> ## Documentation Index
> Fetch the complete documentation index at: https://apidocs.seismic-cards.systems/llms.txt
> Use this file to discover all available pages before exploring further.

# Get an access token

> Exchange a Seismic API key (`client_id` + `client_secret`) for a short-lived bearer access token. This is the only credential your services ever need — Seismic manages every upstream provider on your behalf. **No `Authorization` header is required** — this endpoint issues the token; it does not consume one.



## OpenAPI

````yaml /openapi.json post /v1/oauth/token
openapi: 3.1.0
info:
  title: Seismic Card Issuance API
  version: 1.0.0
  description: >-
    The Seismic Card Issuance API is the integration surface for issuing and
    managing cards. Authenticate with your Seismic API key, onboard applicants,
    run KYC, and issue virtual or physical cards — all through one white-labeled
    API.
  contact:
    name: Seismic Support
    url: https://seismic.systems
servers:
  - url: https://api.seismic-cards.systems
    description: Production
  - url: http://localhost:4000
    description: Local development
security:
  - bearerAuth: []
tags:
  - name: Authentication
    description: Exchange Seismic API keys for a short-lived access token.
  - name: Applicants
    description: End-users and businesses, plus their identity verification (KYC).
  - name: KYC
    description: >-
      Identity verification settings, hosted sessions, BYOK share tokens, and
      issuer readiness.
    x-group: Identity verification (KYC)
  - name: Accounts
    description: Funding accounts that back issued cards.
  - name: Cardholders
    description: Approved applicants turned into cardholders.
  - name: Cards
    description: Issue and manage virtual and physical cards.
  - name: Transactions
    description: Card transaction history from the issuer or local ledger.
  - name: Widget SDK
    description: >-
      Public Seismic-hosted Widget.js for Method 1 card reveal (no auth).
      PAN/CVV render inside PCI iframes.
  - name: Card funding
    description: >-
      Fund prepaid cards with stablecoins: Seismic wallet service or
      bring-your-own (BYO) external wallet.
paths:
  /v1/oauth/token:
    post:
      tags:
        - Authentication
      summary: Get an access token
      description: >-
        Exchange a Seismic API key (`client_id` + `client_secret`) for a
        short-lived bearer access token. This is the only credential your
        services ever need — Seismic manages every upstream provider on your
        behalf. **No `Authorization` header is required** — this endpoint issues
        the token; it does not consume one.
      operationId: createOauthToken
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/OAuthTokenRequest'
            example:
              client_id: seismic_1a2b3c4d5e6f7g8h
              client_secret: seismic_sk_live_9i8u7y6t5r4e3w2q1...
      responses:
        '200':
          description: Access token issued.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/TokenResponse'
              example:
                access_token: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...
                token_type: Bearer
                expires_in: 3600
        '401':
          $ref: '#/components/responses/Unauthorized'
      security: []
components:
  schemas:
    OAuthTokenRequest:
      type: object
      required:
        - client_id
        - client_secret
      properties:
        client_id:
          type: string
          description: The `prefix` of your Seismic API key.
        client_secret:
          type: string
          description: The secret shown once when the key was created.
    TokenResponse:
      type: object
      properties:
        access_token:
          type: string
        token_type:
          type: string
          example: Bearer
        expires_in:
          type: integer
          example: 3600
    Error:
      type: object
      properties:
        error:
          type: object
          properties:
            code:
              type: string
              description: Stable, machine-readable error code.
            message:
              type: string
              description: Human-readable explanation.
  responses:
    Unauthorized:
      description: Missing or invalid credentials.
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/Error'
          example:
            error:
              code: INVALID_CLIENT
              message: Invalid client credentials
  securitySchemes:
    bearerAuth:
      type: http
      scheme: bearer
      bearerFormat: JWT
      description: >-
        Bearer access token obtained from `POST /v1/oauth/token` using your
        Seismic API key.

````