Skip to main content
POST
Exchange an authorization code or refresh token.

Body

application/json
grant_type
enum<string>
required
Available options:
authorization_code
code
string
required
redirect_uri
string<uri>
required
client_id
string
required
code_verifier
string
required
Required string length: 43 - 128
resource
string<uri>

Response

MCP OAuth token response.

access_token
string
required

Short-lived JWT for /api/v1/mcp.

token_type
enum<string>
required
Available options:
Bearer
expires_in
integer
required
Example:

900

refresh_token
string
required

Opaque refresh token. Store securely; traxy stores only a hash.

scope
string
required
Example:

"workspace:read leads:read analytics:read agent:read"