---
title: "Token Endpoint"
method: POST
path: "/oauth/token"
tags: ["OAuth"]
---

# Token Endpoint

`POST /oauth/token`

RFC 6749 token endpoint. Supports grant types: client_credentials, refresh_token, urn:ietf:params:oauth:grant-type:device_code, urn:openid:params:grant-type:ciba. Request body must be application/x-www-form-urlencoded.

## Response `200`

Default Response

- object
  - `access_token` string, required — EdDSA-signed JWT
  - `token_type` 'Bearer', required
  - `expires_in` integer, required — Token lifetime in seconds
  - `scope` string — Space-separated list of granted scopes
  - `refresh_token` string
  - `id_token` string — OIDC ID token (if openid scope was granted)

## Other responses

- `400` — Default Response
- `401` — Default Response

---

[API](https://skmtc.net/bkeyid/apis/bkey-api.md) · [All operations](https://skmtc.net/bkeyid/apis/bkey-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/bkeyid/bkey-api/versions/2c7566abec9e/schema)