---
title: "OAuth token endpoint"
method: POST
path: "/oauth/2026-03/token"
tags: ["Advanced"]
---

# OAuth token endpoint

`POST /oauth/2026-03/token`

Authenticates a client and returns access and refresh tokens.

## Response `200`

successful operation

- union
  - AuthOauthAccessTokenResponse
    - `access_token` string, required
    - `expires_in` integer, required
    - `hub_id` integer
    - `id_token` string
    - `refresh_token` string, required
    - `scopes` string[]
    - `token_type` string, required
    - `token_use` 'access_token', required
    - `user_id` integer
  - AuthOauthClientCredentialsTokenResponse
    - `access_token` string, required
    - `expires_in` integer, required
    - `hub_id` integer
    - `id_token` string
    - `scopes` string[]
    - `token_type` string, required
    - `token_use` 'client_credentials', required
    - `user_id` integer

## Other responses

- `default` — An error occurred.

## Changes

> 14 revisions in range; 1 not diffed, 2 could not be searched.

- **2026-05-27** `f9c7181056c5` — 2 info
  - added the new `client_credentials` enum value to the request property `grant_type`
  - added the success response with the status `200`
- **2026-04-08** `b0d8bc008db9` — 1 info
  - api operation id `post-/oauth/2026-03/token_/oauth/v3/token` removed and replaced with `post-/oauth/2026-03/token`
- **2026-03-25** `62586336cea2` — 1 info
  - endpoint added

[Change history](https://skmtc.dev/hubspot/apis/hubspot-api-specification/changes/oauth/2026-03/token/post.md)

---

[API](https://skmtc.dev/hubspot/apis/hubspot-api-specification.md) · [All operations](https://skmtc.dev/hubspot/apis/hubspot-api-specification/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/hubspot/hubspot-api-specification/revisions/f9c7181056c5/schema)