Customer API · Developers
OAuth Client Credentials
Exchange an application's client ID and secret for a short-lived access token from a trusted server.
Verified 2026-09-04 · Source 7071a2e
What this does
Exchange an application's client ID and secret for a short-lived access token from a trusted server.
Steps
- Keep the client secret on a trusted server.
- Send the client-credentials token request exactly as documented in the Developer Portal.
- Request only authorized scopes.
- Cache the access token until shortly before expiration.
- Handle authentication failures without logging the secret or full token.
What happens next
Your change is available within the scope you selected.
Warnings
- Never ship a client secret in web or mobile client code.