Authentication
Basic Authorization
Almost all API endpoints require the access_token to be sent as a Bearer token. The token endpoints and the sign_up endpoint require the Basic token.
The value for the authorization header consists of the word “Basic”, followed by a space, followed by the Base64-encoded version of the client_id and the client_secret. The client_id and client_secret must be separated by a single colon ”:”.
The RFC 4648 version of Base64 is required.
Last modified on June 12, 2026