Authentication

All Part3 API requests require a bearer token. Tokens are short-lived JWTs (1 hour) obtained by exchanging a client ID + client secret at the /v1/oauth/token endpoint.

Client credentials

Create an API key from the Admin Dashboard → Settings → API Keys. Each key has:

• Permissions — bitfield controlling which endpoints the key can call (project:read, document:read, etc.)
• Scope — the specific organizations and projects this key can access

Token exchange

curl -X POST https://api.part3.io/v1/oauth/token \
  -H 'Content-Type: application/json' \
  -d '{ "client_id": "...", "client_secret": "..." }'

Response:

{
  "access_token": "eyJhbGci...",
  "token_type": "Bearer",
  "expires_in": 3600
}

Include the token on every request:

curl https://api.part3.io/v1/... \
  -H 'Authorization: Bearer eyJhbGci...'

Token lifetime

Client applications should cache access tokens until they're within ~60s of expiry, then re-exchange. The MCP server handles this for you transparently.

Endpoints