API Version: 1.9
The Authorization API allows you to authorize your API calls. It is required that you retrieve a valid access token for all calls to the account APIs. Public APIs do not require authorization.
In order to use API endpoints that require authroization, you need client credentials. If you do not already have client credentials, sign into your account and generate them.
The diagram below shows the authorization flow for the account APIs:
To authorize your API requests, send a
POST to the
/auth/token endpoint with your
client_secret in the body, along with a
client_credentials. You will receive an
access_token back that should be used in the
Authorization header as a bearer token. View the endpoints below for examples.
MISSING_CREDENTIALS- The request body is missing
client_secret, or both.
CREDENTIALS_NOT_FOUND- The credentials supplied are not valid.
INVALID_CREDENTIALS- The credentials supplied are not valid.
REVOKED_CREDENTIALS- The credentials supplied have been reboked and can no longer be used.
grant_typesupplied is invalid. Should be
INVALID_GRANT- The access token supplied is invalid or another error occured.