---
title: "Create an integrator access token"
method: POST
path: "/v1/auth/token"
tags: ["auth"]
---

# Create an integrator access token

`POST /v1/auth/token`

## Request body

- object
  - `client_id` string, required — The client identifier Laylo issued to your integration. Treat it as opaque.
  - `client_secret` string, required — The signing secret Laylo issued to your integration. Keep it on a trusted server.
  - `grant_type` string — Not required, and not read. It is listed only so a standard OAuth client-credentials helper can post its usual body unchanged.

## Response `200`

A short-lived access token to send as the Authorization Bearer credential on subsequent requests.

- object
  - `access_token` string, required — The access token. Send it as `Authorization: Bearer <access_token>`.
  - `expires_in` integer, required — Seconds until the token expires. Request a new token before it does; do not retry a request that failed because the token expired without refreshing first.
  - `token_type` 'Bearer', required — Always Bearer.

## Other responses

- `400` — The request body is malformed.
- `401` — The integrator credential or customer API key is invalid.
- `405` — The path exists, but the HTTP method is not supported.
- `429` — The per-integrator rate limit for this operation is exceeded.
- `500` — An unexpected server error occurred.

## Changes

- **2026-09-04** `5900e0767317` — 1 warning
  - the optional response header `Retry-After` removed for the status `429`

[Change history](https://skmtc.dev/laylo/apis/laylo-api/changes/v1/auth/token/post.md)

---

[API](https://skmtc.dev/laylo/apis/laylo-api.md) · [All operations](https://skmtc.dev/laylo/apis/laylo-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/laylo/laylo-api/revisions/000d81a01b74/schema)