---
title: "Send authorization request with code exchange."
method: POST
path: "/api/v1/auth/tokenCode"
tags: ["Auth"]
---

# Send authorization request with code exchange.

`POST /api/v1/auth/tokenCode`

## Request

- Base URL: `https://api.intheloop.io`
- URL: `https://api.intheloop.io/api/v1/auth/tokenCode`
- Auth: API key in header `Authorization`

## Query parameters

- `isAddAccount` boolean
- `otpCode` string

## Request body

- AuthCode: Authorization code exchange
  - `token` Token: Token resource
    - `accessToken` string: Access token, type is Bearer
    - `refreshToken` string: Refresh token
    - `email` string: Email of refresh token
    - `isSyncable` boolean, required: Token is syncable
  - `$type` string, required
  - `code` string, required: Auth code, only set by client, always returned empty by server
  - `clientId` string, required: Client id, only set by client (and randomly generated by them), always returned empty by server
  - `clientSecret` string, required: Client secret, only set by client (and provided to them by server), always returned empty by server

## Response `201`

Created

- AuthCode: Authorization code exchange
  - `token` Token: Token resource
    - `accessToken` string: Access token, type is Bearer
    - `refreshToken` string: Refresh token
    - `email` string: Email of refresh token
    - `isSyncable` boolean, required: Token is syncable
  - `$type` string, required
  - `code` string, required: Auth code, only set by client, always returned empty by server
  - `clientId` string, required: Client id, only set by client (and randomly generated by them), always returned empty by server
  - `clientSecret` string, required: Client secret, only set by client (and provided to them by server), always returned empty by server

## Other responses

- `400`: Bad request. Check fields message and error code from response body for additional information.
- `401`: Unauthorized request. Check fields message and error code from response body for additional information.
- `429`: Too many requests. Check response header Retry-After indicating how long to wait before making a new request.

---

[API](https://skmtc.dev/intheloop/apis/loop-api.md) - [All operations](https://skmtc.dev/intheloop/apis/loop-api/llms.txt) - [OpenAPI document](https://skmtc.dev/intheloop/apis/loop-api/revisions/0892c5ba0787?raw)