How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

Stripe Authorization API

The Authorization API from Stripe — 5 operation(s) for authorization.

Stripe Authorization API is one of 159 APIs that Stripe publishes on the APIs.io network, described by a machine-readable OpenAPI specification and an AsyncAPI event-driven specification.

Tagged areas include Authorization. The published artifact set on APIs.io includes an OpenAPI specification, API documentation, an API reference, and an AsyncAPI specification.

This API exposes 6 operations across 5 paths, and defines 15 schemas. It is described by OpenAPI 3.2.0, at version 2023-10-16.

Requests are made against a single base URL, https://api.stripe.com/.

6 operations 5 paths 15 schemas 2 GET4 POST

Metadata

The identity and technical contract details declared by the specification.

Specification
OpenAPI 3.2.0
API Version
2023-10-16
Server
https://api.stripe.com/
Authentication
HTTP Basic, HTTP Bearer
Terms of Service
Resource Areas
1

Authentication & Security 2

Stripe Authorization API declares 2 security schemes for authenticating requests. It accepts HTTP basic authentication (basicAuth). It accepts HTTP bearer tokens (auth-scheme) (bearerAuth). By default, every request must be authenticated.

  • basicAuth — Basic HTTP authentication. Allowed headers-- Authorization: Basic | Authorization: Basic
  • bearerAuth — Bearer HTTP authentication. Allowed headers-- Authorization: Bearer

Paths & Operations 6

Across 5 paths, the API surfaces 6 operations — 2 GET, 4 POST. Each is listed below with its method, path, parameters, and response codes.

Authorization 6
GET
/v1/issuing/authorizations
Stripe Get Issuing Authorizations
getIssuingAuthorizations 8 params body → 200default
GET
/v1/issuing/authorizations/{authorization}
Stripe Get Issuing Authorizations
getIssuingAuthorizationsAuthorization 2 params body → 200default
POST
/v1/issuing/authorizations/{authorization}
Stripe Post Issuing Authorizations
postIssuingAuthorizationsAuthorization 1 param body → 200default
POST
/v1/issuing/authorizations/{authorization}/approve
Stripe Post Issuing Authorizations Approve
postIssuingAuthorizationsAuthorizationApprove 1 param body → 200default
POST
/v1/issuing/authorizations/{authorization}/decline
Stripe Post Issuing Authorizations Decline
postIssuingAuthorizationsAuthorizationDecline 1 param body → 200default
POST
/v1/payment_intents/{intent}/increment_authorization
Stripe Post Payment Intents Increment Authorization
postPaymentIntentsIntentIncrementAuthorization 1 param body → 200default

Schemas 15

The contract defines 15 schemas that model the data the API accepts and returns. The most detailed are payment_intent (39 properties), issuing.authorization (25 properties), issuing.card (23 properties), issuing.transaction (22 properties). Each schema is shown below with its type and property counts.

PostIssuingAuthorizationsAuthorizationDeclineRequest
object
2 properties
issuing.token
object
An issuing token object is created when an issued card is added to a digital wallet. As a [card issuer](https://stripe.com/docs/issuing), you can [view and man…
12 properties 8 required
PostIssuingAuthorizationsAuthorizationApproveRequest
object
3 properties
PostIssuingAuthorizationsAuthorizationRequest
object
2 properties
issuing.transaction
object
Any use of an [issued card](https://stripe.com/docs/issuing) that results in funds entering or leaving your Stripe account, such as a completed purchase or ref…
22 properties 12 required
IssuingAuthorizationList
object
4 properties 4 required
issuing.cardholder
object
An Issuing Cardholder object represents an individual or business entity who is [issued](https://stripe.com/docs/issuing) cards. Related guide: [How to create…
16 properties 10 required
error
object
An error response from the Stripe API
1 property 1 required
issuing.authorization
object
When an [issued card](https://stripe.com/docs/issuing) is used to make a purchase, an Issuing Authorization object is created. [Authorizations](https://stripe.…
25 properties 18 required
GetIssuingAuthorizationsAuthorizationRequest
object
issuing.dispute
object
As a [card issuer](https://stripe.com/docs/issuing), you can dispute transactions that the cardholder does not recognize, suspects to be fraudulent, or has oth…
12 properties 10 required
issuing.card
object
You can [create physical or virtual cards](https://stripe.com/docs/issuing/cards) that are issued to cardholders.
23 properties 14 required
payment_intent
object
A PaymentIntent guides you through the process of collecting a payment from your customer. We recommend that you create exactly one PaymentIntent for each orde…
39 properties 10 required
PostPaymentIntentsIntentIncrementAuthorizationRequest
object
7 properties 1 required
GetIssuingAuthorizationsRequest
object

Specification

The full machine-readable OpenAPI contract behind this narrative.

Source

stripe-authorization-api-openapi.yml Raw ↑

Other APIs Stripe publishes across the network.

Stripe Accounts API
Stripe Balance API
Stripe Billing API
Stripe Charges API
Stripe Checkout API
Stripe Climate API
Stripe Country API
Stripe Coupons API
Stripe Credit Notes API
Stripe Customers API
Stripe Disputes API
Stripe Ephemeral Keys API
Where this information came from

This is an independent, third-party profile of Stripe Authorization API, published by API Evangelist. We do not operate, host, resell, or support these APIs, and we are not affiliated with or endorsed by the company unless stated above. Everything here is built from publicly available information — the company's own site, developer portal, documentation, public repositories, and the specifications it publishes for public use. Nothing is obtained by breaching a system, defeating an access control, or using credentials.

The Kin Score and Agent Readiness rating are independently calculated assessments of a company's public API artifacts, scored against a published rubric. They are not certifications, endorsements, security assessments, or audits.

Corrections, re-scores, and removal are free — no partnership or purchase required, and you do not need to justify the request. A removed company is recorded as unrated, never scored zero for having asked. Acknowledgement within one business day; removal within two.

info@apievangelist.com · Read the full data-sourcing policy →
On a security or compliance team? Put security in the subject line and you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.