Authentication

The API authenticates with a short-lived bearer access token. Obtain one through the Authenticate user endpoint, then send it on every request:

Access tokens expire after one hour. Exchange a refresh token for a new one without prompting the user again — see Refresh token.

curl --url https://api.sysos.app/v1/users \
  --header "Authorization: Bearer ACCESS_TOKEN"

A missing or invalid token returns 401 Unauthorized.