Authentication

Server

Endpoints for obtaining warp-grade OAuth tokens used to authorize cargo operations.

Issue OAuth access token

POST

https://c1cf69108515455da09b5a33ff336111-oas.api.mockbin.io

/oauth/token

Exchange client credentials for a short-lived warp-grade access token. The request body must be sent as application/x-www-form-urlencoded per RFC 6749.

Issue OAuth access token › Request Body

grant_type

string · enum · required

OAuth 2.0 grant type. Only client_credentials is supported for fleet integrations.

Enum values:

client_credentials

client_id

string · required

Identifier issued when registering your fleet integration.

client_secret

string · password · required

Secret issued alongside the client_id. Treat as sensitive.

scope

string

Space-separated list of requested scopes (e.g. shipments:read shipments:write).

Issue OAuth access token › Responses

Access token issued

access_token

string · required

Bearer token to send in the Authorization header.

token_type

string · enum · required

Enum values:

Bearer

expires_in

integer · required

Token lifetime in seconds.

scope

string

POST/oauth/token

fetch('https://c1cf69108515455da09b5a33ff336111-oas.api.mockbin.io/oauth/token', {
  method: 'POST',
  headers: {
    'Content-Type': 'application/x-www-form-urlencoded'
  },
  body: new URLSearchParams({
    grant_type: 'client_credentials',
    client_id: 'cosmo-fleet-7421',
    client_secret: 'warp-secret-xyz',
    scope: 'shipments:read shipments:write'
  })
})

Example Request Body

grant_type=client_credentials&client_id=cosmo-fleet-7421&client_secret=warp-secret-xyz&scope=shipments%3Aread+shipments%3Awrite

text

application/x-www-form-urlencoded

Example Responses

{
  "access_token": "warp.eyJhbGciOiJIUzI1NiJ9.cargo",
  "token_type": "Bearer",
  "expires_in": 3600,
  "scope": "shipments:read shipments:write"
}

json

application/json

Documentation Schemas