---
title: "Get OAuth token"
method: POST
path: "/oauth/token"
tags: ["OAuth"]
---

# Get OAuth token

`POST /oauth/token`

Retrieve a new or refresh an existing OAuth token.

## Response `200`

Access token is successfully fetched

- GetAccessTokenResponse
  - `id_token` string — A JSON Web Token (JWT) issued when the request includes the scope open_id.
  - `access_token` string — An access token you can use to make requests on behalf of a Bolt shopper.
  - `expires_in` integer — The access token's expiration, in seconds.
  - `refresh_token` string — A refresh token you can use to issue a brand new access token without obtaining a new authorization code.
  - `refresh_token_scope` string — The scope granted to the refresh token. Currently, refreshed token will only grant view permissions.
  - `scope` string — The scope granted to access token, depending on the scope granted to the authorization code as well as the scope parameter. Options include `bolt.account.manage`, `bolt.account.view`, `openid`. Multiple values can be returned as space-separated strings.
  - `token_type` string — The token_type will always be bearer.

## Other responses

- `4XX` — An error has occurred, and further details are contained in the response
- `default` — An error has occurred, and no further details are provided (e.g. 5xx errors)

---

[API](https://skmtc.dev/bolt/apis/bolt-api-reference-2.md) · [All operations](https://skmtc.dev/bolt/apis/bolt-api-reference-2/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/bolt/bolt-api-reference-2/revisions/18e78f3cf6f3/schema)