Get client secret pair
The Nitro Sign API uses machine-to-machine OAuth with the client credentials grant type to generate access tokens for authenticating API requests. You can create an API application and obtain the associated client credentials through our self-service portal by following these steps:1
Log in to the Nitro Admin Portal
- Navigate to the Admin Portal
- Sign in using your global admin credentials

Only users with the Global Admin role can log in to the Nitro Admin Portal
2
Create an Application
API access credentials are granted to applications. You can create up to 25 applications with separate access credentials.To create a new app:
- Click Settings in the left navigation panel
- Select the API tab
- Click Create Application in the upper right corner

The API functionality requires a Nitro Sign Enterprise Plan.
3
Give your application a descriptive name
After clicking Create Application, a modal will appear. Enter a descriptive name for your application (e.g., “Invoice Processing App” or “Document Automation”) and click Create.
The application name must be unique, no longer than 64 characters, and characters 
<
and >
are not allowed.
4
Extract credentials
When your Application is created, the modal will display the following fields:
Retrieve credentials any time
Your application will be listed in the table in the API panel. You can retrieve your credentials at any time by selecting the application from the table, which will display the credentials in the right-side panel.
- Client ID: A public identifier for your application.
- Client Secret: A private key tied to your organization that enables your application to generate short-lived access tokens for making authenticated HTTPS requests to the Nitro Public API.
- Oauth Token endpoint: The URL where your application requests access tokens.
Store your Client Secret in a secure location. Do not save it on personal devices, mobile phones, shared folders, or source code repositories. Instead, use a secrets manager to store it and expose it to your application using that manager’s best practices.

