Skip to main content
POST
Request an access token

Authorizations

Authorization
string
header
required

HTTP Basic authentication: the client ID and client secret, joined with a colon and Base64-encoded (RFC 7617).

Body

application/x-www-form-urlencoded
grant_type
enum<string>
required

The OAuth 2.0 grant type.

Available options:
client_credentials,
authorization_code,
refresh_token
scope
string

Space-separated scopes to request. Defaults to all scopes configured for the app.

code
string

The authorization code (Authorization Code flow).

redirect_uri
string

Must match the redirect URI from the authorization request (Authorization Code flow).

refresh_token
string

The refresh token (Refresh flow).

Response

The access token.

access_token
string

The access token to send as a bearer token on API requests.

token_type
string

The token type; always Bearer.

expires_in
integer<int32>

The token lifetime in seconds (access tokens expire after ~60 minutes).

scope
string

The space-separated scopes granted.

refresh_token
string

A refresh token (Authorization Code flow only, when offline_access was requested).