auth-oauth

Token Endpoint

OAuth 2.1 token endpoint — both standard grants.

  • grant_type=authorization_code (default when absent, for the shipped SDK): PKCE-verified single-use code exchange.
  • grant_type=refresh_token (RFC 6749 §6): rotation with reuse detection — standards-following clients (Claude Code, Cursor, ChatGPT) POST refresh grants HERE, per the AS metadata's grant_types_supported. The legacy /refresh route remains for the shipped SDK.

Accepts form-encoded and JSON bodies (see _parse_token_body).

post/v1/auth/oauth/token

Request

  • Base URL: https://api.usekeel.io (the document declares no server; this is the origin it was published from)
  • URL: https://api.usekeel.io/v1/auth/oauth/token
  • Auth: none declared

Response

Successful Response

access_tokenstring required
refresh_tokenstring required
token_type'Bearer'
expires_ininteger required

Access-token lifetime in seconds.

scopestring required

Space-separated granted scope: the advertised tier tokens the credential fully covers (base, live) first, then the resolved credential_scopes (Q-1786).

Changes

No recorded changes to this operation across all 2 revisions of this API.