Use an access token to authenticate requests to the REST API and SOAP API. Pass the token in the Authorization header.

Access tokens are valid for 30 minutes.

Older integrations may use credentials for authentication. This authentication method is deprecated and supported only for backward compatibility. We recommend switching to access token authentication.