---
descriptions:
  workos_connect_token_client_credentials_grant:
    grant_type: Always `"client_credentials"` for this flow.
    scope: |
      A space-separated set of scopes to use for the access token.
reference:
  curl:
    - url: /reference/workos-connect/token/client-credentials-grant
      key: workos_connect_token_client_credentials_grant
      id: workos_connect_token_client_credentials_grant
      title: /oauth2/token
      type: POST
      parameters:
        - key: client_id
          type: string
          description: (workos_connect_token_request.client_id)
        - key: client_secret
          type: string
          description: (workos_connect_token_request.client_secret)
        - key: grant_type
          type: '"client_credentials"'
          description: (workos_connect_token_client_credentials_grant.grant_type)
        - key: scope
          type: string
          optional: true
          description: (workos_connect_token_client_credentials_grant.scope)
      returns:
        - key: anonymous
          type: object
          unwrap: true
          properties:
            - key: access_token
              type: string
              description: (workos_connect_token_response.access_token)
            - key: expires_in
              type: integer
              description: (workos_connect_token_response.expires_in)
            - key: token_type
              type: '"bearer"'
              description: (workos_connect_token_response.token_type)
originalPath: >-
  .tmp-workos-clone/packages/docs/content/reference/workos-connect/token/client-credentials-grant.mdx
---

### Client credentials grant

Used by WorkOS Connect M2M Applications to exchange the app's credentials for access tokens.

<CodeBlock referenceId="workos_connect_token_client_credentials_grant">
  <CodeBlockTab title="Request" file="token-client-credentials-grant-request" />
  <CodeBlockTab
    title="Response"
    file="token-client-credentials-grant-response"
  />
</CodeBlock>