---
title: "Create an access token for plugin (client)"
method: POST
path: "/api/v2/plugin/oauth2/client-token"
tags: ["Authentication"]
---

# Create an access token for plugin (client)

`POST /api/v2/plugin/oauth2/client-token`

Creates an OAuth access token. Once generated, the token authorizes access to the 360Learning API v2 resources for 1 hour. It must be included in the `Authorization` header of each request as `Bearer`.

## Request body

- GeneratePluginClientTokenBody
  - `temporaryToken` string, required — The temporary token from an authed user on a core product.

## Response `200`

Returns an access token that must be used in all your calls to public API endpoints. This access token can only be used inside a plugin.

- GenerateTokenResponse
  - `token_type` 'Bearer', required — The type of the access token.
  - `access_token` string, required — The access token that authorizes access to API resources. Include the access token in the `Authorization` header of every request as `Bearer`.
  - `expires_in` number, required — The lifetime of the access token in seconds.

## Other responses

- `400` — The server cannot or will not process the request due to something that is perceived to be a client error.
- `401` — The authorization cannot be granted.

---

[API](https://skmtc.dev/360learning/apis/core-api.md) · [All operations](https://skmtc.dev/360learning/apis/core-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/360learning/core-api/revisions/94b691b0b72c/schema)