Exchange an OAuth access token

Exchanges an authorization code or refresh token for an OAuth access token (HTTP Basic client credentials).

Manage pages, blocks, data sources/databases, comments, file uploads, views, users, and search through the official versioned Notion API, with OAuth and async tasks. The complete boundary is the 49 endpoints in the official OpenAPI snapshot; workspace data is private user content, so Pontx does not proxy, cache, or aggregate it and callers use the local SDK/CLI directly.

Request

operationId: createToken
Server: https://api.notion.com
Authentication: bearerAuth, basicAuth

Request parameters

`Notion-Version`

headerstringrequired

API version date for the request; the current latest version is 2026-03-11.

2026-03-11

Request body

stringrequired

Responses

`200`

objectapplication/json

Request succeeded.

Properties: access_tokenbot_idduplicated_template_idownerrefresh_tokenrequest_idtoken_typeworkspace_iconworkspace_idworkspace_name

`400`

error_oauth_400application/json

Request parameters are invalid.

`401`

error_oauth_401application/json

Unauthenticated or the token is invalid.

`403`

error_oauth_403application/json

Access to the resource is forbidden.

`500`

error_oauth_500application/json

Upstream internal error.

{
  "access_token": "example content",
  "bot_id": "0ab51e95-9373-4d42-97f8-1b5b0a5c0b52",
  "duplicated_template_id": "0ab51e95-9373-4d42-97f8-1b5b0a5c0b52",
  "refresh_token": "example content",
  "request_id": "0ab51e95-9373-4d42-97f8-1b5b0a5c0b52",
  "token_type": "bearer",
  "workspace_icon": "https://example.com"
}