Generate OAuth access token
Changed onGenerate a new OAuth access token using an authorization code; or refresh an existing one using a continuous refresh token.
Follow the complete steps for requesting and refreshing tokens.
Note: If your app was created before September 25, 2025, make sure to set the continuous_refresh parameter to true to use the continuous refresh token (60-day expiration, refreshable indefinitely). Pinterest no longer supports the legacy refresh token (365-day expiration, hard limit).
Disregard this note if your app was activated on or after September 25, 2025. You are automatically using the continuous refresh token.
Use Token Debugger to validate and inspect your access token.
Request
- Base URLhttps://api.pinterest.com/v5
- AuthHTTP basic
- TypeScriptA function with typed inputs. Its response is checked against the schema.
Request body application/x-www-form-urlencoded
Response
The request has succeeded.
Changes
- breaking
the response property
became optional for the status - breaking
the
response's property type changed fromstringto no type for status - info
added the new optional request property
- info
added the new optional request property
- info
added the new optional request property
- info
added the new optional request property
- info
added the new optional request property
- info
removed request discriminator
- info
removed response discriminator for the response status
- info
added the non-success response with the status
- info
added the non-success response with the status
- info
added the non-success response with the status
- info
added the non-success response with the status
- info
added the non-success response with the status
- info
added the optional property
to the response with the status - info
added the optional property
to the response with the status - info
added the optional property
to the response with the status - info
the response optional property
became read-only for the status - info
added to the
response propertyallOflist for the response status - info
removed the
authorization_codeenum value from theresponse property for the response status - info
removed the
client_credentialsenum value from theresponse property for the response status - info
removed the
refresh_tokenenum value from theresponse property for the response status - info
the response required property
became read-only for the status - info
the response required property
became read-only for the status - info
the response required property
became read-only for the status - info
added the success response with the status
- breaking
- info
removed
everlasting_refreshmapping keys from the response discriminator for the response status
- info