Sign in
POST token

Token endpoint (authorization code or refresh token)

Issues or refreshes access tokens. application/x-www-form-urlencoded is the standard encoding; application/json with the same field names is also accepted.

post/token

Request body

OR

Response

Access token response from the token endpoint.

access_tokenstring required

Bearer access token to use in the Intake Form API authorization header.

token_typestring required

Token type; value is Bearer.

expires_ininteger required

Lifetime of the access token in seconds from issuance.

refresh_tokenstring required

Token used to issue a new access token without going through the authorize process again. Refresh tokens do not expire until the new access token it granted is used.

scopestring required

Granted scope string.

created_atinteger required

Unix timestamp when the token was created.