Skip to main content
POST
Create a machine access token

Body

application/x-www-form-urlencoded
grant_type
string
default:client_credentials
client_id
string | null

OAuth client id for the machine client.

client_secret
string | null

OAuth client secret for the machine client.

scope
string | null

Optional. Leave empty to use SUM_API_M2M_REQUIRED_SCOPES from .env.

Response

Access token issued.

OAuth2 client-credentials token response (RFC 6749 §5.1).

access_token
string
required

Bearer token to send as Authorization: Bearer .

expires_in
integer
required

Token lifetime in seconds; re-exchange shortly before expiry.

token_type
string
default:bearer

Token type for the Authorization header, e.g. 'bearer'.

scope
string | null

Space-delimited scopes granted to the token.