Authentication

The Skill Engine API uses OAuth 2.0 for authentication with support for two methods: Client Credentials Flow and Private Key JWT Authentication.

Getting Started

Contact your TechWolf representative to obtain your credentials:

client_id - Your unique client identifier
audience - The API audience
tenant - Your organization’s tenant identifier
Method-specific credentials (client secret or private key)

Token Endpoints:

EU tenants: https://techwolf.eu.auth0.com/oauth/token
US tenants: https://techwolf-us.us.auth0.com/oauth/token

Audience:

EU tenants: eu3.techwolf.ai
US tenants: us3.techwolf.ai

Cache your tokens! Tokens expire and requesting new ones adds latency. Always reuse tokens until they expire.

Client Credentials Flow

Simple server-to-server authentication using a shared secret. Contact your TechWolf representative to obtain your credentials. What TechWolf provides to you:

The client_id and client_secret

Step 1: Request a token

Basic Request:

curl -X POST 'https://techwolf.eu.auth0.com/oauth/token' \
  -H 'Content-Type: application/json' \
  -d '{
    "client_id": "<your_client_id>",
    "client_secret": "<your_client_secret>",
    "audience": "eu3.techwolf.ai",
    "grant_type": "client_credentials",
    "tenant": "<your_tenant>"
  }'

With Scopes:

curl -X POST 'https://techwolf.eu.auth0.com/oauth/token' \
  -H 'Content-Type: application/json' \
  -d '{
    "client_id": "<your_client_id>",
    "client_secret": "<your_client_secret>",
    "audience": "eu3.techwolf.ai",
    "grant_type": "client_credentials",
    "tenant": "<your_tenant>",
    "scopes": ["read", "write"]
  }'

Private Key JWT Authentication

Enhanced security using asymmetric cryptography - no shared secrets to store. What you need to provide to TechWolf:

The public key associated with your private key

What TechWolf provides to you:

The client_id

Step 1: Create JWT Assertion

Sign a JWT with your private key containing these claims:

{
  "iss": "your_client_id",
  "sub": "your_client_id", 
  "aud": "https://techwolf.eu.auth0.com/oauth/token",
  "exp": 1640995200,
  "iat": 1640994900,
  "jti": "unique-jwt-id-12345"
}

Requirements:

Sign with RS256 algorithm
Set exp 5-10 minutes in the future
Use unique jti for each request
Include current timestamp in iat

Step 2: Exchange JWT for Token

Basic Request:

curl -X POST 'https://techwolf.eu.auth0.com/oauth/token' \
  -H 'Content-Type: application/json' \
  -d '{
    "grant_type": "client_credentials",
    "client_assertion_type": "urn:ietf:params:oauth:client-assertion-type:jwt-bearer"
    "client_assertion": "<your_jwt_assertion>",
    "audience": "eu3.techwolf.ai",
    "tenant": "<your_tenant>"
  }'

The assertion field is the JWT you just created and signed with your private key. With Scopes:

curl -X POST 'https://techwolf.eu.auth0.com/oauth/token' \
  -H 'Content-Type: application/json' \
  -d '{
    "grant_type": "client_credentials",
    "client_assertion_type": "urn:ietf:params:oauth:client-assertion-type:jwt-bearer"
    "client_assertion": "<your_jwt_assertion>",
    "audience": "eu3.techwolf.ai", 
    "tenant": "<your_tenant>",
    "scopes": ["read", "write"]
  }'

Token Response

Both methods return a JSON object with the following fields:

{
  "access_token": "eyJhbGciOiJSUzI0I0seiEw...",
  "expires_in": 10800,
  "scope": "read write",
  "token_type": "Bearer"
}

Scopes

Scope	Access
`read`	Read API resources
`write`	Write API resources
`read_reports`	Read access to reports (only aggregated info)

Default: All available scopes for your credentials

Using Your Token

Add to the Authorization header of all API calls:

curl -X GET '[server-url]/your-endpoint' \
  -H 'Authorization: Bearer <access_token_returned_in_response>'

Test your token:

curl -X GET '[server-url]/version' \
  -H 'Authorization: Bearer <access_token_returned_in_response>'

API Documentation

API Versioning

AI Integration

Taxonomy

Employees

Job Families

Jobs

Peer Groups

Vacancies

Courses

Skill Clusters

External Companies

Skills

Tasks

Organisational Structure

Custom Properties

Matchmaking

Matching Configuration

Export

Reports

Version

Getting Started

Client Credentials Flow

Step 1: Request a token

Private Key JWT Authentication

Step 1: Create JWT Assertion

Step 2: Exchange JWT for Token

Token Response

Scopes

Using Your Token

Additional Resources

​Getting Started

​Client Credentials Flow

​Step 1: Request a token

​Private Key JWT Authentication

​Step 1: Create JWT Assertion

​Step 2: Exchange JWT for Token

​Token Response

​Scopes

​Using Your Token

​Additional Resources

Getting Started

Client Credentials Flow

Step 1: Request a token

Private Key JWT Authentication

Step 1: Create JWT Assertion

Step 2: Exchange JWT for Token

Token Response

Scopes

Using Your Token

Additional Resources