Skip to main content
POST
Exchange an authorization code for an access token

Body

grant_type
enum<string>
required
Available options:
authorization_code
code
string
required

Short-lived, single-use authorization code.

client_id
string
required
redirect_uri
string<uri>
required

Must exactly match the URI used in the authorization request.

code_verifier
string
required

RFC 7636 S256 PKCE verifier.

Required string length: 43 - 128
resource
string<uri>

Optional RFC 8707 resource indicator. If presented, it must match the authorization request.

Response

A scoped bearer access token. Cloner exchanges also include the connected account and site.

access_token
string
required

Scoped bearer token. Store it securely; the response has no refresh token.

token_type
enum<string>
required
Available options:
Bearer
scope
string
required

Space-separated granted scopes.

account_email
string<email>

Present for SandyWP Cloner exchanges.

site_url
string<uri>

Present for SandyWP Cloner exchanges.