oAuth

Create Access Token

Exchange a credential for an access token. Supports two grant types:

  • authorization_code: Exchange an authorization code for an access token (cross-org data sharing).
  • client_credentials: Exchange a signed JWT assertion (private_key_jwt) for a short-lived access token (machine-to-machine auth, RFC 7523).
post/oauth/token

Request

  • Base URL: https://api.withpersona.com/api/v1
  • URL: https://api.withpersona.com/api/v1/oauth/token
  • Auth: HTTP bearer

Headers

Key-Inflection'camel' | 'kebab' | 'snake'

Determines casing for the API response.

Idempotency-Keystring

Ensures the request is idempotent.

Persona-Version'2026-09-29' | '2025-12-08' | '2025-10-27' | '2023-01-05' | '2022-09-01' | '2021-08-18' | '2021-07-05' | '2021-02-21' | '2020-05-18'

Server API version. More info on versioning can be found here.

Request body

OR

Response

This endpoint returns an Access Token.

access-tokenstring required

Access Token that can be used wherever an API Key would be used.

expires-ininteger required

Number of seconds until the access token expires.

scopestring required

Space-separated list of granted permissions. Format varies by grant type: for client_credentials, bare permission names (e.g. inquiry.read account.read); for authorization_code, permission:object pairs (e.g. inquiry.read:inq_xxx). Empty string when no permissions are granted.

token-type'bearer' | 'Bearer' required

Changes

No recorded changes to this operation across all 1 revision of this API.