---
title: "Issue an OAuth 2.0 access token (Client Credentials)"
method: POST
path: "/oauth2/token"
tags: ["authorization"]
---

# Issue an OAuth 2.0 access token (Client Credentials)

`POST /oauth2/token`

Exchanges client credentials for an access token. Parameters must be sent as application/x-www-form-urlencoded.

## Response `200`

Successful token response

- OAuth2TokenResponse
  - `access_token` string, required — The issued access token
  - `expires_in` integer, required — Lifetime in seconds of the access token.
  - `scope` string — Granted scopes (space-delimited).
  - `token_type` string, required — Usually 'bearer'

## Other responses

- `400` — Invalid request (missing or malformed parameters)
- `401` — Invalid client authentication
- `403` — Unauthorized scope

---

[API](https://skmtc.net/notefile/apis/notehub-api.md) · [All operations](https://skmtc.net/notefile/apis/notehub-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/notefile/notehub-api/revisions/9c5b2b63a991/schema)