Introduction

Get started

Authentication

Exchange your client credentials for an access token.

Changelog

See what’s new in each API version.

Environments

Environment	Base URL
Production	`https://api.nova.net`
Sandbox	`https://api.nova-sandbox.net`

Authentication

The API uses the OAuth2 client_credentials grant. Your Nova admin issues a client_id and client_secret. Exchange them for an access token:

curl -X POST https://api.nova.net/oauth/token \
  -d grant_type=client_credentials \
  -d client_id=$CLIENT_ID \
  -d client_secret=$CLIENT_SECRET

Send the token as Authorization: Bearer <access_token> on every request. Tokens expire after 3600 seconds, so exchange your credentials again to refresh.

Conventions

Object IDs are stable and safe to store.
List endpoints share one pagination envelope.
Amounts are integers in the smallest currency unit.
Send an Idempotency-Key to retry writes safely.
New fields and new enum values can be added without a new API version. Ignore fields you don’t use, and handle enum values you don’t recognize.

Last modified on October 27, 2026

​Get started

Authentication

Changelog

​Environments

​Authentication

​Conventions

Get started

Environments

Authentication

Conventions