---
title: "Create access token"
method: POST
path: "/auth/accessToken"
tags: ["JWT authentication"]
---

# Create access token

`POST /auth/accessToken`

Generates a JWT access token using client credentials for Web SDK calls.

## Headers

- `authorization` string, required
- `x-correlation-id` string, required

## Request body

- object
  - `merchantId` string, required — Identifier of the merchant provided by Thales at on-boarding.
  - `tokens` TokenId[], required — The list of tokens to be associated with the JWT, only Mastercard and Visa tokens allowed, all the tokens must belong to the same merchant
  - `scope` 'PAYMENT_PASSKEY', required — Scope used for the access token generation

## Response `200`

Access token successfully generated

- object
  - `accessToken` string, required — Access token generated for WEB SDK calls, JWT content: - exp - iss - iat - aud - sub - trId - scope

## Other responses

- `400` — Bad request - Not Retryable
- `401` — Unauthorized - Not Retryable
- `404` — Not Found - Not Retryable
- `429` — Too Many Requests - Retryable
- `500` — Internal Server Error Retry possible
- `503` — Service Unavailable Retry possible

---

[API](https://skmtc.net/thalescloud/apis/d1-oauth-api.md) · [All operations](https://skmtc.net/thalescloud/apis/d1-oauth-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/thalescloud/d1-oauth-api/revisions/96089514858c/schema)