Authentication
Keep NIXZ access tokens server-side and scoped to your integration.
Authenticated endpoint groups appear after you sign in to this portal. Your application should use the credentials and flow assigned to its NIXZ account.
Send credentials safely
Keep tokens in server-side secret storage. Add the bearer token only when your server calls a protected NIXZ endpoint.
Authorization: Bearer <access-token>
Accept: application/jsonToken handling checklist
Store secrets outside source control and client bundles.
Refresh or replace tokens through your configured authorization flow.
On an authorization failure, stop retrying and request a new token.
Portal sign-in is separate
Signing in here reveals documentation your account can access. It does not expose your application credentials in the browser.