---
title: "Generate Access Token"
method: POST
path: "/api/access/v1/oauth/token"
tags: ["OAuth Token"]
---

# Generate Access Token

`POST /api/access/v1/oauth/token`

Use this API to generate an OAuth access token using the `client_credentials` grant type.

> 🗒 Things to Know
>
> - Client credentials can be generated from within Global Settings in the OneTrust application. For more information, see [Managing OAuth 2.0 Client Credentials](/onetrust/docs/managing-oauth-20-client-credentials).
> - Use the `client_id` and `client_secret` to generate the OAuth access token using this API.
> - A maximum of 500 OAuth 2.0 client credentials can be created per account.

## Response `200`

OK

- PlatformAccessManagementClientCredentialsResponse
  - `access_token` string — The OAuth access token for API authentication.
  - `email` string, email — The API user email in the format tenantGuid@api.onetrust.com.
  - `expires_in` integer — The token lifetime in seconds.
  - `guid` string, uuid — A unique identifier for this token session.
  - `jti` string — The JWT identifier for this token.
  - `languageId` integer — The numeric identifier for the user's language.
  - `orgGroupGuid` string, uuid — The unique identifier of the organization where the credential was created.
  - `orgGroupId` string, uuid — The unique identifier of the organization.
  - `ot_scopes` string — The API scopes granted to this credential.
  - `role` string — The user role associated with this token.
  - `scope` string — The OAuth scope for this token.
  - `sessionId` string, uuid — The unique identifier for this API session.
  - `tenantGuid` string — The unique identifier of your OneTrust tenant.
  - `tenantId` integer — The numeric identifier of your OneTrust tenant.
  - `token_type` string — The type of token. Always 'bearer'.
  - `user_name` string, email — The API username in the format tenantGuid@api.onetrust.com.

## Other responses

- `400` — Bad Request ### Possible Reasons: * Invalid `grant_type`
- `401` — Unauthorized ### Possible Reasons: * Invalid client credentials
- `403` — Forbidden
- `404` — Not Found
- `429` — Too Many Requests. For more information, see [API Rate Limits](https://developer.onetrust.com/onetrust/reference/rate-limits-overview).
- `500` — Internal Server Error

---

[API](https://skmtc.net/onetrust/apis/platform-access-management.md) · [All operations](https://skmtc.net/onetrust/apis/platform-access-management/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/onetrust/platform-access-management/versions/21de3aa0b170/schema)