---
title: "Get an access token"
method: POST
path: "/v1/oauth/token"
tags: ["oauth"]
---

# Get an access token

`POST /v1/oauth/token`

## Request

- Base URL: `https://api.brixsignage.com`
- URL: `https://api.brixsignage.com/v1/oauth/token`
- Auth: none required

Exchanges an API key for an OAuth 2.0 access token using the client-credentials grant: `client_id` is the API key's id and `client_secret` is the key's secret. The returned token is a reference to the key rather than a copy of its permissions, so revoking the key immediately invalidates every token issued from it, and any permission change takes effect on the token's next use without needing a refresh. Responses follow the OAuth specification, including `invalid_client` on an authentication failure and `unsupported_grant_type` for an unsupported grant. This endpoint is rate-limited per IP address.

**Notes.**
- RFC 6749: no `{ data }` envelope, and errors use OAuth's `error` + `error_description`.
- The schema shown is the client-credentials answer. The `authorization_code` and `refresh_token` grants serve apps connected by a person (MCP) and also return `refresh_token`.

## Response `200`

Success.

- object
  - `access_token` string, required: Send as `Authorization: Bearer …`. It acts with the API key's live permissions.
  - `token_type` 'Bearer', required
  - `expires_in` integer, required: Seconds.
  - `scope` string, required: The granted permissions (`all` for a full-access key).

## Other responses

- `400`: OAuth error body (`error`, `error_description`): `invalid_request`, `unsupported_grant_type`, `invalid_grant`, …
- `401`: `invalid_client`: the key id and key do not match, or the key is revoked or expired.
- `429`: More than 30 client-credential requests in 5 minutes from one address.
- `5XX`: Server error. The body carries a `requestId` to quote to support.

---

[API](https://skmtc.dev/brixsignage/apis/brix-api.md) · [All operations](https://skmtc.dev/brixsignage/apis/brix-api/llms.txt) · [OpenAPI document](https://skmtc.dev/brixsignage/apis/brix-api/revisions/02fd3665dc7d?raw)