---
title: "Create an access token for plugin (client)"
method: POST
path: "/api/v2/plugin/oauth2/client-token"
tags: ["Authentication"]
---

# Create an access token for plugin (client)

`POST /api/v2/plugin/oauth2/client-token`

## Request

- Base URL: `https://app.360learning.com`
- URL: `https://app.360learning.com/api/v2/plugin/oauth2/client-token`
- Auth: none declared

Creates an OAuth access token. Once generated, the token authorizes access to the 360Learning API v2 resources for 1 hour. It must be included in the `Authorization` header of each request as `Bearer`.

## Request body

- GeneratePluginClientTokenBody
  - `temporaryToken` string, required: The temporary token from an authed user on a core product.

## Response `200`

Returns an access token that must be used in all your calls to public API endpoints. This access token can only be used inside a plugin.

- GenerateTokenResponse
  - `token_type` 'Bearer', required: The type of the access token.
  - `access_token` string, required: The access token that authorizes access to API resources. Include the access token in the `Authorization` header of every request as `Bearer`.
  - `expires_in` number, required: The lifetime of the access token in seconds.

## Other responses

- `400`: The server cannot or will not process the request due to something that is perceived to be a client error.
- `401`: The authorization cannot be granted.

---

[API](https://skmtc.dev/360learning/apis/plugin-api.md) - [All operations](https://skmtc.dev/360learning/apis/plugin-api/llms.txt) - [OpenAPI document](https://skmtc.dev/360learning/apis/plugin-api/revisions/7d312b30bed7?raw)