Skip to main content
POST
Create an access token
The exchange is also available at its original path, POST /api/v1/oauth/token — both addresses serve the same endpoint, and existing integrations do not need to change. New integrations should use /api/v2/oauth/token.
Test it right here — paste your client_id and client_secret into the playground on the right and hit Send. Copy the access_token from the response into the Authorization field of any other endpoint page to call it live. A sandbox client runs everything in sandbox.

Body

application/x-www-form-urlencoded
grant_type
enum<string>
required

Always client_credentials.

Available options:
client_credentials
client_id
string
required

Your client id, from the dashboard.

client_secret
string
required

Your client secret (acs_…), shown once when you create the client.

Response

The token to send as Authorization: Bearer <access_token> on every other call.

access_token
string

The platform access token. Send it as Authorization: Bearer <access_token> on every other endpoint.

token_type
enum<string>
Available options:
Bearer
expires_in
integer

Seconds until the token expires (3600 = one hour).

scope
enum<string>
Available options:
api