API Requests
XWMS API endpoints use client credentials and validation rules. Requests are logged so admins can inspect behavior, troubleshoot integrations, and verify access.
Required headers
Most API calls require:
X-Client-IdX-Client-SecretX-Client-Domain
Request handling
XWMS resolves the client, domain, live/test mode, user, and scope access before returning protected data.
Debugging failed requests
Check:
- client id and secret
- domain spelling
- domain active status
- scope approval
- user id or subject id
- live/test mode
- validation errors in the response