Overview

inSCADA API (20260422-7)

Authentication

inSCADA uses Bearer token authentication for API access.

Standard login flow:

1. Call POST /login — returns access_token and refresh_token.
2. Click Authorize above and enter the access_token.
3. Use POST /refresh with your refresh_token to get a new token pair before expiry.
4. Call POST /logout to invalidate the current token.

OTP login flow (if OTP is enabled for the user):

1. Call POST /login — returns otp_required: true, otp_type, and username.
2. Call POST /validate with the received username and the OTP code.
3. On success, /validate returns access_token and refresh_token — proceed as normal.

Multi-Space

If your inSCADA instance has multiple spaces, include the X-Space header with the space ID on every API request. The available space IDs are returned in the spaces field of a successful login response.

X-Space: <spaceId>

Note for browser users: If you are already logged into the inSCADA web app in this browser, your session cookie takes precedence over any Bearer token entered here. To test with a specific Bearer token, use a private window or a separate HTTP client such as Postman or curl.

• inSCADA: https://www.inscada.com - info@inscada.com
• OpenAPI version: 3.1.0

Authentication

bearerAuth

Security scheme type: http

Bearer format: JWT