Log in
We recommend creating a dedicated Aiyoti user for each integration, with only the account access and permissions it needs. Use that user’s credentials instead of a person’s everyday login so the integration’s access can be managed independently. Call Log in (POST /Users/Login) with your email and password. The response includes access and refresh credentials plus user and account information.
Keep credentials in secure server-side storage and out of public code and logs.
Authenticate asset requests
Send theaccess token returned by Login in the AccessKey request header:
access and refresh tokens are accepted in this header. Use access for asset requests and reserve refresh for credential renewal.
Refresh credentials
Call Refresh credentials (POST /Users/RefreshTokens) with the refresh token returned by Login: