CanopyDocs
Reference

Token endpoint

POST
/oauth/token

Exchange a credential (client_id + client_secret) for a 1-hour Bearer access token. Send credentials in the body OR via HTTP Basic auth — not both. Rate-limited to 20/min per source IP.

Request Body

application/x-www-form-urlencoded

TypeScript Definitions

Use the request body type in TypeScript.

Response Body

application/json

application/json

curl -X POST "https://example.com/oauth/token" \  -H "Content-Type: application/x-www-form-urlencoded" \  -d 'grant_type=client_credentials'
{  "access_token": "string",  "token_type": "Bearer",  "expires_in": 3600,  "scope": "orders:read orders:write"}