Authentication

Levl authenticates your API requests using the OAuth 2.0 Client Credentials flow. You request an access token using your client credentials (client_id and client_secret), Levl verifies them and issues an API access token. Once obtained the time-limited access token can be used to make requests to the other endpoints of the Levl API.

Whilst we also leverage IP whitelisting to enforce security at the network layer in addition to authentication at the API layer you should take the necessary steps to ensure your API credentials are stored securely.

Example

curl -X 'https://login.sandbox.api.levl.ch/oauth/token' \
--header 'Content-Type: application/json' \
--data '{
    "client_id": "--insert your id--",
    "client_secret": "--insert your secret--",
    "audience": "https://sandbox.api.levl.ch",
    "grant_type": "client_credentials"
}'

Obtaining your API credentials

Once you've onboarded the Levl team will provide you with your API credentials for your Levl API Sandbox environment client account and later with your API credentials for your Levl API Production environment client account.