---
title: "Create a System Access Token or Refresh an Access Token"
method: POST
path: "/oauth/token"
tags: ["Introspection"]
---

# Create a System Access Token or Refresh an Access Token

`POST /oauth/token`

Creates a system access token or refreshes an oauth access token

## Headers

- `X-Gusto-API-Version` '2026-06-15'

## Request body

- union
  - object
    - `client_id` string, required — Your client ID
    - `client_secret` string, required — Your client secret
    - `grant_type` 'refresh_token', required — Set system_access to create a system access token, refresh_token to refresh an existing token
    - `refresh_token` string, required
    - `redirect_uri` string — The redirect URI you set up via the Developer Portal
  - object
    - `client_id` string, required — Your client ID
    - `client_secret` string, required — Your client secret
    - `grant_type` 'system_access', required — Set system_access to create a system access token, refresh_token to refresh an existing token

## Response `200`

Success

- Authentication
  - `access_token` string, required — A new access token that can be used for subsequent authenticated requests
  - `token_type` string, required — The literal string 'Bearer'
  - `expires_in` number, required — The TTL of this token. After this amount of time, you must hit the refresh token endpoint to continue making authenticated requests.
  - `created_at` number, required — Datetime for when the new access token is created.
  - `refresh_token` string, nullable — A token that must be passed to the refresh token endpoint to get a new authenticated token. Only present when refresh token is provided.

---

[API](https://skmtc.net/gusto/apis/gusto-api.md) · [All operations](https://skmtc.net/gusto/apis/gusto-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/gusto/gusto-api/revisions/826dfa57fb3b/schema)