---
title: "Token endpoint (authorization_code + PKCE, refresh_token)"
method: POST
path: "/oauth/token"
tags: ["OAuth"]
---

# Token endpoint (authorization_code + PKCE, refresh_token)

`POST /oauth/token`

## Request

- Base URL: `https://bisque.cloud`
- URL: `https://bisque.cloud/oauth/token`
- Auth: none required

## Response `200`

A token pair.

- object
  - `access_token` string: `bisque_oat_…`, 1 hour.
  - `token_type` 'Bearer'
  - `expires_in` integer
  - `refresh_token` string: `bisque_ort_…`, 90 days, rotates on use.
  - `scope` string

## Other responses

- `400`: Bad grant.
- `401`: Client authentication failed.

---

[API](https://skmtc.dev/bisque/apis/bisque-api.md) · [All operations](https://skmtc.dev/bisque/apis/bisque-api/llms.txt) · [OpenAPI document](https://skmtc.dev/bisque/apis/bisque-api/revisions/5dd7a3c62937?raw)