---
title: "Create an application access token"
method: POST
path: "/token"
tags: ["tokens"]
---

# Create an application access token

`POST /token`

Generates an access token that contains permissions scoped to the application owner's Dwolla Client Account.

## Response `200`

successful operation

- object
  - `access_token` string, required — A new access token that is used to authenticate against resources that belong to the app itself.
  - `token_type` 'bearer', required — The type of token, always "bearer"
  - `expires_in` integer, required — The lifetime of the access token, in seconds. Default is 3600.

## Other responses

- `401` — Unauthorized

## Changes

- **2025-06-06** `231d0268586b` — 2 breaking, 1 warning, 5 info
  - request body became required
  - request property `grant_type` was restricted to a list of enum values
  - added the new `bearer` enum value to the `token_type` response property for the response status `200`
  - the endpoint scheme security `basicAuth` was removed from the API
  - …4 more

[Change history](https://skmtc.dev/dwolla/apis/dwolla-api/changes/token/post.md)

---

[API](https://skmtc.dev/dwolla/apis/dwolla-api.md) · [All operations](https://skmtc.dev/dwolla/apis/dwolla-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/dwolla/dwolla-api/revisions/231d0268586b/schema)