Authentication

Create access token

Exchange your client_id and client_secret for a short-lived bearer token using the OAuth 2.0 client_credentials grant. Send the returned access_token as Authorization: Bearer <access_token> on all API requests. JSON and form-encoded request bodies are supported. A scope of * grants all access allowed by the credentials; it is not restricted.

post/oauth/token

Request

Request body

grant_type'client_credentials' required

Must be client_credentials.

client_idstring required

Your account's client ID.

client_secretstring required

Your account's client secret.

scopestring

Optional space-delimited list of scopes, such as read.embed.orders or read.embed.devices. Defaults to *, granting all access allowed by the credentials. Use a narrower scope for restricted views.

Response

Token issued.

access_tokenstring

Bearer token to use on subsequent API requests.

token_typestring
expires_ininteger

Token lifetime in seconds.

Example response

{
  "token_type": "Bearer"
}

Changes

No recorded changes to this operation across all 1 revision of this API.