Refresh Token
POST
https://api.monchain.ai/p/uss/api/v1/oauth2/refreshSwap a refresh token for a fresh Monchain bearer token.
Header parameters
Content-Type | string · requiredForm data payload for OAuth2 refresh flowe.g. application/x-www-form-urlencoded
x-api-key | string · requiredAPI key that minted the original refresh token
Request body
grant_type | string · requiredOAuth2 grant type (always refresh_token)e.g. refresh_token
client_id | string · requiredMonchain org client identifier
client_secret | string · requiredConfidential secret bound to the client
scope | string · optionalOptional when requesting same scopes; include to down-scope
refresh_token | string · requiredPreviously issued refresh token
Responses
200Access token issuedValid refresh token + credentials
200Access token issued
Valid refresh token + credentialsaccess_token· string· required
Newly minted bearer token
refresh_token· string· required
Replacement refresh token if rotation is enabled
expires_in· integer· required
Access token TTL in seconds
scope· string· required
Granted scopes for this token
token_type· string· required
Always Bearer
400Invalid requestMissing fields or unsupported scope
400Invalid request
Missing fields or unsupported scopestatus· integer· required
HTTP status code returned by the API
message· string· required
Human-readable error details
path· string | null· optional
Request path that triggered the error
timestamp· string· required
UTC timestamp for when the error occurred
401Authentication failedRefresh token or client secret invalid
401Authentication failed
Refresh token or client secret invalidstatus· integer· required
HTTP status code returned by the API
message· string· required
Human-readable error details
path· string | null· optional
Request path that triggered the error
timestamp· string· required
UTC timestamp for when the error occurred
403Token revokedRefresh token expired or revoked
403Token revoked
Refresh token expired or revokedstatus· integer· required
HTTP status code returned by the API
message· string· required
Human-readable error details
path· string | null· optional
Request path that triggered the error
timestamp· string· required
UTC timestamp for when the error occurred