---
title: "Issue OAuth access token"
method: POST
path: "/oauth/token"
tags: ["OAuth"]
---

# Issue OAuth access token

`POST /oauth/token`

Issues access tokens for `authorization_code`, `client_credentials`, and `refresh_token` grants using an `application/x-www-form-urlencoded` request body. For the `authorization_code` grant, the partner exchanges the code obtained from `GET /oauth/authorize` along with a PKCE `code_verifier`.

## Response `200`

Successful token response

- OauthToken
  - `access_token` string, required — The access token
  - `expires_in` integer, required — Token lifetime in seconds
  - `id_token` string — OpenID Connect ID token
  - `refresh_token` string — The refresh token
  - `token_type` string, required — Token type, e.g. Bearer

## Other responses

- `400` — OAuth error response
- `401` — OAuth error response
- `default` — OAuth error response

---

[API](https://skmtc.dev/coinlist/apis/frontline-api.md) · [All operations](https://skmtc.dev/coinlist/apis/frontline-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/coinlist/frontline-api/revisions/fa411ea1bdfb/schema)