---
title: "Create business-scoped access token"
method: POST
path: "/v1/platform/{business_id}/oauth2/token/"
tags: ["Oauth2 authentication - Unscoped and Scoped"]
---

# Create business-scoped access token

`POST /v1/platform/{business_id}/oauth2/token/`

## Request

- Base URL: `https://docs.thredfi.com` (the document declares no server; this is the origin it was published from)
- URL: `https://docs.thredfi.com/v1/platform/{business_id}/oauth2/token/`
- Auth: one of:
  - HTTP bearer
  - HTTP basic
  - HTTP bearer
  - HTTP bearer

Create a business-scoped JWT token for accessing business-specific endpoints. Requires a valid partner (unscoped) Bearer token in the Authorization header. Use the BearerUnscoped option in Swagger UI.

## Path parameters

- `business_id` string, uuid, required

## Response `200`

- BusinessTokenResponse: Serializer for business-scoped token response
  - `access_token` string, required: Business-scoped JWT Bearer token
  - `token_type` string: Token type (always 'Bearer')
  - `expires_in` integer, required: Token expiration time in seconds
  - `scope` string, required: Token scope (always 'business_access')
  - `business_id` string, uuid, required: ID of the business this token is scoped to

## Other responses

- `401`
- `404`
- `500`

---

[API](https://skmtc.dev/thredfi/apis/thredfi-accounting-platform-api.md) - [All operations](https://skmtc.dev/thredfi/apis/thredfi-accounting-platform-api/llms.txt) - [OpenAPI document](https://skmtc.dev/thredfi/apis/thredfi-accounting-platform-api/revisions/0c1918254db3?raw)