Skip to main content
POST
Issue a Meridian Accounts access token

Authorizations

X-Meridian-Signature
string
header
required

Meridian HMAC header authentication, for server-to-server calls.

Required headers:

  • X-Meridian-Api-Key
  • X-Meridian-Timestamp
  • X-Meridian-Program-Id
  • X-Meridian-User-Id (MULTI_USER integrations only)
  • X-Meridian-Signature

X-Meridian-Signature is the HMAC SHA-256 signature of the canonical request string, computed per request. See Authentication for how to construct it.

Headers

X-Meridian-Api-Key
string
required

Server-to-server (HMAC) requests only. Partner API key issued by Meridian during provisioning.

X-Meridian-Timestamp
string
required

Server-to-server (HMAC) requests only. Current time in milliseconds since the Unix epoch. Must be within 60 seconds of the request.

X-Meridian-Program-Id
string
required

Server-to-server (HMAC) requests only. Identifies the program context for the request.

X-Meridian-User-Id
string

Server-to-server (HMAC) requests only. Identifies the Meridian user targeted by the request. Required for MULTI_USER integrations; omit for SINGLE_USER.

Body

application/json

Either a client_credentials or refresh_token grant payload

Token request payload for the client_credentials grant

grant_type
enum<string>
required

OAuth grant type

Available options:
client_credentials,
refresh_token

Response

The issued access and refresh tokens

OAuth token response for Meridian Accounts authentication

access_token
string
required

Bearer access token

Example:

"access_token_abc123"

expires_in
integer
required

Lifetime of the access token in seconds

Example:

3600

token_type
string

Type of token returned

Example:

"Bearer"

refresh_token
string | null

Refresh token that can be exchanged for a new access token

Example:

"refresh_token_abc123"

scope
string | null

Space-delimited scopes granted to the access token

Example:

"enrollment:get enrollment:activate"

issued_token_type
string

URN describing the type of issued token

Example:

"urn:ietf:params:oauth:token-type:access_token"