Generate an Access Token

Trying to test and see what our APIs are all about quickly? We understand! The first thing you’ll need to make Citi API calls is an Access Token. Use the below tool to generate an Access Token quickly without implementing a full OAuth 2.0 flow. You can then use this token to call other APIs on our platform, either through their inline testing tools, an API testing tool, or your own application. When you’re ready to do a full integration, take a look at our Authorize documentation!

Test Credentials
An Access Token not only identifies you as an application publisher to Citi, but also identifies your end user so you can access their data securely and with their consent. See the table below for the sample accounts and data that we offer in our sandbox. Once you generate an Access Token, you can use it to access the sample data for that sample user.

S.No	Username
1	SandboxUser1
2	SandboxUser2
3	SandboxUser3
4	SandboxUser4
5	SandboxUser5

Step 1: Choose Your Grant Type

There are two Grant Types: 2-Legged (Client Credentials) and 3-Legged (Authorization Code). If you need to get data or perform transactions on behalf of a specific user, you will want to use 3-Legged (for example, to use our Accounts or Money Movement APIs). If you need to simply securely access Citi services without a specific user in mind, you will want to use 2-Legged (for example, to use our Pay With Points or Onboarding APIs).

Step 2: Select App

If you haven’t created an application yet, make sure to go to app page to create a new Client ID and Client Secret. Copy these down in a separate document and paste them below. You will use your Client ID and Client Secret for identifying yourself to Citi for all API calls.

Client ID: This can be grabbed from your applications page.

Client Secret: This is generated from your applications page when you first create your application. You can reset it from the applications page – but keep in mind there will be a delay before you can make a successful API call after you reset your client secret.

Step 3: Choose Test Profile

If you are generating an Access Token for 3-Legged OAuth, select the user for which you are generating the Access Token. This determines which test data set you will receive when you use your token for further test API calls.

Step 4: Generate Access Token

Click the button below to generate your access token.

Generate Token

Your Access Token

Response Status Code

Response Headers

Response Body

Contact Us