MeasureOne authenticates your API requests using access tokens. If you do not include the `access_token` when making a request, MeasureOne returns an authentication error.

To gain access to the MeasureOne API, reach out to us on sales@measureone.com. Once you’ve completed the signup process, we’ll provide a live `client_id` & `secret` for use in our API.

You can access our APIs using Access Tokens Or Public Tokens. The Public Tokens are short lived with limited scope while Access Tokens are long lived.

You can access our purge APIs using Purge Tokens.

## Access Tokens

Access Tokens are long-lived tokens that give you access to the MeasureOne infrastructure for your account.

**Access tokens should be used only from your own server side applications.**

## Purge Tokens

Purge Tokens are long-lived credentials intended solely for accessing Compliance APIs. They cannot be used with any other API endpoints. A purge token is valid for a single use only and becomes invalid immediately after it has been used.

**Purge Tokens should be used only from your own server side applications.**

## Public Tokens

Public tokens are short-lived tokens with defined `scope` and `policy`.
The scope indicates the resources and endpoints you can access using these tokens while policy indicates the data you can access using the APIs.

MeasureOne APIs will return a 401 error if the public token is used for scope or policy that is different from the token's scope and policy.

**For example**, if you create a public token for policy having **individual_id** `idv_293241AAjy2EZt3R` and if you try to invoke /individuals/get_by_id for another individual, it will return a 401 error.

The table below defines the currently supported scope.

| API Endpoint | WIDGET | GLOBAL | ENTERPRISE_WIDGET |
|  --- | --- | --- | --- |
| /individuals/new | YES | YES | YES |
| /individuals/get_by_id | YES | YES | YES |
| /individuals/get_items | YES | YES | NO |
| /individuals/delete | NO | YES | YES |
| /datarequests/new | YES | YES | YES |
| /datarequests/update | YES | YES | YES |
| /datarequests/get | YES | YES | YES |
| /datarequests/get_by_id | YES | YES | YES |
| /datarequests/generate_invitation_link | YES | YES | YES |
| /datarequests/notify_user | YES | YES | YES |
| /datarequests/get_invitation_link | YES | YES | YES |
| /datarequests/expire_invitation_link | YES | YES | NO |
| /datarequests/refresh_now | YES | YES | NO |
| /datarequests/enable_refresh | YES | YES | NO |
| /datarequests/disable_refresh | YES | YES | NO |
| /datasources/get | YES | YES | YES |
| /items/new | YES | YES | YES |
| /items/upload | YES | YES | YES |
| /items/get_by_id | YES | YES | YES |
| /items/get_files | YES | YES | NO |
| /items/get_pdf | YES | YES | NO |
| /services/get_academic_summary | NO | YES | YES |
| /services/get_enrollment_status | NO | YES | YES |
| /services/gradscore | NO | YES | NO |
| /services/meritscore | NO | YES | NO |
| /services/get_digest_by_id | NO | YES | NO |
| /services/get_employment_summary | NO | YES | YES |
| /services/get_income_summary | NO | YES | YES |
| /services/get_income_employment_details | NO | YES | YES |
| /services/get_insurance_details | NO | YES | YES |
| /services/get_realized_gains | NO | YES | YES |