---
title: "Create a permanent access token for an external account"
method: POST
path: "/external_accounts/access_tokens"
tags: ["External Accounts"]
---

# Create a permanent access token for an external account

`POST /external_accounts/access_tokens`

## Headers

- `Idempotency-Key` string

## Request body

- ExternalAccountAccessToken
  - `business_id` string, uuid — The identifier for the business customer associated with this external account. Exactly one of `business_id` or `customer_id` must be specified.
  - `customer_id` string, uuid — The identifier for the personal customer associated with this external account. Exactly one of `customer_id` or `business_id` must be specified.
  - `request_id` string — A unique identifier for the request, which can be used for troubleshooting
  - `vendor_access_token` string — The access token associated with the Item data is being requested for.
  - `vendor_customer_id` string, uuid — An alias for `customer_id` (deprecated).
  - `vendor_institution_id` string, required — The ID of the institution the access token is requested for
  - `vendor_public_token` string, required — The user's public token obtained from successful link login.

## Response `201`

New verification link token

- ExternalAccountAccessToken
  - `business_id` string, uuid — The identifier for the business customer associated with this external account. Exactly one of `business_id` or `customer_id` must be specified.
  - `customer_id` string, uuid — The identifier for the personal customer associated with this external account. Exactly one of `customer_id` or `business_id` must be specified.
  - `request_id` string — A unique identifier for the request, which can be used for troubleshooting
  - `vendor_access_token` string — The access token associated with the Item data is being requested for.
  - `vendor_customer_id` string, uuid — An alias for `customer_id` (deprecated).
  - `vendor_institution_id` string, required — The ID of the institution the access token is requested for
  - `vendor_public_token` string, required — The user's public token obtained from successful link login.

## Other responses

- `400` — BadRequest
- `401` — Unauthorized
- `403` — Forbidden error
- `500` — Internal server error

---

[API](https://skmtc.net/synctera/apis/synctera-api.md) · [All operations](https://skmtc.net/synctera/apis/synctera-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/synctera/synctera-api/versions/b0d812e6cdd0/schema)