Getting started

Environments

Environment	Token endpoint	API base
Staging	https://stgoauth.mobixone.co.za/oauth2/token	https://stgxcis.mobixone.co.za:9001
Production	https://oauth.mobixone.co.za/oauth2/token	https://xcis.mobixone.co.za:9001

Note

Staging and production are completely separate systems. Credentials issued for staging will not work in production, and vice versa.

Your credentials

You will be issued:

Item	Description
client_id	Your unique client identifier
client_secret	Your secret — treat as a password
Scopes	The API capabilities your account is authorised for (see Scopes)

Important: your client_secret is shown to you once, at the time it is issued. It cannot be retrieved afterwards. Store it securely (a secrets manager or equivalent). If it is lost, a new secret must be issued.

Never embed your secret in client-side code, mobile applications, or anywhere it could be exposed publicly. This credential is for server-to-server use only.

Next, see Authentication to exchange these credentials for an access token.

Support

For credential issues, scope changes, or integration questions, contact your XCIS technical contact.

When reporting a problem, please include:

• Your client_id (never your client_secret)
• The environment (staging or production)
• The endpoint called
• The HTTP status and error response received
• An approximate timestamp

Do not include full access tokens in support tickets or emails.