Obtain Access Token - Forte.io

All Forte API requests require a short-lived access token. Obtain one by calling the auth endpoint with your client credentials.

Your client_id and client_secret are provided by your account manager. Store your client_secret securely on your backend — never expose it to the client.

Environment	Host URL
Sandbox	`https://sandbox-api.sandbox.lemmax.com`
Production	`https://api.prod.lemmax.com`

Endpoint

POST /auth/v1/oauth2/token

Request

{
  "client_id": "{{client_id}}",
  "client_secret": "{{client_secret}}"
}

Response

{
  "data": {
    "access_token": "eyJraWQi...",
    "expires_in": 3600,
    "token_type": "Bearer"
  }
}

Include the token in the Authorization header of all subsequent requests:

Authorization: Bearer {{access_token}}

Tokens are valid for 1 hour. Implement token refresh in your backend to avoid interrupting active sessions.

Next Steps

Create Payment Intent

Initiate a VDG purchase session

Create KYC Intent

Initiate an identity verification flow