---
title: "Token endpoint"
method: POST
path: "/oauth/token"
tags: ["OAuth"]
---

# Token endpoint

`POST /oauth/token`

## Request

- Base URL: `https://api.deadsimple.email`
- URL: `https://api.deadsimple.email/oauth/token`
- Auth: none required

Exchanges an authorization code (with code_verifier) or a refresh token for tokens. Access tokens (dse_oat_) live 7 days; refresh tokens (dse_ort_) live 90 days and rotate on every use. Accepts application/x-www-form-urlencoded or JSON.

## Response `200`

access_token, token_type, expires_in, refresh_token, scope.

## Other responses

- `400`: RFC 6749 error shape (invalid_grant, unsupported_grant_type).

---

[API](https://skmtc.dev/deadsimple/apis/dead-simple-email-api.md) · [All operations](https://skmtc.dev/deadsimple/apis/dead-simple-email-api/llms.txt) · [OpenAPI document](https://skmtc.dev/deadsimple/apis/dead-simple-email-api/revisions/c697881be131?raw)