---
title: "Issue an OAuth token"
method: POST
path: "/auth/token"
tags: ["auth"]
---

# Issue an OAuth token

`POST /auth/token`

Issue an OAuth token using client credentials.

## Response `200`

OK

- OAuthToken
  - `access_token` string, required — The access token.
  - `expires_in` integer, required — The number of seconds until the token expires.
  - `refresh_token` string, nullable — A refresh token for obtaining new access tokens without re-authentication.
  - `scope` string, required — The scopes of the token, comma-separated.
  - `token_type` string, required — The token type. Always 'bearer' for JWT tokens.

## Other responses

- `400` — OAuth error response (RFC 6749 §5.2). Malformed form fields return the standard error envelope instead.
- `401` — Client authentication failed (RFC 6749 §5.2).

---

[API](https://skmtc.net/joinsophic/apis/sophic-engine-api.md) · [All operations](https://skmtc.net/joinsophic/apis/sophic-engine-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/joinsophic/sophic-engine-api/revisions/5b4c43e2941b/schema)