---
title: "get an authentication token from API key credentials"
method: POST
path: "/api/servicesecurity/processes/apikey/oauth/token"
tags: ["apikeys"]
---

# get an authentication token from API key credentials

`POST /api/servicesecurity/processes/apikey/oauth/token`

## Request

- Base URL: `https://services.fountain.com`
- URL: `https://services.fountain.com/api/servicesecurity/processes/apikey/oauth/token`
- Auth: none required

For enterprise-scoped API keys (see /processes/apikey/enterprise/generate), request a `companyUuid:<uuid>` scope value identifying which of the companies accessible to that enterprise identity to issue the access token for — e.g. `scope=companyUuid:5f010f1e-6fc1-447f-93a8-fad19668b3af`. This is a standard OAuth2 client_credentials request field, so any regular OAuth2 client can request it without Fountain-specific parameters.

## Request body `application/x-www-form-urlencoded`

- object
  - `grant_type` string
  - `scope` string: Space-delimited scope values. Only relevant for enterprise-scoped API keys, which require a `companyUuid:<uuid>` value; ignored for standard company- and system-scoped keys.

## Response `200`

Successfully authenticated

- object
  - `access_token` string
  - `token_type` string
  - `expires_in` number
  - `scope` string

## Other responses

- `400`: invalid request
- `401`: Authenticated failed

---

[API](https://skmtc.dev/fountain/apis/worker-experience-public-api.md) - [All operations](https://skmtc.dev/fountain/apis/worker-experience-public-api/llms.txt) - [OpenAPI document](https://skmtc.dev/fountain/apis/worker-experience-public-api/revisions/6b9a31f79e22?raw)