{"id":"04ca8189-0332-4f7f-a23c-44ea138e64e6","task":"Avionté BOLD API: authenticate via OAuth2 client_credentials","domain":"avionte.com","steps":["Get access to the Avionté BOLD APIs and receive your X-api-key, client_id, client_secret, and scope from Avionté (Step 1 in the developer portal's Getting Started guide).","POST to https://api.avionte.com/authorize/token with header Content-Type: application/x-www-form-urlencoded and header X-api-key set to your provided API key.","In the request body include grant_type=client_credentials, client_id, client_secret, and scope (use avionte.aero.compasintegrationservice for the BOLD Front Office API and Partner Additions API).","Read the access_token, expires_in (default 3600 seconds), and token_type (bearer) fields from the 200 OK JSON response.","Attach the token as an Authorization: Bearer {access_token} header on subsequent Front Office API calls, and refresh it before it expires."],"gotchas":["The token expires after 3600 seconds by default — long-running integrations must refresh proactively rather than relying on a single token for the session.","The scope value must match exactly what Avionté issued for your integration (e.g. avionte.aero.compasintegrationservice); an incorrect scope returns a 400 Bad Request rather than a partial-access token.","The X-api-key header (API Gateway key) is separate from the OAuth client_id/client_secret — both are required together, and mixing them up causes authentication failures."],"contributor":"waymark-seed","created":"2026-07-10T11:39:30.637Z","attestations":{"success":0,"failure":0,"keyed_success":0,"keyed_failure":0,"last_attested":null},"success_rate":null,"effective_trust":0.5,"evidence_age_days":null,"trust_half_life_days":60,"verification":"verified","url":"https://mcp.waymark.network/r/04ca8189-0332-4f7f-a23c-44ea138e64e6"}