Skip to main content
POST
Get Workspace Token
Sign the assertion with a short lifetime (we recommend 4 minutes) and a unique jti. The resulting access token is valid for 1 hour and is bound to a single workspace.

Headers

Content-Type
string
default:application/x-www-form-urlencoded
required

Body

application/x-www-form-urlencoded
grant_type
enum<string>
required

Always client_credentials.

Available options:
client_credentials
client_assertion_type
enum<string>
required

Always urn:ietf:params:oauth:client-assertion-type:jwt-bearer.

Available options:
urn:ietf:params:oauth:client-assertion-type:jwt-bearer
client_assertion
string
required

A JWT (header.payload.signature) with iss/sub set to your client_id, aud set to the token issuer, a short exp (we recommend 4 minutes), and a unique jti, signed with your private key using RS256.

Response

Workspace access token issued

access_token
string

Bearer token for the workspace, valid for expires_in seconds.

token_type
string
Example:

"Bearer"

expires_in
integer

Lifetime of the access token, in seconds.

Example:

3600