Exchange a client credential for an access token

Authenticate with HTTP Basic using the integration client ID and secret. The form must request the exact advertised resource and an explicit space-separated scope set. Client secrets must only be used by a backend.

Authentication

AuthorizationBasic
Authenticate the token exchange with the integration client ID and secret. Never expose the secret in browser code.

Request

This endpoint expects an object.
grant_type"client_credentials"Required
resourcestringRequiredformat: "uri"
scopestringRequired

Space-separated OAuth scopes

Response

A short-lived bearer token for the requested scopes.

access_tokenstring
Opaque bearer token. Keep it on the integrating backend.
token_type"Bearer"
Authorization scheme used when calling the Public API.
expires_ininteger
Lifetime of the access token in seconds.
scopestring
Granted OAuth scopes, separated by spaces.

Errors

400
Bad Request Error
401
Unauthorized Error
503
Service Unavailable Error