Authentication

The API uses OAuth 2.0 Client Credentials Flow (OIDC).

Pick your environment and the hosts on this page update to match.

Token Endpoint

POST https://identity-v2.metaforce.net/connect/token

This path is stable. We are moving Doc Gen onto Keycloak, which serves OAuth under different paths internally, but the identity host keeps accepting /connect/token and forwards it. You do not need to change your integration when that move happens, and you do not need to read the discovery document to find the endpoint.

Required Parameters

Name	Type	Value
grant_type	string	client_credentials
client_id	string	Your client ID
client_secret	string	Your client secret
scope	string	api.external

Example Response

{
  "access_token": "...",
  "expires_in": 3600,
  "token_type": "Bearer"
}

Use in header:

Authorization: Bearer <access_token>

Tokens last an hour. Cache the token and reuse it until it expires rather than asking for a new one on every call.

Statistics Endpoints