---
title: "Request access token"
method: POST
path: "/v6/auth/token"
tags: ["OAuth"]
---

# Request access token

`POST /v6/auth/token`

Exchange client credentials (and optionally a `userId`) for an access token.

Supports `authorization_code`, `client_credentials`, and `refresh_token` grant types.
Authenticate using HTTP Basic auth

## Response `200`

Access token issued successfully

- object
  - `access_token` string — The bearer token to include in API requests.
  - `token_type` 'Bearer'
  - `expires_in` integer — Token lifetime in seconds.
  - `refresh_token` string — Refresh token, returned for `authorization_code` grant types.
  - `scope` string — Space-separated list of granted scopes, if applicable.

---

[API](https://skmtc.net/tight/apis/tight-api.md) · [All operations](https://skmtc.net/tight/apis/tight-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/tight/tight-api/revisions/e9f0790a89af/schema)