Skip to main content
POST
PKCE token exchange

Authorizations

Authorization
string
header
required

Bearer token authentication. Supports two token types:

  • JWT Access Token — obtained via POST /v1/auth/login
  • Personal Access Token (PAT) — created via POST /v1/api-tokens, format: cmnd_<tokenId>.<secret>

Body

application/json
code
string
required
redirect_uri
string
required
code_verifier
string
required

Response

Token exchange successful

access_token
string

JWT access token (use for API requests)

refresh_token
string

Refresh token (use to get new access token)

token_type
string
Example:

"bearer"

expires_in
integer

Access token expiry in seconds

Example:

3600

user
object