---
title: "Rotate an agent refresh token"
method: POST
path: "/auth/agent/refresh"
---

# Rotate an agent refresh token

`POST /auth/agent/refresh`

## Request

- Base URL: `https://superskill.sh/api`
- URL: `https://superskill.sh/api/auth/agent/refresh`
- Auth: none declared

Consumes the refresh token once and returns a replacement pair. Reuse revokes the whole session family.

## Request body

- object
  - `refresh_token` string, required

## Response `200`

Rotated opaque credential pair

- AgentAuthorizationToken
  - `access_token` string, required
  - `refresh_token` string, required
  - `token_type` 'Bearer', required
  - `expires_in` integer, required
  - `session_expires_in` integer, required
  - `scope` string, required

## Other responses

- `400`: Bad request
- `401`: Authorization required
- `429`: Bounded refresh rate exceeded
- `503`: Dependent service unavailable

---

[API](https://skmtc.dev/superskill/apis/superskill-api.md) · [All operations](https://skmtc.dev/superskill/apis/superskill-api/llms.txt) · [OpenAPI document](https://skmtc.dev/superskill/apis/superskill-api/revisions/ced2d2d1f217?raw)