Create a machine access token
Exchange machine credentials for a bearer access token.
The first call of every integration: send client_id and
client_secret (form-encoded, grant_type=client_credentials) and
receive access_token with expires_in seconds. Pass it as
Authorization: Bearer <token> on all other endpoints, cache it, and
re-exchange shortly before expiry.
Credentials may instead be presented via HTTP Basic auth
(Authorization: Basic base64(client_id:client_secret)) per RFC 6749
§2.3.1 — use one method per request, not a mix. Generated OAuth2 clients
(e.g. Workato’s connector SDK) default to Basic.
Body
Response
Access token issued.
OAuth2 client-credentials token response (RFC 6749 §5.1).
Bearer token to send as Authorization: Bearer .
Token lifetime in seconds; re-exchange shortly before expiry.
Token type for the Authorization header, e.g. 'bearer'.
Space-delimited scopes granted to the token.