Get an access token
Exchange client credentials for a short-lived JWT access token. The generated SDKs call this automatically and refresh the token before it expires — you normally do not need to invoke it directly.
Authentication
AuthorizationBearer
Bearer authentication of the form Bearer <token>, where token is your auth token.
Request
This endpoint expects an object.
grant_type
The OAuth 2.0 grant type. Always client_credentials.
Allowed values:
client_id
The client ID issued to you by IMO Health.
client_secret
The client secret issued to you by IMO Health. Keep this secret server-side.
audience
The API audience the token is scoped to, e.g. https://api-sandbox.imohealth.com.
Response
successful operation
access_token
The JWT bearer token to send in the Authorization header.
scope
Space-delimited list of scopes granted to this token.
expires_in
Lifetime of the access token in seconds.
token_type
The token type. Always Bearer.
Errors
400
Bad Request Error
401
Unauthorized Error
403
Forbidden Error
429
Too Many Requests Error
500
Internal Server Error
503
Service Unavailable Error