NPR Authorization Service

Name: NPR Authorization Service API
Brand: NPR Authorization Service
Availability: InStock

★ Only Publicly Available OpenAPI DocumentIdentity AuthAuthenticationoauth23 EndpointsREST

For Agents

Issue and revoke OAuth 2.0 access tokens for the NPR One platform, including a device flow tailored for smart speakers and connected cars.

Connect the NPR Authorization Service to your agent

Jentic One is a self-hosted execution layer for AI agents. It lets your agent call the NPR Authorization Service, or any other public or private API you need. You set the rules, the agent never sees your credentials, and every call is logged.

Install Jentic One Beta (Self-Hosted)

Jentic One Host machine

# On the machine that will host your Jentic One instance:
curl -fsSL https://raw.githubusercontent.com/jentic/jentic-one/main/tools/install.sh | sh

Agent machine

# On the machine where your agent runs (keep this separate from the instance):
curl -fsSL https://raw.githubusercontent.com/jentic/jentic-one/main/tools/install.sh | sh
jentic register       # connects your agent to your Jentic One instance

Jentic One is in public beta. The setup above keeps your agent separate from the instance, which is what you want before using real credentials: an agent running as the same OS user as Jentic One can read its stored keys directly. Just evaluating? A single local install is fine to start. See the secure deployment guide for the tiers.

Capabilities

What an agent can do with NPR Authorization Service API.

Initiate an OAuth 2.0 device-flow login for limited-input devices like smart speakers and car head units

Exchange an authorization code or device code for an NPR One access token

Revoke an issued access token to invalidate a session

Operate as the OAuth 2.0 server for the wider NPR One developer platform

GET STARTED

Start building with NPR Authorization Service API

Explore with Jentic

View OpenAPI Document

Jentic publishes the only available OpenAPI document for NPR Authorization Service, keeping it validated and agent-ready.

Jentic publishes the only available OpenAPI specification for NPR Authorization Service, keeping it validated and agent-ready. The NPR Authorization Service is the OAuth 2.0 server backing the NPR One platform. It issues access tokens that the Identity, Listening, and Sponsorship services accept, and supports a device-flow login designed for limited-input devices like smart speakers and connected cars. The three endpoints cover device-flow initiation, token issuance, and token revocation.

Use Cases

Patterns agents use NPR Authorization Service API for, with concrete tasks.

★ Device-Flow Login for Smart Speakers and Cars

NPR One client apps on smart speakers, smart TVs, and connected cars cannot easily prompt for a password. Instead they call POST /v2/device, display the returned user code on screen, and ask the listener to authorize the device on their phone. Once approved, polling /v2/token returns the access token that unlocks the rest of the NPR One platform.

Call POST /v2/device with the registered client_id, render the returned user_code on the device, then poll POST /v2/token with grant_type=device_code until a token is returned.

Token Issuance and Revocation

NPR One client apps issue access tokens at sign-in via POST /v2/token and invalidate them on sign-out or compromise via POST /v2/token/revoke. Revocation is essential for security incident response and for honoring user-initiated sign-out across multiple devices.

On user sign-out, call POST /v2/token/revoke with the active access token to invalidate the session, then clear local credential storage.

Agent-Driven NPR One Sign-In Bootstrap

An assistant agent enrolling a new listener on a smart speaker walks through the device flow, exchanges the code for an access token, and stores the token in the Jentic vault. Subsequent calls into Identity or Listening go through Jentic without exposing the token in the agent's context.

Search Jentic for 'start npr one device login', execute POST /v2/device, then poll POST /v2/token until the listener finishes authorizing on their phone.

Key Endpoints

3 endpoints — jentic publishes the only available openapi specification for npr authorization service, keeping it validated and agent-ready.

METHOD

PATH

DESCRIPTION

POST

/v2/device

Initiate an OAuth 2.0 device-flow login

POST

/v2/token

Issue an access token from an authorization or device code

POST

/v2/token/revoke

Revoke an existing access token

POST

/v2/device

Initiate an OAuth 2.0 device-flow login

POST

/v2/token

Issue an access token from an authorization or device code

POST

/v2/token/revoke

Revoke an existing access token

Why though Jentic?

Three things that make agents converge on Jentic-routed access.

Credential isolation

NPR One client_id and client_secret are stored encrypted in the Jentic vault and never leave the credential layer. Agents call /v2/token through Jentic and the access token is returned without exposing the underlying client secret in the agent's context.

Intent-based discovery

Agents search Jentic with intents like 'start npr one device login' or 'revoke an access token' and Jentic returns the matching Authorization endpoint with its input schema.

Time to first call

Direct NPR Authorization integration: 1-2 days to wire OAuth 2.0 flows. Through Jentic: under an hour — search, load schema, execute.

Related APIs

Alternatives and complements available in the Jentic catalogue.

Complementary

NPR Identity Service

Use tokens from this service to call user-profile endpoints on Identity.

Pair with Identity once a token has been issued to read or update the listener's profile.

Complementary

NPR Listening Service

Listening recommendations require a token issued by Authorization.

Call Listening after Authorization issues a user-scoped access token.

Alternative

Auth0

General-purpose OAuth 2.0 / OIDC authorization server for non-NPR identity needs.

Choose Auth0 for authorization in an unrelated app — NPR's server only issues tokens for NPR One.

Alternative

Okta

Enterprise identity and OAuth 2.0 platform for workforce or customer identity.

Choose Okta for workforce SSO or customer identity outside the NPR One ecosystem.

FAQs

Specific to using NPR Authorization Service API through Jentic.

Why is there no official OpenAPI spec for NPR Authorization Service?

NPR does not publish an OpenAPI specification for the Authorization Service. Jentic generates and maintains this spec so that AI agents and developers can call NPR Authorization Service via structured tooling. It is validated against the live API and kept up to date. Get started at https://app.jentic.com/sign-up.

What authentication does the NPR Authorization Service use?

The Authorization Service is itself the OAuth 2.0 issuer, so calls into it use a registered NPR One client_id and client_secret rather than an existing access token. Jentic stores the client credentials in its encrypted vault and injects them at call time.

Can I implement a smart-speaker login with this service?

Yes. POST /v2/device starts a device-flow login designed exactly for smart speakers, set-top boxes, and car head units. The device displays a short user_code, the listener authorizes it on their phone, and the device polls /v2/token until it receives an access token.

How do I revoke a leaked NPR One access token through Jentic?

Search Jentic with 'revoke npr access token', load POST /v2/token/revoke, and execute it with the compromised token. The token is invalidated server-side immediately, preventing further calls into Identity, Listening, or Sponsorship.

Which NPR services accept tokens from this Authorization Service?

Tokens issued here are accepted by the NPR Identity Service, NPR Listening Service, and NPR Sponsorship Service. All three resource servers sit behind this single OAuth 2.0 authorization server.