_obtain: Register a public OAuth client (POST /oauth/register) and perform the Authorization Code with PKCE flow
docs: https://plainrouter.com/docs/api/authentication