Standard Metrics Authentication

generated: '2026-07-21'
method: searched
source: https://docs.standardmetrics.io/api-reference/setting-up
docs: https://docs.standardmetrics.io/guides/initialsetup
description: >-
  Standard Metrics authenticates with OAuth2 client-credentials. A firm admin creates an
  OAuth application in Developer Settings, producing a client_id and client_secret. Those
  are Basic-auth-encoded and POSTed to the token endpoint (grant_type=client_credentials)
  to obtain a short-lived Bearer JWT (expires_in 3600s), which is then sent as
  'Authorization: Bearer <token>' on every API request. Per-key data access is governed by
  admin-configured user permissions.
summary:
  types: [oauth2, http]
  oauth2_flows: [clientCredentials]
  bearer_format: JWT
  token_endpoint: https://api.standardmetrics.io/o/token/
  token_ttl_seconds: 3600
schemes:
- name: OAuth2 Client Credentials
  type: oauth2
  flow: clientCredentials
  tokenUrl: https://api.standardmetrics.io/o/token/
  scopes: [read, write, all]
  note: client_id/client_secret exchanged (Basic auth) for a Bearer access token.
  sources: [https://docs.standardmetrics.io/api-reference/setting-up]
- name: basicAuth
  type: http
  scheme: basic
  note: Used only on the token endpoint (client_id:client_secret) to obtain a Bearer token.
  sources: [openapi/standard-metrics-auth-openapi.json]
- name: BearerAuth
  type: http
  scheme: bearer
  bearerFormat: JWT
  note: Applied to all data endpoints across the main and investment-data APIs.
  sources:
  - openapi/standard-metrics-main-openapi.json
  - openapi/standard-metrics-investment-data-openapi.json