Addressfinder now supports OAuth 2.0

We have seen growing demand for OAuth 2.0 support as more organisations adopt it as their standard for machine-to-machine authentication. Its combination of short-lived tokens, scoped access and credential rotation makes it well suited to automated systems and environments with stricter security requirements.

For teams making direct API calls, such as address or email verification within their own systems, OAuth 2.0 provides a more precise way to manage that access.

What is OAuth 2.0?

OAuth 2.0 is an industry-standard authorisation framework that allows systems to authenticate API calls without passing long-lived credentials with every request. Instead, your application exchanges client credentials for a short-lived access token and uses that token to authorise requests.

Addressfinder OAuth 2.0 features

Addressfinder's implementation gives you precise control over how credentials are issued and used:

• Scoped access: limit each credential to the services it needs, address, email or phone
• Short-lived tokens: configurable expiry from 15 minutes to 1 hour, reducing exposure if a token is compromised
• Multiple credentials per project: issue separate credentials for different environments, systems or pipelines without sharing keys

Read the OAuth 2.0 documentation for more information.

Choosing the right authentication method

Addressfinder supports three authentication methods. OAuth 2.0 sits alongside existing options. The right choice depends on how your integration is built and what level of credential control your team needs:

Getting started

Available on Business and Enterprise plans. Get started from the Keys section of your account.

Read the OAuth 2.0 documentation to see how it works