---
title: "Request an access token"
method: POST
path: "/issuing/access/connect/token"
tags: ["Cardholder access tokens"]
---

# Request an access token

`POST /issuing/access/connect/token`

## Request

- Base URL: `https://{prefix}.api.sandbox.checkout.com`
- URL: `https://{prefix}.api.sandbox.checkout.com/issuing/access/connect/token`
- Auth: OAuth 2
  - Client credentials
  - Token URL: `string`
- TypeScript: <https://skmtc.dev/checkout/apis/checkout-com-api-reference/docs/issuing/access/connect/token/post.ts> (a function with typed inputs; its response is checked against the schema)

OAuth endpoint to exchange your access key ID and access key secret for an access token.

## Request body `application/x-www-form-urlencoded`

- object
  - `grant_type` 'client_credentials'
  - `client_id` string: Access key ID.
  - `client_secret` string: Access key secret.
  - `cardholder_id` string: The cardholder's unique identifier.
  - `single_use` boolean: Specifies if the request is for a single-use token. Single-use tokens are required for sensitive endpoints.

## Response `200`

Cardholder access token retrieved successfully

- object
  - `access_token` string
  - `token_type` string
  - `expires_in` number: The remaining time the access token is valid for, in seconds.
  - `scope` string

## Other responses

- `406`: Not Acceptable
- `415`: Unsupported Media Type
- `422`: Unprocessable Content
- `429`: Too Many Requests

---

[API](https://skmtc.dev/checkout/apis/checkout-com-api-reference.md) - [All operations](https://skmtc.dev/checkout/apis/checkout-com-api-reference/llms.txt) - [OpenAPI document](https://skmtc.dev/checkout/apis/checkout-com-api-reference/revisions/0f1abdb1c3e9?raw)