## 5. API Authentication(OAuth2 Client Credentials)

Theropay uses **OAuth2 Client Credentials Flow** for server-to-server authentication.

Partners exchange:

- **Client ID**
- **Client Secret**


for an Access Token, which is then included in authorization headers for all API calls.

To obtain:

- **Access Token**