Authentication

To access the Pave Bank API, use Bearer Token Authentication via the OAuth 2.0 Client Credentials Flow. Follow these steps:

Obtain your client_id and client_secret

Exchange them for an access token by making a POST request to: {baseUrl}/oauth2/token

Include the access token in the Authorization header of your API requests

Security Note

Keep your client_id and client_secret secure. Never expose them in public code. If compromised, rotate your credentials immediately.

Token Request Example

Make a POST request with the following body: grant_type=client_credentials&audience=developer

Use HTTP Basic Auth with your client_id and client_secret

curl --request POST \
  --url https://api.pavebank.com/oauth2/token \
  --header 'Content-Type: application/x-www-form-urlencoded' \
  --user 'CLIENT_ID:CLIENT_SECRET' \
  --data 'grant_type=client_credentials&audience=developer'

Authenticated API Call

curl -X GET "https://api.pavebank.com/v1/accounts" \
     -H "Authorization: Bearer YOUR_ACCESS_TOKEN"

Authentication

Token Request Example

Authenticated API Call

On this page