Decode with OAuth

Every API request is authenticated with an OAuth 2.0 bearer token. This guide covers getting a token and using it to decode your first VIN.

1. Get a token

The fastest way is the Developer Console, which issues a personal access token for your business's OAuth client. Applications can also exchange credentials at POST /oauth/token.

2. Decode a VIN

Send the token as a bearer token on every request:

curl --request POST \
     --url 'https://digitalwindowstickers.com/api/cars?car[vin]=1C6JJTEG0NL173071' \
     --header 'accept: application/json' \
     --header 'authorization: Bearer YOUR-TOKEN'

The response includes the decoded vehicle and links to its window sticker — see Decode a VIN for the full request and response reference, or try it live from that page.

This guide is still being written. The endpoint reference pages already let you make live requests: start with Decode a VIN.