Auth token
POST/Auth/Token
No authentication requiredCore license
Exchange your API key and secret for a bearer token. Send the token as Authorization: Bearer <token> on every other request.
Request body
Content type application/json.
| Field | Type | Description | |
|---|---|---|---|
apiKey | string | required | Your API key. |
apiSecret | string | required | Your API secret. |
Example request
Response
| Field | Type | Description |
|---|---|---|
access_token | string | The bearer token (a signed JWT). Treat it as opaque. |
token_type | string | Always "Bearer". |
expires_in | integer | Seconds until the token expires (currently 3600). There is no grace period. |
Errors
| Status | Body | Cause |
|---|---|---|
400 | "apiKey and apiSecret are required." | A field is missing or empty. |
401 | "Invalid credentials." | The key or secret is not valid. |