---
title: "OAuth 2.0 Token Exchange Endpoint"
method: POST
path: "/oauth/token"
tags: ["OAuth"]
---

# OAuth 2.0 Token Exchange Endpoint

`POST /oauth/token`

Exchanges an OAuth subject token for a Tambo access token following RFC 6749 and RFC 8693 specifications. Accepts form-encoded data and validates the subject token based on project OAuth validation settings.

## Response `200`

Token exchange successful

- OAuthTokenResponse — OAuth 2.0 Token Response
  - `access_token` string, required — JWT access token signed by Tambo with projectId as issuer
  - `token_type` string, required — Token type - always 'Bearer'
  - `expires_in` number, required — Token expiration time in seconds
  - `issued_token_type` string, required — Type of the issued token

## Other responses

- `400` — Bad request - invalid grant type or missing parameters
- `401` — Unauthorized - invalid OAuth token

---

[API](https://skmtc.net/tambo-ai/apis/tambo-api.md) · [All operations](https://skmtc.net/tambo-ai/apis/tambo-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/tambo-ai/tambo-api/revisions/312691b28f1c/schema)