Authentication API

Reference pages for Cobru authentication and token refresh.

The Cobru API currently uses a layered model:

  • x-api-key
  • Authorization: Bearer {access}

Available endpoint

EndpointMethodStatus
/token/refresh/POSTverified against live sandbox behavior

Notes for implementers

  • The body field is refresh, not refresh_token.
  • Keep the API key, refresh token, and access token server-side.
  • Cache the access token for no more than 50 minutes.

Continue with the Refresh token page for request and response details.

On this page