Get Access Token

POST

/connect/token

All API requests require a valid access token.
Use the POST /connect/token endpoint to retrieve one using your client_id and client_secret.

🌐 Environments

Environment	URL
UAT	`https://idsuat.walletgate.iO`
UAT	`https://stsapiuat.walletgate.io`

You’ll get the token from 'https://idsuat.walletgate.io', and all API operations will go through https://stsapiuat.walletgate.io.
We’ll share the exact production domain details when the live environment setup begins.

To access Sipay Business API services, authentication must first be completed and an access token must be obtained.

The access token is retrieved using the client credentials authentication flow. The token is valid for 3600 seconds (1 hour), so it should be refreshed before it expires—preferably once every hour.

Request

Header Params

Body Params application/x-www-form-urlencoded

Responses

🟢200OK

application/json

Returned when the request is successful and the client credentials are valid.

Body

🟠400Bad Request

Request Example

Shell

JavaScript

Java

Swift

curl --location --request POST '/connect/token' \
--header 'Content-Type: application/x-www-form-urlencoded' \
--data-urlencode 'grant_type=client_credentials' \
--data-urlencode 'client_id=your_client_id' \
--data-urlencode 'client_secret=your_client_secret' \
--data-urlencode 'scope=sts_business_api'

Response Example

200 - Success

{
    "access_token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...",
    "token_type": "Bearer",
    "expires_in": 3600,
    "scope": "sts_business_api"
}

Partner Wallet Flow Guide

Get Business Account

Get Access Token

🌐 Environments#

Request

Responses

🌐 Environments