---
title: "Request an access token"
method: POST
path: "/oauth/token"
tags: ["Access Token"]
---

# Request an access token

`POST /oauth/token`

## Request

- Base URL: `/` (relative, and the document’s source URL is not known)
- URL: `/oauth/token`
- Auth: one of:
  - none
  - HTTP basic

Obtain a Bearer token using OAuth 2.0 client credentials. Send either (1) JSON body with client_id, client_secret, and grant_type, or (2) application/x-www-form-urlencoded body with grant_type=client_credentials and Basic Auth header (Client ID as username, Client Secret as password). Tokens expire after 24 hours.

## Request body

- … (unresolved $ref); see the full OpenAPI document linked below

## Response `201`

Created

- AccessTokenResponse: Bearer token for API requests. Tokens expire after 24 hours.
  - `token_type` string
  - `expires_in` number: Seconds until the token expires (typically 86400 for 24 hours)
  - `access_token` string: Use in Authorization header as Bearer {access_token}

## Other responses

- `400`: Bad Request
- `401`: Unauthorized
- `500`: Internal Server Error

## Changes

- **2026-11-03** `ac201681bcb5`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/elementum/apis/elementum-api/changes/oauth/token/post.md)

---

[API](https://skmtc.dev/elementum/apis/elementum-api.md) - [All operations](https://skmtc.dev/elementum/apis/elementum-api/llms.txt) - [OpenAPI document](https://skmtc.dev/elementum/apis/elementum-api/revisions/ac201681bcb5?raw)