Authentication

The API uses OAuth 2.0 Client Credentials flow. You will be provided a client_id and client_secret for your application.

Obtaining an Access Token

POST /tokens/
Content-Type: application/json

Request body:

{
  "client_id": "your_client_id",
  "client_secret": "your_client_secret",
  "grant_type": "client_credentials"
}

Alternatively, you can send the credentials via HTTP Basic Authentication header:

POST /tokens/
Content-Type: application/json
Authorization: Basic base64(client_id:client_secret)

{
  "grant_type": "client_credentials"
}

Response:

{
  "access_token": "eyJ...",
  "token_type": "Bearer",
  "expires_in": 300,
  "scope": "transfer"
}

Using the Access Token

Include the access token in the Authorization header of all subsequent API requests:

Authorization: Bearer <access_token>

All Bank Transfers API endpoints require the transfer scope on your access token.