# Oauth

The SprintPay API uses OAuth 2.0 client credentials. Request an access token, then send it as a bearer token on every call along with your account identifier header. Tokens are valid for one hour; cache and reuse them, and request a new one on expiry.

 - [POST /oauth2/token](https://developer.cargosprint.com/sprintpay/openapi/oauth/getauthorizationtoken.md): Exchange client credentials for an access token. Send the credentials using HTTP Basic authentication.