---
title: "Get OAuth Token"
method: POST
path: "/oauth/token"
tags: ["oauth"]
---

# Get OAuth Token

`POST /oauth/token`

Exchange credentials for an access token. Supports `client_credentials` grant type.

## Headers

- `X-Api-Key` string, required
- `X-API-Version` string

## Request body

- object
  - `grant_type` 'client_credentials', required — Grant type for the request. Must be 'client_credentials'.
  - `client_id` string, required — The client ID issued to the client.
  - `client_secret` string, required — The client secret issued to the client.
  - `scope` string — The scope of the access request.

## Response `200`

Successful token response

- OauthPostOauthTokenResponse200
  - `access_token` string — The access token.
  - `token_type` string — The type of the token (e.g., Bearer).
  - `expires_in` integer — The lifetime in seconds of the access token.
  - `scope` string — The scope of the access token.

## Other responses

- `400` — Bad request - Invalid parameters or request format
- `401` — Unauthorized - Invalid client credentials.
- `403` — Forbidden - Access denied or insufficient permissions

---

[API](https://skmtc.dev/ottimate/apis/api-reference.md) · [All operations](https://skmtc.dev/ottimate/apis/api-reference/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/ottimate/api-reference/revisions/ba91ff4c6969/schema)