Security and authentication

Authentication overview

Speakeasy-created SDKs have authentication automatically configured based on the securitySchemes defined in the OpenAPI specification.

APIs authenticated with simple schemes, such as Basic HTTP auth, API keys, and bearer tokens, work out of the box. For APIs using short-lived tokens (OAuth), additional configuration is required to simplify setup.

Authentication Mechanism

HTTP Basic authentication

Language Support
✅ Docs

API key [header, query]

Language Support
✅ Docs

Bearer Token authentication

Language Support
✅ Docs

OAuth

Language Support
✅ All GA and some beta languages

mTLS

Language Support
✅ Using hooks

Custom security schemes

Language Support
✅ Using Speakeasy custom security schemes extension

Authentication Mechanism Language Support
HTTP Basic authentication ✅ Docs
API key [header, query] ✅ Docs
Bearer Token authentication ✅ Docs
OAuth ✅ All GA and some beta languages
mTLS ✅ Using hooks
Custom security schemes ✅ Using Speakeasy custom security schemes extension

Last updated on April 24, 2026