---
title: "Get Access Token"
method: POST
path: "/oauth/token"
tags: ["Authentication"]
---

# Get Access Token

`POST /oauth/token`

The Get Access Token endpoint exchanges client credentials for an access token
using the OAuth 2.0 client credentials flow.

This endpoint accepts a client ID and client secret and returns an access token that
can be used to authenticate API requests. The token follows standard OAuth 2.0 patterns.

## Headers

- `Authorization` string

## Request body

- AuthTokenRequest
  - `clientID` string, required — The client ID for auth client credentials flow
  - `clientSecret` string, required — The client jwtSecret for auth client credentials flow

## Response `200`

OK

- union
  - AuthTokenResponse
    - `accessToken` string — The access token
    - `tokenType` string — The token type (typically 'Bearer')
    - `expiresIn` integer — Token expiration time in seconds
  - OAuth2TokenResponse — RFC 6749 compliant OAuth2 token response
    - `access_token` string — The access token
    - `token_type` string — The token type (typically 'Bearer')
    - `expires_in` integer — Token expiration time in seconds

## Other responses

- `400` — Bad Request
- `401` — Unauthorized
- `500` — Internal Server Error

---

[API](https://skmtc.net/gonitro/apis/nitro-sign-public-api.md) · [All operations](https://skmtc.net/gonitro/apis/nitro-sign-public-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/gonitro/nitro-sign-public-api/versions/26e3043a365b/schema)