Run in Apidog
All IBISWorld API requests require authentication. We use the industry standard OAuth 2.0 protocol to secure access control. Getting Started# 1.
Obtain Credentials Contact your Client Relationship Manager if you don’t have those credentials. 2.
Generate Access Token 24 hours .
3.
Using the Access Token
HTTP Header: Authorization: Bearer <access_token>
Header: Content-Type: application/json
🛡️ Security & Best Practices# Keep your credentials safe - never expose your Client ID, username, password, or tokens in public repositories.
Use HTTPS for all interactions to protect data in transit.
Store and refresh tokens securely - only request new tokens when the old one is expired or about to expire.
Least privilege - only request permissions/scopes necessary for your use case.
Rotate credentials - if compromised or at regular intervals.
Summary Checklist# Ensure you have Client ID, Username, Password
Generate access token via the /authentication/token endpoint
Include Authorization: Bearer <token> in all API calls
Refresh token every ~24 hours as needed
Follow security best practices to protect your credentials
Note: If you believe there is a security breach with your credentials or tokens, contact api‑support@ibisworld.com immediately.Request Body Params application/json
{
"ClientId" : "XXXXX" ,
"Username" : "XXXXXXXX" ,
"Password" : "********"
} Request Code Samples
curl --location --request POST '/authentication/token' \
--header 'Content-Type: application/json' \
--data-raw '{
"ClientId": "XXXXX",
"Username": "XXXXXXXX",
"Password": "********"
}' Responses application/json Generate Code
{
"access_token" : "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9..." ,
"expires_in" : 86399 ,
"status" : "OK"
}
Modified at 2025-10-24 01:33:32
