Create an access token

Exchange your public and secret API keys for a short-lived access token. Send the token as Authorization: Bearer <token> on your server-side API calls.

Tokens expire 5 minutes after they are issued. Request a new token when the current one expires rather than storing it.

Use a client's keys for its orders and contracts. Use your partner keys only for Onboard a client.

Call this endpoint from your server only. Never expose your secret key in a browser or mobile app.

Recent Requests
Log in to see full request history
TimeStatusUser Agent
Retrieving recent requests…
LoadingLoading…
Body Params

Your API key pair.

required

Your public API key (pk_...).

required

Your secret API key (sk_...). Keep this on your server.

Responses

Language
URL
LoadingLoading…
Response
Click Try It! to start a request and see the response here! Or choose an example:
application/json