---
title: "Overview"
description: "Overview of the Morningstar Authentication API."
url: "https://developer-beta.morningstar.com/authentication-api"
image: "https://developer-beta.morningstar.com/_og/d/c_Ocean.takumi,title_~T3ZlcnZpZXcgfCBBdXRoZW50aWNhdGlvbiBBUEk,description_Overview+of+the+Morningstar+Authentication+API.,props_eyJ0aGVtZSI6eyJtb2RlIjoibGlnaHQiLCJjb2xvcnMiOnsicHJpbWFyeSI6IiMwMDAwMDAifX19,p_Ii9hdXRoZW50aWNhdGlvbi1hcGki,s_Dt3h9EMsaNRaSP1w.png"
---

-   [APIs](https://developer-beta.morningstar.com/apis)
-   [API Catalog](https://developer-beta.morningstar.com/api-catalog)
-   [API Assistant MCP Server](https://developer-beta.morningstar.com/api-assistant-mcp)
-   [Guides](https://developer-beta.morningstar.com/api-guides)
-   [Trial Access](https://developer-beta.morningstar.com/trial-access)

# Authentication API

Generate access tokens that authorize API calls.

# Authentication API

[View Markdown](https://developer-beta.morningstar.com/authentication-api/authentication-api.md)[Download Markdown](https://developer-beta.morningstar.com/authentication-api/authentication-api.md)

The Authentication API is where you get the access token that every other Direct Web Services API requires. You send your credentials once, receive a signed token, and include the token in each request to the other APIs.

New to the API? Start with [Getting Started](https://developer-beta.morningstar.com/authentication-api/getting-started).

## [At a Glance](#at-a-glance)

| Feature        | Details                                                          |
| :------------- | :--------------------------------------------------------------- |
| Purpose        | Authenticate your account and generate an access token.          |
| Endpoint       | One POST endpoint, /token/oauth.                                 |
| Credentials    | Your username and password, sent with HTTP Basic authentication. |
| Token          | A signed JSON Web Token (JWT), used as a Bearer token.           |
| Token lifetime | 60 minutes. A token can be reused for any number of requests.    |

## [Key Capabilities](#key-capabilities)

-   Authenticate with your credentials and receive a token in one request.
-   Use the same token for any number of requests to the other Direct Web Services APIs during its lifetime.
-   Get the time to expiry with every token, so that you can refresh it before it expires.

## [How It Works](#how-it-works)

1.  **Prepare your credentials.** Combine your username and password as `username:password`, and Base64-encode them.
2.  **Request a token.** Send them in a `POST` request to the token endpoint.
3.  **Use the token.** Send it as a `Bearer` token in the `Authorization` header of each request to the other APIs.
4.  **Refresh it.** When the token expires, request a new one.

## [In This Guide](#in-this-guide)

| Section             | What You'll Find                             |
| :------------------ | :------------------------------------------- |
| Getting Started     | The workflow for getting your first token.   |
| Core Concepts       | Credentials, tokens and token lifetime.      |
| Get an Access Token | Request a token and read the response.       |
| Manage Tokens       | Reuse tokens, track expiry and refresh them. |
| Quick Lookup        | Reference for API Inputs and Error Messages. |
| FAQs                | Answers to common questions.                 |
| Troubleshooting     | Fixes for common problems.                   |

## [Related APIs](#related-apis)

Every other Direct Web Services API needs the token that this API provides.

-   [Universe API](https://developer-beta.morningstar.com/universe-api) to retrieve your entitled universe.
-   [Investment Details API](https://developer-beta.morningstar.com/investment-details-api) and [Investment Details Feed API](https://developer-beta.morningstar.com/investment-details-feed-api) for detailed investment data.
-   [Investment List API](https://developer-beta.morningstar.com/investment-list-api) for tabular, list-based data.
-   [Time Series API](https://developer-beta.morningstar.com/time-series-api) for historical data.
-   [Screener APIs](https://developer-beta.morningstar.com/screener-apis) to find investments by criteria.
-   [Portfolio X-Ray API](https://developer-beta.morningstar.com/portfolio-xray-api) for portfolio analysis.