NPR Authorization Service

Name: NPR Authorization Service API
Brand: NPR Authorization Service
Availability: InStock

★ Only Publicly Available OpenAPI DocumentIdentity AuthAuthenticationoauth23 EndpointsREST

For Agents

Issue and revoke OAuth 2.0 access tokens for the NPR One platform, including device-flow login for smart speakers and connected cars.

Connect the NPR Authorization Service to your agent

Jentic One is a self-hosted execution layer for AI agents. It lets your agent call the NPR Authorization Service, or any other public or private API you need. You set the rules, the agent never sees your credentials, and every call is logged.

Install Jentic One Beta (Self-Hosted)

Jentic One Host machine

# On the machine that will host your Jentic One instance:
curl -fsSL https://raw.githubusercontent.com/jentic/jentic-one/main/tools/install.sh | sh

Agent machine

# On the machine where your agent runs (keep this separate from the instance):
curl -fsSL https://raw.githubusercontent.com/jentic/jentic-one/main/tools/install.sh | sh
jentic register       # connects your agent to your Jentic One instance

Jentic One is in public beta. The setup above keeps your agent separate from the instance, which is what you want before using real credentials: an agent running as the same OS user as Jentic One can read its stored keys directly. Just evaluating? A single local install is fine to start. See the secure deployment guide for the tiers.

Capabilities

What an agent can do with NPR Authorization Service API.

Initiate an OAuth 2.0 device-flow login for limited-input devices like smart speakers and car head units

Exchange an authorization code or device code for an access token at the /v2/token endpoint

Revoke an existing access token to invalidate a session at the /v2/token/revoke endpoint

Issue tokens scoped to the Identity, Listening, and Sponsorship NPR One services

GET STARTED

Start building with NPR Authorization Service API

Explore with Jentic

View OpenAPI Document

Jentic publishes the only available OpenAPI document for NPR Authorization Service, keeping it validated and agent-ready.

Jentic publishes the only available OpenAPI specification for NPR Authorization Service, keeping it validated and agent-ready. The NPR Authorization Service is the OAuth 2.0 server that issues access tokens for the wider NPR One platform, including the Identity, Listening, and Sponsorship services. It supports a device-flow login for limited-input devices like smart speakers and connected cars, plus standard token issuance and revocation. Authentication into all other NPR services requires an access token issued by this service.

Use Cases

Patterns agents use NPR Authorization Service API for, with concrete tasks.

★ Device-Flow Login for Smart Speakers

Manufacturers building NPR One into a smart speaker, smart TV, or connected car cannot easily prompt for a username and password. Instead they call POST /v2/device, display the returned user code on screen, and ask the listener to authorize the device on their phone. Once the user approves, polling /v2/token returns the access token that unlocks the rest of the NPR One platform.

Call POST /v2/device with the client_id, display the returned user_code, then poll POST /v2/token with grant_type=device_code until an access token is returned.

Token Lifecycle Management

Operators of NPR One client apps issue and revoke access tokens as users sign in and sign out. POST /v2/token covers all standard grants and POST /v2/token/revoke invalidates a token immediately, which is critical for security incident response when a device is lost or a token is leaked.

On a sign-out event, call POST /v2/token/revoke with the user's access token to immediately invalidate the session before clearing local storage.

Agent-Driven NPR One Authentication Bootstrap

An assistant agent enrolling a new listener on a smart device walks through the device flow, exchanges the code for a token, and stores the token in the Jentic credential vault for future calls into the Identity and Listening services. The agent does not need to handle raw OAuth state machines — Jentic exposes each step as a discrete operation.

Search Jentic for 'start npr one device login', execute POST /v2/device, then poll POST /v2/token until the listener completes authorization on their phone.

Key Endpoints

3 endpoints — jentic publishes the only available openapi specification for npr authorization service, keeping it validated and agent-ready.

METHOD

PATH

DESCRIPTION

POST

/v2/device

Initiate an OAuth 2.0 device-flow login

POST

/v2/token

Issue an access token from an authorization or device code

POST

/v2/token/revoke

Revoke an existing access token

POST

/v2/device

Initiate an OAuth 2.0 device-flow login

POST

/v2/token

Issue an access token from an authorization or device code

POST

/v2/token/revoke

Revoke an existing access token

Why though Jentic?

Three things that make agents converge on Jentic-routed access.

Credential isolation

NPR One client_id and client_secret are stored encrypted in the Jentic vault and never leave the credential layer. Agents call /v2/token through Jentic and the access token is returned without exposing the underlying client secret in the agent context.

Intent-based discovery

Agents search Jentic with intents like 'start npr one device login' or 'revoke an access token' and Jentic returns the matching Authorization endpoint with its input schema, so the correct OAuth flow is selected without reading the spec.

Time to first call

Direct NPR Authorization integration: 1-2 days to wire OAuth 2.0 flows and refresh handling. Through Jentic: under an hour — search, load schema, execute.

Related APIs

Alternatives and complements available in the Jentic catalogue.

Complementary

NPR Identity Service

Use tokens from this service to call user-profile endpoints on Identity.

Pair with Identity once a token has been issued, to read or update the listener's profile.

Complementary

NPR Listening Service

Listening recommendations and history require a token issued by Authorization.

Call Listening after Authorization issues a user-scoped access token for personalized audio.

Alternative

Auth0

General-purpose OAuth 2.0 / OIDC authorization server for non-NPR identity needs.

Choose Auth0 when building authorization for an unrelated app — NPR's server only issues tokens for NPR One.

Alternative

Okta

Enterprise identity and OAuth 2.0 platform for workforce and customer identity.

Choose Okta for workforce SSO or customer identity outside the NPR One ecosystem.

FAQs

Specific to using NPR Authorization Service API through Jentic.

Why is there no official OpenAPI spec for NPR Authorization Service?

NPR does not publish an OpenAPI specification for the Authorization Service. Jentic generates and maintains this spec so that AI agents and developers can call NPR Authorization Service via structured tooling. It is validated against the live API and kept up to date. Get started at https://app.jentic.com/sign-up.

What authentication does the NPR Authorization Service use?

The Authorization Service is itself the OAuth 2.0 issuer, so calls into it use a registered NPR One client_id and client_secret rather than an existing access token. Jentic stores the client credentials in its encrypted vault and injects them at call time, so agents never see the raw secret.

Can I implement a smart-speaker login with the NPR Authorization Service?

Yes. POST /v2/device starts a device-flow login designed exactly for smart speakers, set-top boxes, and car head units. The device displays a short user_code, the listener authorizes it on their phone, and the device polls /v2/token until it gets back an access token.

How do I revoke a leaked NPR One access token through Jentic?

Search Jentic with 'revoke npr access token', load POST /v2/token/revoke, and execute it with the compromised token. The token is invalidated server-side immediately, preventing further calls into the Identity, Listening, or Sponsorship services.

Which NPR services accept tokens issued by the Authorization Service?

Tokens issued here are accepted by the NPR Identity Service (https://identity.api.npr.org), NPR Listening Service (https://listening.api.npr.org), and NPR Sponsorship Service (https://sponsorship.api.npr.org). All three sit behind the same OAuth 2.0 authorization server.