All requests to the OAuth 2.0 endpoint must be given your credentials in the form of a basic authentication.
To comply with the HTTP requirements, your Client ID and Secret should be encoded in base 64.
When requesting an Access Token, use the client_credentials grant type, then request the scope or scopes you wish to have access to. These scopes can be any or all of the following, separated by a space:
Grants access to the account endpoint.
Grants access to the events endpoint.
Grants access to the places endpoint.
Grants access to the signals endpoint.
Access Token Lifetime
Please note that Access Tokens requested via the client_credentials grant type never expire.
Revoking an Access Token
Access Tokens never expire so once you have it, it's yours for the life of your PredictHQ API subscription. However, if you think your token may have been compromised, you have the power to revoke it at any time.
Accessing Protected Resources
Before you can harness the full power of PredictHQ's event intelligence, you need to authenticate your requests using your Access Token.
Once again, to make it easy for you, PredictHQ follows the standard as outlined in the OAuth 2.0 Bearer Token reference.