Auth

Exchange your client credentials for a bearer token.

Payment Labs has one login for the whole platform. Call POST /login with your client ID and secret to get a token, then send it as Authorization: Bearer <token> on every other request to any Payment Labs API: payouts, payment requests, wallets and payins. Payors and merchants use the same login.

A token expires 3 hours after it is issued. There is no refresh token: log in again.
The role on your credentials decides which operations the token can call. A missing permission returns 403.
A failed login returns 400 with a code that says what is wrong.

See Environments and Authentication for the full flow, roles, and error codes.