Authentication

Ironclad primarily uses the OAuth 2.0 Authorization Framework to generate API bearer tokens that can be used to authenticate API requests.

See the following documentation to secure an API bearer token and use it to authenticate a request:

1. Register your OAuth client application
2. Request a token
   • Authorization Code Grant
   • Client Credentials Grant
3. Authenticate an Ironclad API resource request

Base URL

API calls must target the base URL of the environment you are using. The examples in this guide will use Ironclad's standard production URL (https://ironcladapp.com). Please log in to your Ironclad account and check the domain to verify the base URL.

Note: If you have purchased a separate sandbox instance, your base URL may differ from your production instance.