Skip to main content
POST
Get a client app access token

Body

application/x-www-form-urlencoded
grant_type
enum<string>
default:client_credentials
required

Always client_credentials.

Available options:
client_credentials
client_id
string
required

Client app id from the Siro web app.

client_secret
string
required

Client app secret from the Siro web app.

Response

200 - application/json

Access token issued

access_token
string
required

Access token. Send as Authorization: Bearer on the org-wide API, or as x-siro-auth-token on the user-scoped API.

token_type
enum<string>
required

Always bearer.

Available options:
bearer
expires_in
integer
required

Seconds until the token expires. Typically 3600. There is no refresh token — mint a new access token before expiry.

Example:

3600