Skip to main content

Getting Started

Integrate with the OlaClick Hub in 3 steps: authenticate, get a token, and call the API.

Overview​

1. Get your client_id and client_secret from OlaClick Hub
2. Request a token via OAuth 2.1 (client_credentials)
3. Use the token to call API endpoints

Step 1: Get your credentials​

When you register as a Connector in OlaClick Hub, you receive:

  • client_id — identifies your application
  • client_secret — your secret key (shown only once)

Keep the secret safe. If compromised, revoke and regenerate.

Step 2: Request a token​

To access a company's data, request a Company Token by including the company_id:

curl -X POST https://public-api.olaclick.app/oauth/token \
  -H "Content-Type: application/x-www-form-urlencoded" \
  -d "grant_type=client_credentials\
&client_id=YOUR_CLIENT_ID\
&client_secret=YOUR_CLIENT_SECRET\
&company_id=COMPANY_UUID"

Response:

{
  "access_token": "eyJhbGciOiJSUzI1NiIs...",
  "token_type": "Bearer",
  "expires_in": 3600,
  "scope": "orders:read menu:read"
}

For a complete explanation of the two token types (Connector Token vs Company Token), available scopes, and authentication methods, see the Authentication guide.

Step 3: Call the API​

Use the access_token as a Bearer token in every request:

curl -X GET https://public-api.olaclick.app/v1/orders \
  -H "Authorization: Bearer eyJhbGciOiJSUzI1NiIs..."

Response:

{
  "data": [
    {
      "id": "ord_abc123",
      "public_id": "PE-1234567890",
      "status": "PENDING",
      "total": 2400,
      "created_at": "2026-06-20T14:30:00Z"
    }
  ],
  "pagination": {
    "current_page": 1,
    "per_page": 50,
    "total": 12,
    "has_more": false
  }
}

Token Lifecycle​

  • Tokens expire after the expires_in period (typically 1 hour)
  • Request a new token when the current one expires — do not request one per API call

Next Steps​