> ## Documentation Index
> Fetch the complete documentation index at: https://syteca.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Exchange Refresh Token for Access Token

> Pre-v1.3 endpoint to exchange a Refresh Token for a short-lived Access Token. First call every ACB consumer makes.



## OpenAPI

````yaml /api-specs/acb-secrets.yaml post /get_access_token
openapi: 3.0.3
info:
  title: Application Credentials Broker API
  description: >-
    API for managing secrets and folders in the Application Credentials Broker
    system
  version: 1.4.0
  contact:
    name: API Support
    email: support@example.com
servers:
  - url: https://your-syteca-host/SytecaACB
    description: On-premises Syteca ACB service (v1.2 or later)
    variables:
      hostname:
        default: your-syteca-host.example.com
        description: Your Syteca Application Server hostname
  - url: https://your-syteca-host/EkranACB
    description: Legacy URL prefix for ACB deployments updated from pre-v1.2
    variables:
      hostname:
        default: your-syteca-host.example.com
        description: Your Syteca Application Server hostname
security:
  - AccessTokenAuth: []
paths:
  /get_access_token:
    post:
      tags:
        - Old Endpoints
      summary: Exchange Refresh Token for Access Token
      description: >-
        Pre-v1.3 endpoint to exchange a Refresh Token for a short-lived Access
        Token. First call every ACB consumer makes.
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/GetAccessTokenRequest'
      responses:
        '200':
          description: Access Token issued successfully
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/GetAccessTokenResponse'
        '401':
          description: Invalid or expired Refresh Token
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
        '403':
          description: IP Address restriction blocks the request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
        '429':
          description: Rate limit exceeded (5/min per Refresh Token)
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security: []
components:
  schemas:
    GetAccessTokenRequest:
      type: object
      required:
        - refreshToken
      properties:
        refreshToken:
          type: string
          description: >-
            Refresh Token from the user's Application Account Settings in the
            Management Tool.
    GetAccessTokenResponse:
      type: object
      properties:
        accessToken:
          type: string
          description: >-
            Access Token to use on subsequent API calls (Authorization header
            for new endpoints; in body for old endpoints).
        expires_in:
          type: integer
          format: int32
          description: >-
            Seconds until the Access Token expires. Default 600. 0 means never
            expires.
    ErrorResponse:
      type: object
      properties:
        status:
          type: integer
          description: HTTP status code
        message:
          type: string
          description: Error message
      required:
        - status
        - message
  securitySchemes:
    AccessTokenAuth:
      type: apiKey
      in: header
      name: Authorization
      description: Access token for authentication

````