OAuth 2.0 Token Generation

Production

https://api.paypaga.com

POST

/oauth2/token

The creation and deletion of the credentials required for OAuth 2.0 token generation are available in the Developer section of the Merchant Portal for each environment.

Important: When a credential is created, the client_secret is displayed only once. The merchant is responsible for storing this value securely.

Request

Body Params application/jsonRequired

Examples

Responses

🟢200

application/json

Authentication Successful

Bodyapplication/json

🟠400

Request Example

Shell

JavaScript

Java

Swift

curl --location 'https://api.paypaga.com/oauth2/token' \
--header 'Content-Type: application/json' \
--data '{
    "grant_type": "client_credentials",
    "client_id": "20260211-0758-41ab-a573-1572d7bf4042",
    "client_secret": "PQIw1TLSapWWlLN7LgA1iLsO9ZkcAxLd"
}'

Response Example

200 - Success

{
    "access_token": "xxxxx.yyyyy.zzzzz",
    "expires_in": 300,
    "token_type": "Bearer"
}

Modified at 2026-10-06 10:11:28

Authorization

AuthRequest