HyperTrackDocs
Authentication

Create access token

POST
/oauth/token

Exchange your client_id and client_secret for a short-lived bearer token using the OAuth 2.0 client_credentials grant. Send the returned access_token as Authorization: Bearer <access_token> on all API requests. JSON and form-encoded request bodies are supported. A scope of * grants all access allowed by the credentials; it is not restricted.

Request Body

TypeScript Definitions

Use the request body type in TypeScript.

Response Body

application/json

curl -X POST "https://example.com/oauth/token" \  -H "Content-Type: application/json" \  -d '{    "grant_type": "client_credentials",    "client_id": "string",    "client_secret": "string"  }'
{  "access_token": "string",  "token_type": "Bearer",  "expires_in": 0}
Empty

Secure embed view POST

Exchange an order detail view URL for a short-lived secure URL with an endpoint-restricted access token appended. The order must exist and have an associated device. This endpoint is not a general-purpose exchange for arbitrary dashboard or list-view URLs. Authenticate with HTTP Basic auth using your account ID and secret key. Use the returned `secure_embed_url` as the iframe source without changing its query parameters.