Truss Authentication

generated: '2026-10-22'
method: searched
generator: extract-docs-artifacts.py (local)
source: https://docs.trusspayments.com/guides/authentication/overview/index.md
sources:
- https://docs.trusspayments.com/guides/authentication/overview/index.md
- https://docs.trusspayments.com/guides/authentication/oauth-integration-guide/index.md
- https://docs.trusspayments.com/guides/authentication/scopes/index.md
- https://docs.trusspayments.com/guides/authentication/overview
description: Authentication schemes for Truss API
schemes:
- type: http-bearer
  name: Bearer JWT
  evidence: Truss API endpoints use **Bearer token** authentication. All API requests require a valid JWT access token in the `Authorization`
    header.
  location: header
  header: Authorization
  flows:
  - authorization_code
  authorize_url: https://app.trusspayments.com/oauth/authorize
  scopes:
  - offline_access
  - payment_intent.inbound:read
  - payment_intent.inbound:write
  - payment_intent.outbound:read
  - payment_intent.outbound:write
  - contacts:read
  - contacts:write
  - transactions:read
  - wallets:read
  - company:read
  - accounts:read
  how_to_obtain: Obtain OAuth credentials (client_id, client_secret, redirect_uri) from Truss, then perform the OAuth 2.0 Authorization Code flow
    to receive an access token.
- type: oauth2
  name: OAuth 2.0 Authorization Code
  evidence: Access tokens are obtained through the OAuth 2.0 Authorization Code flow on the Truss Auth server.
  flows:
  - authorization_code
  authorize_url: https://app.trusspayments.com/oauth/authorize
  scopes:
  - offline_access
  - payment_intent.inbound:read
  - payment_intent.inbound:write
  - payment_intent.outbound:read
  - payment_intent.outbound:write
  - contacts:read
  - contacts:write
  - transactions:read
  - wallets:read
  - company:read
  - accounts:read
  how_to_obtain: Contact Truss to obtain client_id, client_secret, and approved redirect_uri, then follow the OAuth Integration Guide to perform
    the Authorization Code flow.
- type: oauth2
  name: OAuth 2.0 Token Endpoint
  evidence: Use the **Base Auth URL** to complete the authorization code exchange and to refresh tokens.
  flows:
  - authorization_code
  - refresh_token
  token_url: https://auth.foundation.trusspayments.com/v1/oauth2/token
  how_to_obtain: POST to the token endpoint with grant_type=authorization_code (or refresh_token) along with client_id, client_secret, and other
    required parameters.
docs: https://docs.trusspayments.com/guides/authentication/overview/index.md