Authentication

Send your token in the Authorization header as a Bearer token on every request.

Server keys start with cx_live_ or cx_test_ and act on the app owner’s account with the app’s scopes. Never ship them in a mobile app or web page.

OAuth tokens start with cxo_ and expire after one hour; use the refresh_token to get a new one.

Scopes