---
title: "Gets or refreshes an access token"
method: POST
path: "/token"
tags: ["tokens"]
---

# Gets or refreshes an access token

`POST /token`

Gets or refreshes an access token, as part of the OAuth process.

## Query parameters

- `client_id` string, required
- `client_secret` string
- `code` string
- `grant_type` 'authorization_code' | 'refresh_token', required
- `hash` string
- `refresh_token` string
- `redirect_url` string

## Headers

- `Content-Type` 'application/x-www-form-urlencoded'

## Response `200`

An access token

- Token
  - `access_token` string — A credential that can be used by a client to access the Smartsheet API.
  - `token_type` string — How an access token will be generated and presented. Smartsheet uses the bearer parameter, which means essentially give access to the bearer of this token.
  - `expires_in` number — Number of seconds token is valid once issued.
  - `refresh_token` string — A credential tied to the access token that can be used to obtain a fresh access token with the same permissions, without further involvement from a user.

## Other responses

- `default` — Error Payload

---

[API](https://skmtc.net/smartsheet/apis/smartsheet-openapi-reference.md) · [All operations](https://skmtc.net/smartsheet/apis/smartsheet-openapi-reference/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/smartsheet/smartsheet-openapi-reference/versions/b4afda95fb51/schema)