Get Access Token
Account and Permissions
Get Access Token
Exchanges user credentials for an OAuth token. Send grant_type=password with a URL-encoded username and password, or grant_type=refresh_token with a refresh token from an earlier response. Tokens last 15 days and refresh tokens last 365 days. If the user has two-factor authentication enabled, the first request returns 202 (Accepted) and you resend it with the verification code in an OTP header. API keys do not use this endpoint.
POST
Get Access Token
Authorizations
Bearer authentication header of the form Bearer <token>, where <token> is your auth token.
Last modified on August 11, 2026