Authentication

The Petstore demo playground doesn't require authentication. It uses public GET examples with prefilled values.

Playground behavior

The API playground includes these unauthenticated demo endpoints:

Their contract is defined only in petstore-playground.json (downloadable from this site). That file isn't the full Petstore API description.

If you expand beyond the demo endpoints, your Petstore environment can use OAuth2 or API keys.

For endpoints that require write:pets or read:pets, send a bearer token:

curl "https://petstore3.swagger.io/api/v3/pet/1" \
  -H "Authorization: Bearer YOUR_ACCESS_TOKEN"

For inventory operations that require an API key, send it in the header:

curl "https://petstore3.swagger.io/api/v3/store/inventory" \
  -H "api_key: YOUR_API_KEY"

Check your environment settings to confirm which endpoints require authentication.