Skip to main content
POST
Exchange an approved claim or one-time assertion

Body

application/x-www-form-urlencoded
grant_type
any
required
claim_token
string
required

Private claim token returned by registration. Never put it in a URL.

Maximum string length: 100
resource
enum<string>
required
Available options:
https://console.altss.com/v1/console,
https://console.altss.com/v1/console/mcp
code_verifier
string
required
Pattern: ^[A-Za-z0-9._~-]{43,128}$

Response

Opaque revocable bearer credential. No scheduled token expiry is defined, so expires_in is omitted. Initial claim exchange also returns identity_assertion and assertion_expires; assertion exchange does not.

access_token
string
required

Opaque revocable Console credential; not an Auth0 token or a JWT access token.

token_type
any
required
scope
any
required
identity_assertion
string

Returned only by the initial claim exchange.

assertion_expires
string<date-time>

Returned only with identity_assertion.