Get an access token for an API application

OAuth 2.0 client credentials grant. Exchange the client ID and secret of an API application for an access token valid for 24 hours (expires_in, in SECONDS). Authenticate with HTTP Basic — the client ID as user name and the secret as password, each form-url-encoded first — or with client_id and client_secret in the body; not both. Every request issues a new token, and an application can get at most 3 tokens in 24 hours: store the token and reuse it until it expires instead of requesting one per call. Errors follow RFC 6749 section 5.2.

Recent Requests
Log in to see full request history
TimeStatusUser Agent
Retrieving recent requests…
LoadingLoading…
Body Params
string
enum
required
Allowed:
string

Client ID of the application. Required unless sent with HTTP Basic.

string

Client secret of the application. Required unless sent with HTTP Basic.

string

Optional, space-separated. Every scope named must be granted to the application. The token always carries all of the application scopes; the response says which.

Headers
string
enum
Defaults to application/json

Generated from available request content types

Allowed:
Responses

Language
Credentials
Basic
base64
:
LoadingLoading…
Response
Click Try It! to start a request and see the response here! Or choose an example:
application/json