OAuth

Create an access token

Exchanges client credentials for a Bearer access token using the client_credentials grant type. The returned token must be included in the Authorization header for all protected endpoints.

⚠️ Content-Type required. This request must be sent with Content-Type: application/x-www-form-urlencoded. If your HTTP client sets a session-level default of application/json (a common pattern), you must override it explicitly for this request — otherwise the server will return 400: invalid grant type without further explanation.

post/oauth/token

Request

Request body application/x-www-form-urlencoded

client_idstring uuid required

The unique UUID identifier for the client application.

client_secretstring required

The secret associated with the client application.

grant_type'client_credentials' required

Must be client_credentials.

Response

Token successfully created.

access_tokenstring required

The JWT Bearer token to include in the Authorization header of protected requests.

token_type'Bearer' required

Token type. Always Bearer.

expires_ininteger required

Token lifetime in seconds.

Example response

{
  "expires_in": 300
}

Changes

No recorded changes to this operation across all 1 revision of this API.