---
title: "Use this endpoint to obtain an access token"
method: POST
path: "/token"
tags: ["Token Endpoint"]
---

# Use this endpoint to obtain an access token

`POST /token`

The token endpoint is used by the client to obtain an access token by 
presenting its authorization grant or refresh token.  The token 
endpoint is used with every authorization grant except for the
implicit grant type (since an access token is issued directly).

## Headers

- `x-client-certificate` string

## Response `200`

Token response

- TokenResponse — token response
  - `id_token` string — ID Token (JWT) associated with the authenticated session.
  - `access_token` string, required — The access token issued by the authorization server.
  - `token_type` 'Bearer', required — The type of the token issued.
  - `expires_in` number, required — The lifetime in seconds of the access token.
  - `scope` string — Space-delimited string containing the scope associated with the access token
  - `refresh_token` string — The refresh token issued by the authorization server.

## Other responses

- `400` — OAuth JSON error response

---

[API](https://skmtc.net/ibm/apis/ibm-security-verify-access-oidc-provider.md) · [All operations](https://skmtc.net/ibm/apis/ibm-security-verify-access-oidc-provider/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/ibm/ibm-security-verify-access-oidc-provider/versions/68cfc4d21b73/schema)