Authenticate your application

Exchanges your clientId and clientSecret for a server-to-server access token valid for one hour. Send the token on every subsequent request in the Access-Token header — despite the Bearer tokenType, it is not an Authorization header. Cache the token rather than re-authenticating per request.

Recent Requests
Log in to see full request history
TimeStatusUser Agent
Retrieving recent requests…
LoadingLoading…
Body Params
string
required

Identifer of the partner client application

string
required

Secret key of the partner client application

Responses

403

The X-API-Key header is missing or invalid. Returned by the API gateway as {"message":"Forbidden"}.

Language
Credentials
Header
URL
LoadingLoading…
Response
Click Try It! to start a request and see the response here! Or choose an example:
application/json