Authentication via API

To interact with MightyCall API, you must first authenticate your request by obtaining an authorization token. Authentication is performed by sending a POST request to:

https://ccapi.mightycall.com/v4/auth/token

This endpoint returns a bearer token, which is required to access all other API methods. The token is valid for 24 hours, after which it must be refreshed or reissued.

Call Center customers can authenticate only by using their API key + their User key, which is generated by toggling it on for specific users in Integrations → API.

1. Create a new HTTPS request in your API client (we're using Postman here).
   
   

2. Select a method for your API request (we'll need POST for this case) and enter the endpoint: https://ccapi.mightycall.com/v4/auth/token
   
   
3. In the Headers tab, add the following information:
   
   

   Key	Value
   x-api-key	The API key that from your account's API Integration section
   Content-Type	application/x-www-form-urlencoded

   
4. In the Body tab select x-www-form-urlencoded and enter the following:
   
   

   Key	Value
   grant_type	client_credentials
   client_id	The API key that from your account's API section
   client_secret	Your User key

   
   
5. Click to Send the request. As a result, you should receive a 200 OK response containing your access_token (bearer token) valid for 24 hours, of which can be used for authorization in further API requests.
   
   
6. You can use refresh_token to include in the body of your new authentication API request: it will regenerate the bearer token and reset the 24 life cycle timer. In that case, you will need to change grant_type to refresh_token and remove other parameters from the Body tab: