Obtain or refresh an access token
OAuth 2.0 token endpoint. Use grant_type app_credentials with app_id/app_secret for the initial token, or grant_type refresh_token to rotate. Advanced: grant_type act_as (RFC-8693 token-exchange; the URN urn:ietf:params:oauth:grant-type:token-exchange is accepted as an alias) mints a short-lived, member-scoped token on behalf of one of your OWN federated members — send app_id/app_secret plus subject (default subject_type external_user_id). The delegated token is authorized at member ∩ app scope and carries NO refresh token (re-run act_as instead). Returns the token object directly (NOT wrapped in the standard envelope) and no token_type field — always send the token as Authorization: Bearer <access_token>. Token lifetimes are environment configuration: derive expiry from expires_in, never hardcode.
Request Body
application/json
TypeScript Definitions
Use the request body type in TypeScript.
Response Body
application/json
application/json
application/json
curl -X POST "https://example.com/auth/accessToken" \ -H "Content-Type: application/json" \ -d '{ "app_id": "string", "app_secret": "string", "grant_type": "app_credentials" }'{ "access_token": "string", "expires_in": 0, "refresh_token": "string", "refresh_token_expires_in": 0}OpenAPI reference
Every operation of the Keyspace Third-Party Application API (version 1.15.0) with request and response schemas, code samples and a request playground.
List meeting rooms, optionally filtered to a free time window GET
Not paginated — returns the full filtered set (no meta). Pass startDateTime + endDateTime to get only rooms free to book for that window — a room whose cleaning time (cleanupMinutes) the window would run into is left out too; rooms free but not bookable for a configuration reason carry unavailableReason (OPERATING_HOURS or BREAK_TIME). Absence of unavailableReason means bookable.