Create an access token
Exchanges your client_id + client_secret for a platform access token (OAuth2 client credentials, RFC 6749 §4.4). The token lives one hour — when it expires, exchange again; there are no refresh tokens on this grant.
Get your credentials in the Agentcard dashboard under Organization → Developer → Credentials. A sandbox client mints tokens that act in sandbox; a production client acts in production.
You can also send the credentials as HTTP Basic (Authorization: Basic base64(client_id:client_secret)) instead of in the form body.
This endpoint is rate limited to 30 requests per 5 minutes per IP — cache the token and reuse it until it expires.
POST /api/v1/oauth/token — both addresses serve the same endpoint, and existing
integrations do not need to change. New integrations should use
/api/v2/oauth/token.client_id and client_secret into the
playground on the right and hit Send. Copy the access_token from the
response into the Authorization field of any other endpoint page to call it
live. A sandbox client runs everything in sandbox.Body
Response
The token to send as Authorization: Bearer <access_token> on every other call.