You must send the read_token obtained from the Create Key Pair endpoint to obtain the user's OAuth tokens.

The endpoint will return a 404 error until authentication is completed. Once the user completes their authentication flow the endpoint will return the access and refresh tokens. Afterwards the key pair will become locked and any further requests using a spent read_key will return a 404 error.`