Skip to main content

Authentication

The Petstore demo playground doesn't require authentication. It uses public examples with prefilled values.

Playground behavior​

The API playground includes these unauthenticated demo endpoints:

  • GET /pet/findByStatus
  • POST /pet
  • PUT /pet
  • DELETE /pet/{petId}
  • GET /user/login
  • GET /user/logout

Only petstore-playground.json (downloadable from this site) defines their contract. That file isn't the full Petstore API description.

Authentication for extended usage​

If you expand beyond the demo endpoints, your Petstore environment can use OAuth2 or API keys.

For endpoints that require write:pets or read:pets, send a bearer token:

curl "https://petstore3.swagger.io/api/v3/pet/1" \
  -H "Authorization: Bearer YOUR_ACCESS_TOKEN"

For inventory operations that require an API key, send it in the header:

curl "https://petstore3.swagger.io/api/v3/store/inventory" \
  -H "api_key: YOUR_API_KEY"

Check your environment settings to confirm which endpoints require authentication.