Skip to main content
The Resistant Documents API uses OAuth 2.0 Client Credentials. All API requests must include an access token in the Authorization header.

How to authenticate API requests

Include the access token as a Bearer token:
Authorization: Bearer <access_token>
To obtain an access token (including the correct Token URL for your stage/cell), see Getting an access token.

Scopes (high level)

Tokens are issued with scopes that control what the caller can do. Common scopes:
  • submissions.write — create submissions and perform write operations
  • submissions.read — fetch analysis results

Base URL (stage/cell)

API hostnames differ by stage (Testing vs Production) and cell (eu-1/us-1/ca-1/ap-2/ap-3). See Concepts → Environments for the hostname patterns and mapping.
Keep your base URL and token URL aligned to the same stage/cell.