---
title: "Issue access tokens."
method: POST
path: "/oauth/token"
tags: ["OAuth"]
---

# Issue access tokens.

`POST /oauth/token`

Form Parameters (authorization_code grant):
    grant_type: Must be 'authorization_code'
    code: Authorization code from /authorize
    redirect_uri: Must match original request
    client_id: OAuth client identifier
    code_verifier: PKCE code verifier

Form Parameters (refresh_token grant):
    grant_type: Must be 'refresh_token'
    refresh_token: Valid refresh token
    client_id: OAuth client identifier

Returns:
    JSON response with access_token (JWT), refresh_token, expires_in, etc.

## Response `default`

Default error response

- Error
  - `code` integer — Error code
  - `status` string — Error name
  - `message` string — Error message
  - `errors` object — Errors

## Other responses

- `400` — Bad request
- `401` — Unauthorized
- `403` — Forbidden
- `404` — Not found
- `405` — Method not allowed
- `409` — Conflict
- `500` — Internal server error

---

[API](https://skmtc.net/archera/apis/archera-ai-api.md) · [All operations](https://skmtc.net/archera/apis/archera-ai-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/archera/archera-ai-api/versions/ed4f8fa35f31/schema)