Skip to main content
POST
Get an access token

Errors

This endpoint follows RFC 6749, so every failure comes back as a flat error field rather than the envelope the other endpoints use, and a standard OAuth client can read it:

Authorizations

Authorization
string
header
required

HTTP Basic credentials of an API client: client_id:client_secret, base64 encoded.

Body

application/x-www-form-urlencoded
grant_type
enum<string>
required

The only supported grant. Also accepted as a query parameter.

Available options:
client_credentials

Response

A new access token.

access_token
string
required

The bearer token. Send it as Authorization: Bearer <access_token>.

Example:

"eyJ0eXAiOiJ0aS1hcGkrand0..."

token_type
enum<string>
required
Available options:
Bearer
expires_in
integer<int64>
required

Lifetime in seconds. Read it rather than hard-coding it.

Example:

3600