---
title: "Obtain an access token with a 24-hour expiry.

Contact our support team to request the client_id and client_secret."
method: POST
path: "/auth-tokens/v2/api"
tags: ["auth-tokens"]
---

# Obtain an access token with a 24-hour expiry.

Contact our support team to request the client_id and client_secret.

`POST /auth-tokens/v2/api`

Provides an access token to query the APIs

## Request body

- CreateApiAuthTokenDto
  - `client_id` string, required — ID assigned to Client Organization
  - `client_secret` string, required — Secret assigned to Client Organization
  - `grant_type` string — This is always “client”

## Response `201`

The record has been successfully created.

- AccessTokenV2ResponseDto
  - `access_token` string, required

## Other responses

- `400` — Bad request.
- `401` — Unauthorized request because of any of the following reasons: 1. Wrong client_id or client_secret. 2. User is not active. 3. User doesn't have an organization.
- `404` — User not found.

---

[API](https://skmtc.dev/certifyos/apis/certifyos-api.md) · [All operations](https://skmtc.dev/certifyos/apis/certifyos-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/certifyos/certifyos-api/revisions/6ef2fa526e0f/schema)