---
title: "Create a new token for a company"
method: POST
path: "/v1/companies/{company_id}/create-token"
tags: ["Company Tokens"]
---

# Create a new token for a company

`POST /v1/companies/{company_id}/create-token`

## Request

- Base URL: `https://gateway.remote.com`
- URL: `https://gateway.remote.com/v1/companies/{company_id}/create-token`
- Auth: OAuth 2
  - Client credentials
  - Token URL: `/auth/oauth2/token`

Creates new tokens for a given company, on behalf of the company owner.

Only available to integrations that Remote has allowed to act on behalf of users.
Other integrations get a 403.

## Authentication

This endpoint requires the following token type:

- **Client credentials access token** (`OAuth2ClientCredentials`) — obtained through the Client Credentials flow or the Refresh Token flow. See [Authentication for partners](https://developer.remote.com/docs/authentication-for-partners).

## Path parameters

- `company_id` string, required

## Query parameters

- `scope` string

## Response `200`

Success

- CompanyTokenResponse: OAuth2 tokens returned after a company authorizes access. Use the access token in the Authorization header for subsequent API calls. Use the refresh token to obtain a new access token when the current one expires.
  - `access_token` string, required: The OAuth2 access token (JWT). Include this in the `Authorization: Bearer <token>` header for API requests.
  - `expires_in` integer, required: The number of seconds until the access token expires.
  - `refresh_token` string, required: The refresh token used to obtain a new access token when the current one expires.

## Other responses

- `401`: Unauthorized
- `403`: Forbidden
- `404`: Not Found
- `422`: Unprocessable Entity

---

[API](https://skmtc.dev/remote-com/apis/partner-configuration.md) - [All operations](https://skmtc.dev/remote-com/apis/partner-configuration/llms.txt) - [OpenAPI document](https://skmtc.dev/remote-com/apis/partner-configuration/revisions/85c8e4880e38?raw)