API authentication

Private Integration Token

1. 1
   Settings → API → Create PIT

   Name it for the script using it.
2. 2
   Pick scopes

   Granular — contacts.read, opportunities.write, etc.
3. 3
   Use as Bearer token

   Authorization: Bearer <token> on every request.

OAuth 2.0 (for apps)

• Register app in Marketplace.
• Client ID and secret issued.
• Users install via /oauth/authorize.
• Authorization code exchange for access + refresh tokens.
• Refresh tokens rotate on use.