# Quick Start All API calls require a Bearer token in the request header. - Token validity: 1 hour - Testing: reauthenticate when required - Production: implement a refresh token mechanism ## Step 1: Download the API Definition Open the API catalog, select your product, and go to **API Documentation**. Download the OpenAPI definition in YAML or JSON from the top of the page. YAML and JSON download buttons at the top of the API definition page [View full-size image — YAML and JSON download buttons](/assets/apidownloadbuttons.4e9acb9494203363a063857396455c82eff57027845135275b25e5da82560365.e20e6b26.png) You can test with the in-portal Try It flow or import the definition into an external API client such as Postman or Bruno. In external tools, create a persistent token variable and pass it in the `Authorization` header for subsequent endpoint calls. Refresh or replace the token after 1 hour. ## Step 2: Authenticate Note This example uses the `Sandbox` environment. 1. Open the **Authenticate** endpoint. 2. Click **Try it**. 3. Select your environment in the top-right corner. 4. Enter `username` and `password` in the request body. 5. Click **Send** and copy the returned bearer token. The Try it button on an endpoint [View full-size image — Try it button](/assets/tryitbutton.aeb0191c716d37eb8d92cea8f1b42d2d8b1400501f1df8571903daec335feeda.e20e6b26.png) Authenticate endpoint response showing the returned bearer token [View full-size image — Authenticate endpoint response](/assets/authenticateendpoint.ad8e3164dc5f5c7e0ed231bfe8f315236fbbb95422bd7330b8cb8d001edb5c05.e20e6b26.png) ## Step 3: Send Your First Request 1. Open the endpoint you want to test. 2. Click **Try it**. 3. Go to **Security** and confirm `Authorization` is set to **JWT**. 4. Set `bearerToken_token` with your bearer token value. 5. If the variable does not exist, create one and reference it as `{{variable_name}}`. 6. Add all required endpoint parameters before sending the request. 7. The **Try it** console shows the available parameters for the selected endpoint. Complete any required fields to ensure a valid request. 8. Send the request. Security tab showing where to set the bearer token variable [View full-size image — Bearer token variable setup](/assets/authenticatevariable.c231873bb620f87f2239f4482c8b82b52a3a5d4480c89bfaf2505da1afa863ba.e20e6b26.png) ## Resources - API errors: [Error Responses](/connect-apis-catalog/information/errorcodes)