Obtain an access token

Add MCP server to your AI tool

Allow AI tools and LLMs to interact with the API documentation portal through MCP.

MCP server URL

https://apidocs.lwolf.com/doc/transact-api/mcp

Standard setup for AI tools providing an mcp.json file

mcp.json 
{
  "Transact API MCP server": {
    "url": "https://apidocs.lwolf.com/doc/transact-api/mcp"
  }
}
Close
POST /oauth/token

Exchanges OAuth client credentials for a JWT access token. The returned access_token must be sent as a Bearer token in the Authorization header on all subsequent requests, together with the lw-subscription-key header.

Note: this endpoint is served from the gateway root (https://gateway.lwolf.com) rather than a service base path.

application/json

Body Required

  • grant_type string Required

    OAuth 2.0 grant type. Always client_credentials.

    Value is client_credentials.

  • client_id string Required

    OAuth client identifier issued by Lone Wolf.

  • client_secret string Required

    OAuth client secret issued by Lone Wolf.

  • audience string Required

    Token audience. Always https://api.lwolf.com.

  • lwt_client_id string(uuid) Required

    Lone Wolf client (tenant) GUID.

Responses

  • 200 application/json

    Token issued successfully.

    Hide response attributes Show response attributes object
    • access_token string

      JWT access token to be sent as a Bearer token.

    • token_type string
    • expires_in integer

      Token lifetime in seconds.
  • 400 application/json

    The request is malformed or contains invalid parameters.

    Hide response attributes Show response attributes object
    • error string

      Error code or short error name.

    • message string

      Human-readable error description.
  • 401 application/json

    The access token is missing, invalid, or expired.

    Hide response attributes Show response attributes object
    • error string

      Error code or short error name.

    • message string

      Human-readable error description.
  • 403 application/json

    The caller is not permitted to perform this operation.

    Hide response attributes Show response attributes object
    • error string

      Error code or short error name.

    • message string

      Human-readable error description.
  • 404 application/json

    The requested resource does not exist.

    Hide response attributes Show response attributes object
    • error string

      Error code or short error name.

    • message string

      Human-readable error description.
POST /oauth/token 
curl \
 --request POST 'https://gateway.lwolf.com/oauth/token' \
 --header "Content-Type: application/json" \
 --data '"{\n  \"grant_type\": \"client_credentials\",\n  \"client_id\": \"\u003cyour client id\u003e\",\n  \"client_secret\": \"\u003cyour client secret\u003e\",\n  \"audience\": \"https://api.lwolf.com\",\n  \"lwt_client_id\": \"\u003cyour Lone Wolf client GUID\u003e\"\n}"'
Request example 
{
  "grant_type": "client_credentials",
  "client_id": "<your client id>",
  "client_secret": "<your client secret>",
  "audience": "https://api.lwolf.com",
  "lwt_client_id": "<your Lone Wolf client GUID>"
}
Response examples (200) 
{
  "access_token": "string",
  "token_type": "Bearer",
  "expires_in": 42
}
Response examples (400) 
{
  "error": "string",
  "message": "string"
}
Response examples (401) 
{
  "error": "string",
  "message": "string"
}
Response examples (403) 
{
  "error": "string",
  "message": "string"
}
Response examples (404) 
{
  "error": "string",
  "message": "string"
}