Prerequisites

You will need a clientId and clientSecret issued for your tenant. Contact support@sanicus-connect.com if you do not have credentials.

Step 1 — Obtain a Bearer token

Call the auth-server token endpoint with your client credentials. Each client is pre-provisioned with an associated user account — no username parameter is required. Replace {server} with your environment hostname (e.g. services, service-test, or a regional server name).
Response
Save the accessToken — it is valid for 1 hour.

Step 2 — Make an API call

Use the token in the Authorization header for every request. Start with listing the tenants your client has access to:
A successful response returns a paged list of tenants:

Step 3 — Explore the APIs

Account Manager

Users, organisations, and tenant management.

IoT Manager

Sensor data, dashboards, and insights.

Staff Manager

Cleaner management and shift operations.

Report Service

On-demand and scheduled reports.

Tokens expire after 1 hour. Re-call POST /api/auth/token with your client credentials to obtain a fresh token — there is no refresh token mechanism.