---
title: "Get Access Token"
method: POST
path: "/token/v1"
tags: ["Access Token"]
---

# Get Access Token

`POST /token/v1`

Using the authorization code assigned to the business user, this endpoint will send back an access token.

## Request body

- object
  - `client_id` string, required — ID assigned by Yelp for the third-party system that will make user-authorized requests to Yelp.
  - `client_secret` string, required — Client secret assigned by Yelp for the third-party system that will make user-authorized requests to Yelp.
  - `code` string, required — A unique code that will be used by the client to redeem an access token.
  - `grant_type` string, required — The grant being presented in order to exchange for an access token. For example, when redeeming the authorization code for an access token, this value will be authorization_code.
  - `redirect_uri` string — The client-provided redirect endpoint URL. If no redirect_uri was provided during authorization, it is optional here.

## Response `200`

Successfully redeemed the authorization code for an access token.

- object
  - `access_token` string — Token issued by the authorization server. The token will be 128 characters long. Tokens will be valid for the R2R api for 7 days.
  - `expires_in` integer — Seconds until token expires.
  - `expiration_timestamp` string — The expiration time of the access token in ISO8601 format.
  - `token_type` string — The type of token issued. Default to ‘Bearer’
  - `refresh_token` string — Token code used in refresh endpoint. The token will be 128 characters long.

## Other responses

- `400` — This error is returned in any of the following scenarios: | id | Description | http_code | ---------------------- | -------------------------------------------------------------------------------- | -------------- | INVALID_REQUEST | Missing a required parameter or includes an unsupported parameter. | HTTPBadRequest (400) | INVALID_GRANT | The provided authorization grant is invalid, expired or revoked. | HTTPBadRequest (400) | UNAUTHORIZED_CLIENT | The authenticated client is not authorized to use this authorization grant type. | HTTPBadRequest (400) | UNSUPPORTED_GRANT_TYPE | The authorization grant type is not supported by the authorization server. | HTTPBadRequest (400)
- `401` — This error is returned in any of the following scenarios: | id | Description | http_code | -------------- | ---------------------------------------------------------------------------------------------------------------------------- | -------------- | INVALID_CLIENT | Client authentication failed due to unknown client, no client authentication included, or unsupported authentication method. | HTTPUnauthorized (401)
- `404` — This error is returned in any of the following scenarios: | id | Description | http_code | ---------------- | ---------------------------------- | -------------- | CLIENT_NOT_FOUND | Supplied client ID does not exist. | HTTPNotFound (404)

---

[API](https://skmtc.net/yelp/apis/businesses.md) · [All operations](https://skmtc.net/yelp/apis/businesses/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/yelp/businesses/revisions/d3f744f55ed7/schema)