---
title: "Create an Access Token"
method: POST
path: "/oauth2/token"
tags: ["Authentication"]
---

# Create an Access Token

`POST /oauth2/token`

Use API credentials from the Dashboard to create an Access Token that has permission to use all Arcadia API endpoints.
API access tokens are valid for one hour.

## Response `200`

Successful response

- TokenResponse
  - `access_token` string, required — The access token that can be used to access the Arcadia API. This token should be included in the “Authorization” header in the format “Bearer ACCESS_TOKEN".
  - `expires_in` integer, required — The number of seconds until the access token expires. Defaults to 3600 seconds (one hour).
  - `refresh_expires_in` integer, required — If one is provided, indicates the number of seconds until the refresh token expires. Currently, the refresh token grant type is not supported, so this value will always be 0.
  - `token_type` string, required — Specifies the type of access token, per the OAuth2 spec. Always returns a value of “Bearer”, indicating the access token should be added to requests in the “Authorization” header in the format “Bearer ACCESS_TOKEN”.
  - `not-before-policy` integer, required — A timestamp that specifies the earliest time the access token is valid. A value of 0 means there is no restriction on when the token become valid, and can be used immediately.
  - `scope` string, required — The scope of the access token. This will always currently be “profile email”.

## Other responses

- `401` — Unauthorized

---

[API](https://skmtc.net/arcadia/apis/plug-api.md) · [All operations](https://skmtc.net/arcadia/apis/plug-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/arcadia/plug-api/revisions/d00587742116/schema)