Get Access Token

Pay4Power uses bearer-token authentication for protected B2B API calls. Start every integration by exchanging your client credentials for an access token, then include that token in the Authorization header for subsequent requests.

Token endpoint

1
POST /auth/token

Request credentials

Keep credentials server-side. Do not ship them in mobile apps, browser code, or public repositories.

Example request

$
curl --request POST "https://p4p-core-bill-payments-service.dev.payinvert.com/api/v2.1/b2b/auth/token" \
>
  --header "Content-Type: application/json" \
>
  --data '{
>
    "clientId": "YOUR_CLIENT_ID",
>
    "clientSecret": "YOUR_CLIENT_SECRET"
>
  }'

Use the token

1
Authorization: Bearer <access_token>

After you receive the token, call the services and providers endpoints to discover the bill-payment products available to your account.

Operational notes

• Request a fresh token before the current token expires.
• Store tokens only in secure backend memory or a protected secret store.
• Treat authentication failures as non-retryable until credentials or access permissions are corrected.