Skip to main content
This guide walks through obtaining an access token and listing offerings on the development environment.

​
Prerequisites

  • An active API credential (client_id and client_secret) from the Asset Manager dashboard (dev tenant)
  • At least the offering.read scope enabled on your credential
  • Beta version 2026-07-02 is only available on dev: https://dev.go.simplytokenized.com/_api

​
Step 1 — Authenticate

Request a bearer access token: 
curl -X POST "https://dev.go.simplytokenized.com/_api/auth" \
  -H "Content-Type: application/json" \
  -d '{
    "client_id": "YOUR_CLIENT_ID",
    "client_secret": "YOUR_CLIENT_SECRET",
    "scopes": ["offering.read"],
    "api_version": "2026-07-02"
  }'

const response = await fetch("https://dev.go.simplytokenized.com/_api/auth", {
  method: "POST",
  headers: { "Content-Type": "application/json" },
  body: JSON.stringify({
    client_id: process.env.CLIENT_ID,
    client_secret: process.env.CLIENT_SECRET,
    scopes: ["offering.read"],
    api_version: "2026-07-02",
  }),
});

const { access_token, expires_at } = await response.json();
console.log("Token expires at:", expires_at);

import os
import requests

response = requests.post(
    "https://dev.go.simplytokenized.com/_api/auth",
    json={
        "client_id": os.environ["CLIENT_ID"],
        "client_secret": os.environ["CLIENT_SECRET"],
        "scopes": ["offering.read"],
        "api_version": "2026-07-02",
    },
)
response.raise_for_status()
data = response.json()
access_token = data["access_token"]
Example response: 
{
  "access_token": "eyJhbGciOiJIUzI1NiIs...",
  "token_type": "Bearer",
  "expires_at": "2026-07-12T10:40:00.000Z"
}
The response includes: 
ST-Api-Version: 2026-07-02
ST-Api-Version-Beta: true
Version 2026-07-02 is in beta and only available on development. See Versioning.

​
Step 2 — Call a protected endpoint

Use the access token to list offerings: 
curl "https://dev.go.simplytokenized.com/_api/offerings?limit=10&offset=0&lang=en" \
  -H "Authorization: Bearer YOUR_ACCESS_TOKEN"

​
Other environments

EnvironmentBase URL
Staginghttps://stage.go.floris3.com/_api
Livehttps://go.floris3.com/_api
Use environment-specific credentials for staging and live. Beta API versions are not available outside development.

​
Step 3 — Subscribe to webhooks (optional)

Configure an outbound webhook URL in Administration → API Access → Webhooks to receive order.created and order.status_updated events. See Webhook overview.

​
Token lifetime

Access tokens expire after 10 minutes (600 seconds). Request a new token before expires_at.

​
Troubleshooting

StatusCause
401Invalid client_id or client_secret
403Requested scope not allowed for this credential
429Auth or API rate limit exceeded
See Errors for the full error reference.