Create an access token
POST/auth/token
Exchanges client credentials for a bearer access token, the OAuth 2 client-credentials grant (RFC 6749 section 4.4). The request body is application/x-www-form-urlencoded with the wire names RFC 6749 mandates (grant_type, client_id, client_secret, scope); those four field names, and the token-response fields access_token, token_type and expires_in, are the platform's only snake_case exception to its camelCase convention.
A failed grant returns 400 with an RFC 6749 section 5.2 error body (application/json, not Problem Details): this is the one endpoint where the OAuth spec, not api-design/README.md, defines the error contract.
Request
Responses
- 200
- 400
- 429
- 500
The access token.
The grant request was rejected, RFC 6749 section 5.2.
Rate limit or daily quota exceeded; see the RateLimit headers.
Something failed on our side; quote traceId to support.