Client Credentials

The simplest way to authenticate — exchange a client_id and client_secret for an access token.

When to Use

Server-to-server communication
AI agent authentication
Background services

Flow

POST /oauth/token
Content-Type: application/json

{
  "grant_type": "client_credentials",
  "client_id": "your-client-id",
  "client_secret": "your-client-secret"
}

Response:

{
  "access_token": "eyJ...",
  "token_type": "Bearer",
  "expires_in": 3600
}

SDK Usage

import { BKeyClient } from '@bkey/sdk';

const bkey = new BKeyClient({
  clientId: process.env.BKEY_CLIENT_ID!,
  clientSecret: process.env.BKEY_CLIENT_SECRET!,
});

// Token is automatically obtained and refreshed

from bkey import BKeyClient

client = BKeyClient(
    client_id="your-client-id",
    client_secret="your-client-secret",
)

# Token is automatically obtained and refreshed