Get access or refresh token

Required scopes: No scopes required.

Requests the OAuth access token. Specify the grant_type as authorization_code, the client_id, and the client_secret in the request body. If you are using the PKCE authentication, you also need to send the code_verifier result.

If you want to request the refresh_token, set the grant_type to refresh_token instead.

If you requested the openid scope in the GET /authorize endpoint, then the response contains the id_token as well.

post

/token

Body

codestring

Specifies the authorization_code you received from the API call GET /authorize. This parameter is required if you set the grant_type to authorization_code.

Example: authorization-code

redirect_uristring

Sets the URI where you want to redirect the client after they receive authorization data. This parameter is required if you set the grant_type to authorization_code.

Example: https://your-redirect-uri.com

code_verifierstring

Provides the code_verifier data for the PKCE authentication. This parameter is required if you set the grant_type to authorization_code.

Example: code-verifier

client_idstringrequired

The client_id and client_secret pair identify the client for the OAuth authorization.

Example: 123

client_secretstring

The client_id and client_secret pair identify the client for the OAuth authorization.

Example: your-client-secret

refresh_tokenstring

Specifies the former refresh_token to get a new refresh_token. This parameter is required if you set the grant_type to refresh_token.

Example: your-refresh-token

grant_typeany ofrequired

Sets the type of the authorization data you want to receive.

Example: authorization_code

Responses

application/json

cURL

JavaScript

Python

HTTP

cURL

curl -L \
  --request POST \
  --url 'https://www.make.com/oauth/v2/token' \
  --header 'Content-Type: application/x-www-form-urlencoded' \
  --data '{"code":"authorization-code","redirect_uri":"https://your-redirect-uri.com","code_verifier":"code-verifier","client_id":"123","client_secret":"your-client-secret","refresh_token":"your-refresh-token","grant_type":"authorization_code"}'

200

200

{
  "access_token": "access-token",
  "access_token_expires_at": "2024-07-01T12:34:56Z",
  "refresh_token": "new-refresh-token",
  "refresh_token_expires_at": "2024-07-01T12:34:56Z",
  "id_token": "text",
  "scope": "templates:read scenarios:read scenarios:run",
  "token_type": "bearer"
}

Default Response