Skip to main content
POST
Token endpoint (RFC 6749 §5 / OAuth 2.1)

Authorizations

Authorization
string
header
required

Issue keys in Settings → API. Send them as Authorization: Bearer ont_… (an X-Api-Key: ont_… header is also accepted). Session-cookie routes are used by the OnTime web apps and are shown for completeness.

Response

200 - application/json

Success

access_token
string
required
token_type
string
required
Allowed value: "bearer"
expires_in
number
required
refresh_token
string
required
scope
string
required