This endpoint issues access tokens required for authenticating API requests. It supports multiple OAuth 2.0 grant types to accommodate various integration scenarios.

Market availability: Global

Supported Grant Types

Grant Type	Description	How to get the credentials
authorization_code	Exchanges an authorization code for an access token.	Used in app integration only via the OAuth consent screen. This is applicable to the US market only. Refer to OAuth 2.0 authorization for more details.
client_credentials	Issues a token using client ID and secret.	For sellers: Obtain client_id and client_secret from the Developer Portal. For solution providers: Obtain credentials from sellers via Delegated Access authorization.
refresh_token	Issues a new access token using a refresh token.	Provided during the authorization_code flow. This is applicable to the US market only. Refer to OAuth 2.0 authorization for more details.

Note:
Use authorization_code and refresh_token only for app-based integrations. These grant types are currently supported only in the US market.

Token Lifetimes

Token Type	Duration
Access Token	15 minutes (900 seconds)
Refresh Token	1 year (365 days)

200Successful Operation

400Bad request

401Unauthorized request

500Internal Server Error