API Keys

API Keys identify your application when requesting OAuth access tokens.

They are used when calling:

POST /oauth/token

Example:

{
  "grant_type": "client_credentials",
  "api_key": "YOUR_API_KEY"
}

Security Guidelines

Always follow these practices:

• Store API keys in environment variables
• Never commit API keys to Git
• Rotate keys periodically
• Use different keys for production and testing

Linux / macOS:

Node.js example: