---
title: "Exchange the current Bearer token for a new one before it expires"
method: POST
path: "/auth/token/refresh"
---

# Exchange the current Bearer token for a new one before it expires

`POST /auth/token/refresh`

## Request

- Base URL: `https://api.eqvps.com/api/v1/eqvps`
- URL: `https://api.eqvps.com/api/v1/eqvps/auth/token/refresh`
- Auth: HTTP bearer

Every authenticated response carries the header X-Token-Expires-At. Call this before that time: you get a new token (1 year by default, or expires_in_days 1-1825) and the token used for this call is revoked. An expired token cannot be refreshed — log in again (POST /auth/login). MCP: refresh_token.

## Request body

- object
  - `expires_in_days` integer

## Response `200`

New token (the previous one is revoked immediately)

- object
  - `token` string
  - `token_type` string
  - `token_expires_at` string, date-time
  - `token_length` integer: Length of the token in characters — use it to check that the token was saved in full.
  - `id` string
  - `message` string

## Other responses

- `401`: Unauthenticated / token_expired
- `409`: web_session — cabinet session tokens renew automatically

---

[API](https://skmtc.dev/eqvps/apis/eqvps-api.md) · [All operations](https://skmtc.dev/eqvps/apis/eqvps-api/llms.txt) · [OpenAPI document](https://skmtc.dev/eqvps/apis/eqvps-api/revisions/2cbc15a2b088?raw)