Skip to main content
POST
Exchange client credentials for a short-lived, scoped bearer token

Authorizations

Authorization
string
header
required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Body

OAuth 2.0 client-credentials grant. Client id and secret go in an HTTP Basic Authorization header (preferred) or in these fields.

grant_type
enum<string>
required
Available options:
client_credentials
client_id
string
client_secret
string<password>
scope
string

Space-separated subset of the client's granted scopes. Omit for all of them.

Response

OK

access_token
string
required

Opaque; send as Authorization: Bearer <access_token>.

token_type
string
required
Allowed value: "Bearer"
expires_in
integer
required

Seconds until expiry (3600). Request a new token on 401.

scope
string
required

Space-separated scopes the token carries.