---
title: "Create a new OAuth access token for a given OAuth app."
method: POST
path: "/v1/core/oauth/apps/{clientId}/access-token"
---

# Create a new OAuth access token for a given OAuth app.

`POST /v1/core/oauth/apps/{clientId}/access-token`

This endpoint creates a new OAuth access token at the user scope.

## Path parameters

- `clientId` string, required

## Request body

- object
  - `clientSecret` string, required — The OAuth app client secret returned in the POST /oauth/apps response.
  - `userId` string, required — The user that this token will be bound to
  - `scope` 'read' | 'write', required — One of ("read", "write"). This will restrict what HTTP verbs the token has access to.

## Response `201`

Create a new OAuth access token for a given OAuth app.

- object
  - `accessTokenId` string, required
  - `accessToken` string, required

---

[API](https://skmtc.net/siro/apis/swagger-api.md) · [All operations](https://skmtc.net/siro/apis/swagger-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/siro/swagger-api/versions/9995339a94c6/schema)