Quickstart

This guide shows how to obtain an access token via OAuth 2.1 + PKCE and call the Qonic API with plain HTTP (no SDKs required).

1) Get an access token

The Qonic API uses OAuth 2.1 Authorization Code + PKCE. In short:

  1. Register an application in the Qonic developer portal to get a client_id. Confidential server-side applications also receive a client_secret; SPAs and native apps are public clients and do not.
  2. Generate a PKCE code_verifier and S256 code_challenge, then redirect the user to /v1/auth/authorize with those values, your client ID, redirect URI, state, and requested scopes.
  3. After the user approves, exchange the authorization code for a bearer token via POST /v1/auth/token.

See the Authentication guide for the full flow, or use our Python PKCE sample to get a token in minutes.

2) Make your first request

Replace {{ACCESS_TOKEN}} with the token you obtained, and {{PROJECT_ID}} with a project you can access.

The first request returns a JSON object containing your projects:

The models request returns a JSON object containing the models in the selected project:

What’s next?