Skip to main content
POST
Get an access token (client credentials)

Body

grant_type
enum<string>
required

The only supported grant type.

Available options:
client_credentials
client_id
string
required

Client id issued by Provident (per environment).

client_secret
string
required

Client secret issued by Provident. Server-side use only — never expose it in a browser or mobile app.

Response

Token issued

access_token
string

Opaque bearer token. Send as Authorization: Bearer <access_token>.

token_type
string
Example:

"Bearer"

expires_in
integer

Seconds until the token expires (typically 3600).

Example:

3600

scope
string

Space-separated scopes granted to the client. May be empty.