Skip to main content
POST
/
v1
/
auth
/
token
curl -X POST 'https://crypto-api.yativo.com/api/v1/auth/token' \
  -H 'Content-Type: application/json' \
  -d '{
    "api_key": "yativo_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx",
    "api_secret": "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
  }'

{
  "success": true,
  "access_token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...",
  "token_type": "Bearer",
  "expires_in": 3600,
  "expires_at": "2026-03-28T11:00:00.000Z",
  "scopes": ["read", "write", "transactions"],
  "refresh_recommendation": {
    "refresh_before_seconds": 300,
    "auto_refresh_enabled": true
  }
}
Start here. All API endpoints require Authorization: Bearer <token>. Exchange your API key credentials for a token using this endpoint — no login session required. Tokens expire after 60 minutes; call this endpoint again to get a fresh one. Your API key never expires.
​
api_key
string
required
Your API key (starts with yativo_). Obtained when you created the key.
​
api_secret
string
required
Your API secret. Shown only once at key creation — store it securely.
This endpoint does not require an Authorization header — use it to bootstrap your authentication.
curl -X POST 'https://crypto-api.yativo.com/api/v1/auth/token' \
  -H 'Content-Type: application/json' \
  -d '{
    "api_key": "yativo_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx",
    "api_secret": "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
  }'

{
  "success": true,
  "access_token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...",
  "token_type": "Bearer",
  "expires_in": 3600,
  "expires_at": "2026-03-28T11:00:00.000Z",
  "scopes": ["read", "write", "transactions"],
  "refresh_recommendation": {
    "refresh_before_seconds": 300,
    "auto_refresh_enabled": true
  }
}