Authentication

Notifyy Public API uses OAuth 2.0 for server-to-server access. Create an API client, keep the client secret on your backend, and exchange the client credentials for an access token.

To get an access token, call POST /oauth2/token with HTTP Basic client authentication. Send grant_type=client_credentials and the required scope in a form URL encoded request body.

Use the returned token on Public API requests as Authorization: Bearer <access_token>. Access tokens are valid for 30 minutes, so request a new token before the current one expires.

Request only the scopes your integration needs. Template submission and template status sync require templates:write.

OAuth discovery and key-set endpoints are available for standard OAuth client libraries that need them, but most integrations only need the token endpoint and the API endpoint they want to call.