---
title: "POST /service-account-token"
method: POST
path: "/service-account-token"
tags: ["svc-org-management_other"]
---

# POST /service-account-token

`POST /service-account-token`

Exchange service account credentials for an organization-scoped M2M token.

Credentials may be provided via HTTP Basic Authentication (RFC 6749 Section 2.3.1,
preferred) or as form body parameters. The server MUST NOT accept credentials in
both locations simultaneously and will reject such requests with a 400 error.

## Headers

- `X-Client-Request-ID` string, uuid

## Response `200`

M2M token generated successfully

- OrgManagementTokenResponse — OAuth2-style token response for M2M tokens
  - `access_token` string, required — The M2M access token
  - `token_type` string, required — Token type (always "Bearer")
  - `expires_in` integer — Token expiration time in seconds

## Other responses

- `400` — bad request error response when caller supplied invalid input data
- `401` — unauthorized error response when caller session is not authenticated
- `404` — not found error response when caller does not have permission to see a resource or the resource does not exist
- `429` — rate limit exceeded error response when caller has exhausted api limits for the given time period
- `500` — internal server error response when server encountered error of its own creation
- `503` — service unavailable error when server you're attempting to reach is not available
- `default` — internal server error response when server encountered error of its own creation

---

[API](https://skmtc.net/keycardai/apis/untitled-api.md) · [All operations](https://skmtc.net/keycardai/apis/untitled-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/keycardai/untitled-api/versions/2f5033ed4491/schema)