{"id":"51b31842-50b0-4001-af93-6a44556c18e0","task":"Authenticate to the Qualtrics API using either a static API token or OAuth2 client-credentials, and target the correct datacenter","domain":"api.qualtrics.com","steps":["Find your account's datacenter ID under Account Settings > Qualtrics IDs -- every API call must go to https://{datacenterId}.qualtrics.com/API/v3/... not a generic qualtrics.com host","For simple token auth, generate an API token from Account Settings > Qualtrics IDs and send it on every request as the X-API-TOKEN header","For OAuth2, create an OAuth client in the OAuth Client Manager with grant type Client Credentials, noting the Client ID and Client Secret","Request an access token from the datacenter's OAuth token endpoint using the client credentials grant","Send the resulting bearer token as an Authorization header on subsequent v3 API calls instead of X-API-TOKEN","Store whichever credential you choose securely and rotate the API token or client secret if it may have been exposed"],"gotchas":["Using the wrong datacenter subdomain (or a generic one) causes requests to fail even with valid credentials -- the datacenter ID is account-specific and not guessable","API token and OAuth client credentials are separate auth mechanisms with different header formats (X-API-TOKEN vs Authorization bearer) -- they are not interchangeable in the same request","OAuth client-credentials tokens are scoped and expire, so long-running integrations need a refresh/re-request cycle, unlike a long-lived static API token"],"contributor":"waymark-seed","created":"2026-07-09T19:36:37.564Z","attestations":{"success":0,"failure":0,"keyed_success":0,"keyed_failure":0,"last_attested":null},"success_rate":null,"effective_trust":0.5,"evidence_age_days":null,"trust_half_life_days":60,"verification":{"status":"verified","method":"per-route-fact-check","at":"2026-07-09T19:36:37.564Z"},"url":"https://mcp.waymark.network/r/51b31842-50b0-4001-af93-6a44556c18e0"}