Access Requests6

Actors1

Agent Registration4

Agents20

API Operations2

API Spec2

APIs11

Audit2

Catalog7

Configuration3

Credentials8

Discovery3

Events4

Executions2

Identity1

Inspect1

Jobs4

MCP1

Monitoring2

Notes5

OAuth9

OAuth Clients6

Overlays7

Permissions1

Search1

Service Accounts11

System7

Toolkit Credentials3

Toolkit Keys4

Toolkit Permissions4

Toolkits6

Users15

OAuth

Token Endpoint

Exchange a refresh token, JWT assertion, authorization code, or client creds for tokens.

post/oauth/token

Request body

assertionstring nullable

client_idstring nullable

client_secretstring nullable

codestring nullable

code_verifierstring nullable

grant_typestring required

redirect_uristring nullable

refresh_tokenstring nullable

Response

Successful Response

access_tokenstring required

expires_ininteger required

id_tokenstring nullable

refresh_tokenstring nullable

token_typestring

Changes

Changed in 4 of the 85 revisions of this API.6130

Aug 31, 2026170ab6ea6e231See the full diff
- ○
  added the media type application/x-www-form-urlencoded to the request body
  request-body-media-type-added
This revision also has 1 change that name no endpoint, such as unreferenced schemas being removed. See the revision's changelog
Jul 1, 2026d65fcba0d25a5128See the full diff
- ▲
  request body became required
  request-body-became-required
- ▲
  removed the media type application/x-www-form-urlencoded from the request body
  request-body-media-type-removed
- ▲
  the response's body type/format changed from / to object/ for status 200
  response-body-type-changed
- ▲
  the detail response's property type/format changed from array/ to string/ for status 422
  response-property-type-changed
- ▲
  removed the required property error from the response with the 400 status
  response-required-property-removed
- ●
  removed the optional property error_description from the response with the 400 status
  response-optional-property-removed
- ○
  api operation id oauth_token_oauth_token_post removed and replaced with tokenEndpoint
  api-operation-id-removed
- ○
  api tag OAuth added
  api-tag-added
- ○
  api tag oauth removed
  api-tag-removed
- ○
  added the media type application/json to the request body
  request-body-media-type-added
- ○
  media type application/json was changed to a more specific media type application/problem+json for the response status 400
  response-media-type-name-specialized
- ○
  media type application/json was changed to a more specific media type application/problem+json for the response status 422
  response-media-type-name-specialized
- ○
  added the non-success response with the status 500
  response-non-success-status-added
- ○
  added the non-success response with the status 503
  response-non-success-status-added
- ○
  removed the non-success response with the status 401
  response-non-success-status-removed
- ○
  added the optional property code to the response with the 400 status
  response-optional-property-added
- ○
  added the optional property code to the response with the 422 status
  response-optional-property-added
- ○
  added the optional property errors to the response with the 400 status
  response-optional-property-added
- ○
  added the optional property errors to the response with the 422 status
  response-optional-property-added
- ○
  added the optional property id_token to the response with the 200 status
  response-optional-property-added
- ○
  added the optional property instance to the response with the 400 status
  response-optional-property-added
- ○
  added the optional property instance to the response with the 422 status
  response-optional-property-added
- ○
  added the optional property refresh_token to the response with the 200 status
  response-optional-property-added
- ○
  added the optional property status to the response with the 400 status
  response-optional-property-added
- ○
  added the optional property status to the response with the 422 status
  response-optional-property-added
- ○
  added the optional property title to the response with the 400 status
  response-optional-property-added
- ○
  added the optional property title to the response with the 422 status
  response-optional-property-added
- ○
  added the optional property token_type to the response with the 200 status
  response-optional-property-added
- ○
  added the optional property type to the response with the 400 status
  response-optional-property-added
- ○
  added the optional property type to the response with the 422 status
  response-optional-property-added
- ○
  the response property detail became required for the status 422
  response-property-became-required
- ○
  added the required property access_token to the response with the 200 status
  response-required-property-added
- ○
  added the required property detail to the response with the 400 status
  response-required-property-added
- ○
  added the required property expires_in to the response with the 200 status
  response-required-property-added
This revision also has 61 changes that name no endpoint, such as unreferenced schemas being removed. See the revision's changelog
May 7, 20265a765d68c56f1See the full diff
- ○
  endpoint added
  endpoint-added
This revision also has 3 changes that name no endpoint, such as unreferenced schemas being removed. See the revision's changelog
Apr 13, 202676e8f60637281See the full diff
- ▲
  api path removed without deprecation
  api-path-removed-without-deprecation
This revision also has 179 changes that name no endpoint, such as unreferenced schemas being removed. See the revision's changelog

Full history