---
title: "Retrieve a JWT from a client's credentials"
method: POST
path: "/oauth/token"
tags: ["OAuth"]
---

# Retrieve a JWT from a client's credentials

`POST /oauth/token`

## Request

- Base URL: `https://example.itential.io`
- URL: `https://example.itential.io/oauth/token`
- Auth: none declared

Retrieves a JWT from a client's credentials.

## Request body

- object
  - `client_id` string: String representation of a MongoDB ObjectId
  - `client_secret` string: Uuid representation of client secret
  - `grant_type` 'client_credentials'

## Response `200`

result

- OauthMachineAuthenticationResponse200: A result containing the JWT providing the user access to IAP for a set amount of time
  - `access_token` string: The JWT providing the user access to IAP
  - `token_type` 'bearer': The type of token provided
  - `expires_in` '3600': The amount of time until the JWT expires

## Other responses

- `500`: Error response from API

---

[API](https://skmtc.dev/itential/apis/itential-2.md) - [All operations](https://skmtc.dev/itential/apis/itential-2/llms.txt) - [OpenAPI document](https://skmtc.dev/itential/apis/itential-2/revisions/2095cc90e583?raw)