Application API Tokens

List application API tokens

get

Returns a paginated list of active application API tokens. Client secrets are not included.

Authorizations

bearerAuthmutualTLS

AuthorizationstringOptional

Bearer authentication header of the form Bearer <token>.

Query parameters

orderstring · enumOptionalPossible values:

per_pageinteger · min: 1 · max: 50Optional

pageinteger · min: 1Optional

Responses

200

Application API tokens loaded

application/json

get/application/applications

HTTPcURLJavaScriptPython

GET /application/applications HTTP/1.1
Host: zyfla-wallet-sandbox.meeco.cloud
Authorization: Bearer YOUR_SECRET_TOKEN
Accept: */*

200

Application API tokens loaded

{
  "applications": [
    {
      "id": "123e4567-e89b-12d3-a456-426614174000",
      "name": "text",
      "client_id": "text",
      "created_at": "2026-07-13T19:21:43.078Z"
    }
  ],
  "meta": {
    "order_by": "name",
    "order": "ASC",
    "order_from_params": true,
    "per_page": 10,
    "per_page_from_params": true,
    "records_count": 100,
    "page": 1,
    "page_count": 10
  }
}

Create application API token

post

Creates a new application API token with a unique name. Returns the client_id and client_secret once — the secret is not stored and cannot be retrieved again.

Authorizations

bearerAuthmutualTLS

AuthorizationstringOptional

Bearer authentication header of the form Bearer <token>.

Body

application/json

namestring · max: 255Required

Unique display name for the application API token

Responses

201

Application API token created

application/json

idstring · uuidRequired

namestringRequired

client_idstringRequired

client_secretstringRequired

Plaintext secret — returned once and never stored

created_atstring · date-timeRequired

400

Invalid request payload

application/json

post/application/applications

HTTPcURLJavaScriptPython

POST /application/applications HTTP/1.1
Host: zyfla-wallet-sandbox.meeco.cloud
Authorization: Bearer YOUR_SECRET_TOKEN
Content-Type: application/json
Accept: */*
Content-Length: 15

{
  "name": "text"
}

{
  "id": "123e4567-e89b-12d3-a456-426614174000",
  "name": "text",
  "client_id": "text",
  "client_secret": "text",
  "created_at": "2026-07-13T19:21:43.078Z"
}

Delete application API token

delete

Soft-deletes an application API token. The token will no longer be usable for authentication.

Authorizations

bearerAuthmutualTLS

AuthorizationstringOptional

Bearer authentication header of the form Bearer <token>.

Path parameters

idstring · uuidRequired

Responses

204

Application API token deleted

No content

400

Invalid path param

application/json

404

Application API token not found

application/json

delete/application/applications/{id}

HTTPcURLJavaScriptPython

DELETE /application/applications/{id} HTTP/1.1
Host: zyfla-wallet-sandbox.meeco.cloud
Authorization: Bearer YOUR_SECRET_TOKEN
Accept: */*

No content

Exchange client credentials for access token

post

Exchanges client credentials for a JWT access token using the OAuth2 Client Credentials grant (RFC 6749 §4.4). Accepts both application/json and application/x-www-form-urlencoded.

Supported Standards

• RFC 6749 - OAuth 2.0 Client Credentials Grant (Section 4.4)

Body

application/jsonapplication/x-www-form-urlencoded

grant_typestring · enumRequiredPossible values:

client_idstringRequired

client_secretstringRequired

Responses

200

Access token issued

application/json

access_tokenstringRequired

token_typestring · enumRequiredPossible values:

expires_inintegerRequired

Token lifetime in seconds

400

Invalid request payload

application/json

401

Invalid client credentials

application/json

post/application/token

HTTPcURLJavaScriptPython

POST /application/token HTTP/1.1
Host: zyfla-wallet-sandbox.meeco.cloud
Content-Type: application/json
Accept: */*
Content-Length: 77

{
  "grant_type": "client_credentials",
  "client_id": "text",
  "client_secret": "text"
}

application/jsonapplication/x-www-form-urlencoded

{
  "access_token": "text",
  "token_type": "Bearer",
  "expires_in": 1
}