Issue an access token (client credentials)
POST/api/v1/oauth/token
Public endpoint — no bearer auth required. Exchange client_id + client_secret for a short-lived access token. Supports client_credentials grant type only (RFC 6749 §4.4). Accepts both application/json (developer convenience) and application/x-www-form-urlencoded (RFC 6749 §4.4.2 standard). Returns 400 invalid_request for any other Content-Type. Rate-limited: returns 429 rate_limited + Retry-After header when the IP bucket is exceeded.
Request
Responses
- 200
- 400
- 401
- 429
Access token
Invalid request, unsupported grant type, or unsupported Content-Type
Invalid client credentials
Too Many Requests — IP rate limit exceeded