Exchange an API key for a short-lived Bearer access token
POST /api/v1/token
POST https://api.trustverify.co.uk/api/v1/token
client_credentials grant: clientSecret is your tv_*_sk_… API key. The returned JWT authenticates against every /api/v1 endpoint via Authorization: Bearer for one hour.
Request body#
| Field | Type | Description |
|---|---|---|
| grantTyperequired | string: "client_credentials" | |
| clientId | string | |
| clientSecretrequired | string | Your tv_live_sk_… / tv_test_sk_… API key |
Example request#
curl -sS -X POST 'https://api.trustverify.co.uk/api/v1/token' \
-H "Authorization: Bearer $TRUSTVERIFY_API_KEY" \
-H "Content-Type: application/json" \
-d '{
"grantType": "client_credentials",
"clientId": "my-integration",
"clientSecret": "<your API key>"
}'Responses#
200 Access token
| Field | Type | Description |
|---|---|---|
| accessTokenrequired | string | |
| expiresInrequired | number | |
| tokenTyperequired | string: "Bearer" |