Issue Access Token

POST

/partner/v1/oauth/token

Issues an access token. Authenticated by client_id + client_secret — no bearer token.

client_credentials: send store_id of a store in the app owner's organization. Grants the app's full scopes; no refresh token is returned — call this again when the token expires.

refresh_token: exchanges a refresh token for a new pair. Refresh tokens rotate: always store the new refresh_token; the old one stops working.

Request

Header Params

Body Params application/jsonRequired

Examples

Responses

🟢200Success

application/json

Bodyapplication/json

🟠400Validation failed or invalid store

🟠401Invalid client or refresh token

🟠429Too Many Requests

Request Example

Shell

JavaScript

Java

Swift

cURL

Example 1Example 2

curl --location '/partner/v1/oauth/token' \
--header 'Accept-Language: en' \
--header 'Content-Type: application/json' \
--data '{
    "grant_type": "client_credentials",
    "client_id": "{{client_id}}",
    "client_secret": "{{client_secret}}",
    "store_id": "{{store_id}}"
}'

Response Example

200 - Example 1

{
    "success": true,
    "message": "string",
    "data": {
        "access_token": "string",
        "refresh_token": "string",
        "token_type": "string",
        "expires_in": 0
    }
}

List Products