---
title: "OAuth token endpoints"
method: POST
path: "/auth/oauth/token"
tags: ["Oauth"]
---

# OAuth token endpoints

`POST /auth/oauth/token`

This endpoint is used to exchange an authorization code or refresh token for an access token.

## Request body

- object
  - `grant_type` 'authorization_code' | 'refresh_token', required
  - `client_id` string
  - `client_secret` string

## Response `200`

Successful response

- unknown

## Changes

> 24 revisions in range; 5 could not be searched.

- **2026-05-15** `180fda38d099` — 1 breaking, 2 info
  - request property `grant_type` was restricted to a list of enum values
  - added the new `authorization_code` enum value to the request property `grant_type`
  - added the new `refresh_token` enum value to the request property `grant_type`
- **2026-05-06** `9025167b1683` — 2 info
  - added the new optional request property `client_id`
  - added the new optional request property `client_secret`

[Change history](https://skmtc.dev/hexclave/apis/hexclave-rest-api-2/changes/auth/oauth/token/post.md)

---

[API](https://skmtc.dev/hexclave/apis/hexclave-rest-api-2.md) · [All operations](https://skmtc.dev/hexclave/apis/hexclave-rest-api-2/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/hexclave/hexclave-rest-api-2/revisions/897c83038ab2/schema)