v1

latestOpenAPI 3.1.0AGPL-3.0 license2026-07-1210336283.6 KB
OAuth

OAuth Token Exchange

Exchange authorization code for access token or refresh an access token. Accepts application/json or application/x-www-form-urlencoded.

post/oauth/token

Response

Token exchange successful

access_tokenstring required

Access token for API requests

token_type'Bearer' required

Token type, always 'Bearer'

expires_innumber required

Token expiration time in seconds

refresh_tokenstring required

Refresh token for obtaining new access tokens

scopestring required

Space-separated list of granted scopes

Example response

{
  "access_token": "mid_access_token_abcdef123456789",
  "token_type": "Bearer",
  "expires_in": 3600,
  "refresh_token": "mid_refresh_token_abcdef123456789",
  "scope": "transactions.read invoices.read"
}