v1

latestOpenAPI 3.1.02026-07-243113441.2 MB
Introspection

Create a System Access Token or Refresh an Access Token

Creates a system access token or refreshes an oauth access token

post/oauth/token

Headers

X-Gusto-API-Version'2026-06-15'

Determines the date-based API version associated with your API call. If none is provided, your application's minimum API version is used.

Request body

OR

Example request

{
  "client_id": "qr6L_9FRkbMVL_GdwvrMW6Ef8tcU6NUxjWpOfqXqOG8",
  "client_secret": "3aQSHRB3596nZhm6NdNBELZ1u9xbZmvCrKpBhbZYq6w",
  "refresh_token": "iEjL96L9Pndwmi-xVX3Q-xbrvvhnjHYGX87sopgGJ8E"
}

Response

Success

access_tokenstring required

A new access token that can be used for subsequent authenticated requests

token_typestring required

The literal string 'Bearer'

expires_innumber required

The TTL of this token. After this amount of time, you must hit the refresh token endpoint to continue making authenticated requests.

created_atnumber required

Datetime for when the new access token is created.

refresh_tokenstring nullable

A token that must be passed to the refresh token endpoint to get a new authenticated token. Only present when refresh token is provided.