API reference

Token

The OAuth 2.0 token endpoint. Exchange your client credentials for a short-lived access token, or use a refresh token to get a new one. No sign-in required.

Your session tokens

Captured automatically when you call POST /oauth/token

No tokens yet. Run the client credentials request below to obtain an access token and a refresh token — they’ll appear here and be reused across the testing console.

POST/oauth/tokenPublic

Get an access token (client credentials)

Exchange client_id + client_secret for an access_token and a refresh_token. Get your client_id and client_secret from the Create an app page — the secret is shown only once when the app is created; if you've lost it, generate a new secret from your application there. The access_token is used as a Bearer token on resource endpoints. Running this here will automatically store the returned access token for testing the endpoints below.

Request body example
{
  "grant_type": "client_credentials",
  "client_id": "tsk_...",
  "client_secret": "tsec_..."
}
POST/oauth/tokenPublic

Refresh an access token

Exchange a refresh_token for a new access_token (the refresh token is rotated — the old one is revoked).

Request body example
{
  "grant_type": "refresh_token",
  "refresh_token": "tsr_..."
}