Sign in

v1

latestOpenAPI 3.0.0Apache 2.0 License2026-07-14117758.9 KB

Grants permission to exchange client credentials for an OAuth 2.0 access token scoped to a resource that can be used to access AWS services from applications

post/v1/token#x-amz-client-auth-method=iam

Query parameters

x-amz-client-auth-method'iam' required

Request body

grant_typestring required

OAuth 2.0 grant type for client_credentials flow.

resourcestring required

The OAuth resource for which the access token is requested. Example: "aws-mcp.amazonaws.com".

Response

Success

accessTokenstring password required

JWT access token containing principal identity, resource scope, and session metadata

tokenTypestring required

Always "Bearer" per OAuth 2.1 specification

expiresIninteger required

Token lifetime in seconds. Value is the minimum of session validity and 1 hour.