Get access token
Authentication
Get access token
Exchanges an OAuth 2.0 authorization code (Authorization Code + PKCE flow) or refresh token for an Endaoment access token.
This endpoint lives on the Endaoment auth server ({AUTH_URL}/token), not the API server. Call it from your backend only—never from browser or mobile client code.
For the authorize redirect that produces the code, send users to {AUTH_URL}/auth with your registered client_id, redirect_uri, PKCE params, and scopes.
POST
Get access token
Authorizations
OAuth client ID and secret as HTTP Basic credentials.
Body
application/x-www-form-urlencoded