Authentication

OAuth2

We use the Client Credentials flow and expect an access token to be provided in every request as part of the Authorization header, e.g. Authorization = Bearer <token>. Our access token expires after 4 hours, at which point a new one needs to be obtained. To obtain an access token, make a request to our /auth/token endpoint and ensure an Org-Id header is present with the ID of your organization as its value.

The client ID and secret can be generated by an admin from within the organization on missionX (See "API Integration" on the organization's configuration page).