The KH Authenticator application does not work alone. Communication between the app and multiple web application programming interfaces (API) must be established and maintained. The services API provides security and provider configuration support. Each service has a primary provider. The primary provider implements the providers API and governs a list of standard providers. The primary and standard providers implement the KHAuthenticators API which verifies security and the user's current status. The KHAuthenticators API issues an encoded Jason Web Token (JWT) to authenticate the user.

KHAuthenticator.Com hosts the primary service and it's primary provider. The primary service registers the device id, verifies the app version, and checks for app updates. A service's primary provider is configured on KHAuthenticator.Com, but the primary provider must be hosted with a unique domain name. The providers API provides security and configuration support for a list of standard providers and a list of sandbox providers for development. See Developers.