Skip to main content

Auth and grants

Intro

Intro

Public calls use a Trepzy machine credential (tpztest_ in sandbox, tpzlive_ in live) or a short human token. Grants are least privilege. Managing credentials is a human action; machines cannot self-escalate. retrieveDispute requires disputes:read. The wire field remains dispute_ref. The public operation_id is retrieveDispute. See environments and return to getting started.

Try It

Docs Try It is sandbox-only:
  • audience sandbox, scope docs_try_it, consent required
  • CORS allowlist is exactly https://docs.trepzy.com
  • Mintlify proxy stays off; the browser calls sandbox directly
  • tokens never appear in URL, static HTML, analytics, logs, or persistent cache
  • logout and expiry revoke the session