---
title: "Create an OAuth token"
method: POST
path: "/oauth/token"
tags: ["OAuth"]
---

# Create an OAuth token

`POST /oauth/token`

Creates a bearer token that enables an OAuth client to authenticate with the Zuora REST API. The OAuth client must have been created using the Zuora UI. See [Authentication](https://developer.zuora.com/rest-api/general-concepts/authentication/) for more information.

**Note:** When using this operation, do not set any authentication headers such as `Authorization`, `apiAccessKeyId`, or `apiSecretAccessKey`.

You should not use this operation to generate a large number of bearer tokens in a short period of time; each token should be used until it expires. If you receive a 429 Too Many Requests response when using this operation, reduce the frequency of requests. This endpoint is rate limited by IP address.

For the rate limit information of authentication, see [Rate and concurrent request limits](https://developer.zuora.com/rest-api/general-concepts/rate-concurrency-limits/).

## Headers

- `Zuora-Track-Id` string
- `Zuora-Entity-Ids` string, uuid

## Response `200`

OK

- TokenResponse
  - `access_token` string — The generated token.
  - `expires_in` number — The number of seconds until the token expires.
  - `jti` string — A globally unique identifier for the token.
  - `scope` string — A space-delimited list of scopes that the token can be used to access.
  - `token_type` string — The type of token that was generated, i.e., `bearer`.

## Other responses

- `429` — Too Many Requests

---

[API](https://skmtc.dev/zuora/apis/api-reference.md) · [All operations](https://skmtc.dev/zuora/apis/api-reference/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/zuora/api-reference/revisions/d11e237f3e54/schema)