Authentication

You'll need to authenticate your requests to access any of the endpoints in the Merlin API. In this guide, we will look at how authentication works.

OAuth2 bearer token

The supported authentication for the Merlin API is OAuth2 using the Client Credential grant type. The Client Credentials grant type is used by clients to obtain an access token outside of the context of a user. When making a request to an endpoint that uses OAuth2, you will need to provide your access token in the request headers. Here's how to add the token to the request header using cURL:

Example Token Request