# Authorization

**POST** `/skua/tenant_oauth/token`

Exchanges tenant OAuth client credentials (`client_id` and `client_secret`) for a short-lived (1 hour) OAuth access token using the `client_credentials` grant type.

It is strongly advised to use **OAuth token** instead of **Secret key** as OAuth tokens are short-lived (1 hour) and offer improved security for API integrations.

To find your **OAuth Client ID** and **Client Secret**, go to `SuperAdmin > Settings > API`.

### Response fields

**status** Indicates whether the request succeeded (`true` or `false`).  
**data.access_token** JWT access token valid for 1 hour (3600 seconds). Use this in the `Authorization: Bearer <access_token>` header for subsequent API calls.  
**data.token_type** Token type (always `Bearer`).  
**data.expires_in** Lifespan in seconds (3600 seconds = 1 hour).