---
title: "Exchange an Okta access token for MC-issued tokens"
method: POST
path: "/api/v1/field-providers/auth/exchange/"
tags: ["Field Providers", "Field API — Auth"]
---

# Exchange an Okta access token for MC-issued tokens

`POST /api/v1/field-providers/auth/exchange/`

Validate an Okta access token (from the iOS Native app's PKCE login) and
mint MC's own access/refresh JWT pair scoped to the FieldProvider.

## Request body

- TokenExchangeRequest
  - `okta_access_token` string, required

## Response `200`

OK

- TokenPairResponse
  - `access` string, required
  - `refresh` string, required

## Other responses

- `401` — Unauthorized
- `403` — Forbidden

---

[API](https://skmtc.net/cloverhealth/apis/clover-api.md) · [All operations](https://skmtc.net/cloverhealth/apis/clover-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/cloverhealth/clover-api/revisions/28797307aae6/schema)