---
title: "Poll for the API key after approval"
method: POST
path: "/v1/auth/device/token"
tags: ["Device sign-in"]
---

# Poll for the API key after approval

`POST /v1/auth/device/token`

## Request

- Base URL: `https://api.dropl.io` (the document declares no server; this is the origin it was published from)
- URL: `https://api.dropl.io/v1/auth/device/token`
- Auth: none required

No authentication.

## Request body

- DeviceTokenRequest
  - `grant_type` 'urn:ietf:params:oauth:grant-type:device_code', required
  - `device_code` string, required

## Response `200`

Success

- DeviceTokenResponse
  - `access_token` string, required: The API key. Shown once; store it securely.
  - `token_type` 'Bearer', required
  - `api_key` object, required
    - `id` string, uuid, required
    - `name` string, required
    - `prefix` string, required
    - `scopes` Scope[], required
    - `siteIds` string[], nullable, required
  - `organization` object, required
    - `id` string, uuid, required
    - `name` string, required

## Other responses

- `400`: Pending, slow down, denied, expired, or invalid (OAuth error shape)
- `429`: Rate limited

---

[API](https://skmtc.dev/dropl/apis/dropl-public-api.md) · [All operations](https://skmtc.dev/dropl/apis/dropl-public-api/llms.txt) · [OpenAPI document](https://skmtc.dev/dropl/apis/dropl-public-api/revisions/8a42e1f968d4?raw)