---
title: "Obtain a access token"
method: POST
path: "/oauth/access_token"
tags: ["OAuth"]
---

# Obtain a access token

`POST /oauth/access_token`

Obtain an access token using the request token and the verification code you received after the user provided authorization. See section 6.3 of the OAuth v1.0a specification for more details.

## Request body

- object
  - `oauth_consumer_key` string — The 25-character hexadecimal string that was obtained from Interactive Brokers during the OAuth consumer registration process.
  - `oauth_token` string — The request token obtained from IB via /request_token.
  - `oauth_signature_method` string — The signature method used to sign the request. Currently only 'RSA-SHA256' is supported.
  - `oauth_signature` string — The signature for the request generated using the method specified in the oauth_signature_method parameter. See section 9 of the OAuth v1.0a specification for more details on signing requests.
  - `oauth_timestamp` string — Timestamp expressed in seconds since 1/1/1970 00:00:00 GMT. Must be a positive integer and greater than or equal to any timestamp used in previous requests.
  - `oauth_nonce` string — A random string uniquely generated for each request.
  - `oauth_verifier` string — The verification code received from IB after the user has granted authorization.

## Response `200`

Access token and token secret

- object
  - `oauth_token` string
  - `oauth_token_secret` string

## Other responses

- `400` — Unsuccessfull response
- `401` — Unsuccessfull response
- `403` — Unsuccessfull response
- `408` — Unsuccessfull response

---

[API](https://skmtc.dev/interactivebrokers/apis/ibkr-3rd-party-web-api.md) · [All operations](https://skmtc.dev/interactivebrokers/apis/ibkr-3rd-party-web-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/interactivebrokers/ibkr-3rd-party-web-api/revisions/97f75703dba5/schema)