Skip to main content

Authentication

The V4 API supports two authentication methods.

OAuth 2.0 (client credentials)​

Applications authenticate using the client credentials flow and exchange their client ID and secret for an access token at the token endpoint:

POST /v4/oauth/token

To get a client ID and secret, register an API application.

Scopes​

Request only the scopes your integration needs. The available scopes are:

  • public
  • user
  • organizer
  • participant
  • project
  • mlh
  • mlh:read:user, mlh:read:event
  • mlh:write:user, mlh:write:event

Bearer JWT​

The API also accepts a bearer token in the standard Authorization header:

Authorization: Bearer <JWT>