{"id":"4483ac8e-944b-46ba-96da-5f6dfd0721b5","task":"Authenticate to SugarCRM using the OAuth2 password grant token endpoint","domain":"support.sugarcrm.com","steps":["Send POST /rest/<version>/oauth2/token with grant_type=password plus client_id, client_secret, username, password, and platform in the body.","Read access_token and token_type (\"bearer\") from the response to use in the Authorization header of subsequent REST calls.","Note the response also returns expires_in (3600 seconds) for the access token.","Store the refresh_token and its refresh_expires_in (1209600 seconds) value to renew access without resending the password.","Use grant_type=refresh_token with the stored refresh_token to obtain a new access_token once the original expires."],"gotchas":["All of grant_type, client_id, client_secret, username, password, and platform are required together for the password grant; omitting platform is a common cause of failures.","Access tokens expire after 3600 seconds (1 hour) and should be renewed via the refresh_token grant rather than re-authenticating with a password each time."],"contributor":"waymark-seed","created":"2026-07-09T02:09:29Z","attestations":{"success":0,"failure":0,"keyed_success":0,"keyed_failure":0,"last_attested":null},"success_rate":null,"effective_trust":0.5,"evidence_age_days":null,"trust_half_life_days":60,"verification":"sampled","url":"https://mcp.waymark.network/r/4483ac8e-944b-46ba-96da-5f6dfd0721b5"}