KIS API Authentication

How to authenticate KIS API requests: one Bearer API key plus a connectionId. MindCloud handles KIS's custom auth scheme for you.

Every KIS API request through MindCloud needs two things: a MindCloud API Key and a connectionId for your KIS account. This page covers both, plus exactly how to send them, so you do not need to visit any other page to get authenticated.

Steps to authenticate

Create a MindCloud account at app.mindcloud.co if you do not already have one.
Generate a MindCloud API Key in API Keys. This is the Bearer token you send on every request. Keep it on your server.
Create a KIS connection in Connections. KIS uses its own authentication scheme. You provide whatever it requires when you create the connection — MindCloud handles the provider-specific details for you.
Copy the connection’s connectionId — you will send it on every request alongside your MindCloud API Key.

How requests are authenticated

Authentication has two layers. Your MindCloud API Key authenticates the request to MindCloud, sent as a Bearer token in the Authorization header. The connectionId selects the connected KIS account that should run the action. MindCloud stores and refreshes the KIS credentials behind that connection, so you never send provider tokens with your requests.

Pass connectionId in the query string for GET and DELETE actions, and in the JSON body for POST, PUT, and PATCH actions.

For example, calling List Tables with an KIS connection looks like this:

curl --request POST \
  --url "https://connect.mindcloud.co/v2/universal/apps/kIS/actions/list-tables/run" \
  --header "Authorization: Bearer $MINDCLOUD_API_KEY" \
  --header "Content-Type: application/json" \
  --data '{
  "connectionId": "$CONNECTION_ID",
  "arguments": {}
}'

The Authorization: Bearer <your MindCloud API Key> header authenticates you to MindCloud; the connectionId tells MindCloud which KIS account to run the action against. Missing or invalid Authorization returns 401, and a missing or mismatched connectionId returns 400.

Get your KIS app token and secret

You need access to a KIS workspace and permission to create API keys in Settings.

Open the KIS API Keys settings page
Sign in to KIS and open Settings -> API Keys.
Settings → API Keys
Create or copy an API key
Create a key if needed, then copy the App Token and Secret values shown by KIS.
Review table permissions
Open App Settings for the key and enable the read, create, modify, or delete permissions your workflows need on each KIS data table.
Paste the values into MindCloud
Return to MindCloud and paste the App Token and Secret into the KIS connection form.

Keep your key safe

Keep your MindCloud API Key on your server; do not ship it in browser code, mobile apps, public repositories, or logs. Anyone with the key can call the Universal API as your MindCloud account, across every connection you have created.