# ExchangedToken

The token pair returned by the OAuth2 token and refresh endpoints.

Type: object

Fields typed as another model are documented on that model's page; fetch it before filling the field.

| Field | Type | Required | Description | Allowed values / default / constraints |
| --- | --- | --- | --- | --- |
| `access_token` | string | yes | Short-lived bearer token. Send it as `Authorization: Bearer <access_token>` on API calls. |  |
| `refresh_token` | string | yes | Long-lived token used to obtain a new access token from `POST /rest/auth/refresh` once the access token expires. Store it securely; it is as sensitive as a password. |  |

## Used by

- [POST /rest/auth/refresh](https://dev-api.sheetgo.com/rest/reference/auth.md#post-rest-auth-refresh)
- [POST /rest/auth/token](https://dev-api.sheetgo.com/rest/reference/auth.md#post-rest-auth-token)

---

More: start page https://dev-api.sheetgo.com/rest/reference.md, everything in one file https://dev-api.sheetgo.com/rest/llms-full.txt, OpenAPI https://dev-api.sheetgo.com/rest/openapi.json.