Getting started

Welcome to the Kumusoft developer platform.

This guide helps you make your first authenticated API request to Kumusoft. Our APIs use OAuth 2.0 with JWT access tokens signed by our authorization server.

Overview

Authentication flow:

Obtain an API Key

Request an OAuth Access Token

Call Kumusoft APIs using the Bearer Token

APIs validate tokens using the JWKS endpoint

Auth Server:

https://api.kumusoft.xyz

JWKS Endpoint:

https://auth.kumusoft.com/.well-known/jwks.json

Step 1 — Obtain an API Key

Before you can authenticate, you must obtain an API Key from Kumusoft.

Example:

API_KEY=kum_d1d2f3e4r5e6f7fh8g9jnefijern939uiw

Treat your API key like a password.

• Never expose it in frontend code
• Store it in environment variables

Step 2 — Request an Access Token

Use the OAuth client_credentials flow to obtain a token.

Token endpoint:

POST https://api.kumusoft.xyz/auth/token

Example:

Example response:

{
  "access_token": "eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9...",
  "token_type": "Bearer",
  "expires_in": 3600
}

Step 3 — Call an API

Include the token in the Authorization header.

Example:

Overview#

Step 1 — Obtain an API Key#

Step 2 — Request an Access Token#

Step 3 — Call an API#

Overview

Step 1 — Obtain an API Key

Step 2 — Request an Access Token

Step 3 — Call an API