Create a token

curl --location --request POST 'https://api.notion.com/v1/oauth/token' \
--header 'Authorization: Basic '"$BASE64_ENCODED_ID_AND_SECRET"'' \
--header 'Content-Type: application/json' \
--header 'Notion-Version: 2022-06-28' \
--data '{
	"grant_type": "authorization_code",
 	"code": "e202e8c9-0990-40af-855f-ff8f872b1ec6",
	"redirect_uri": "https://wwww.my-integration-endpoint.dev/callback",
	"external_account": {
		"key": "A83823453409384",
		"name": "Notion - team@makenotion.com"
	}
}'

{
  "access_token": "e202e8c9-0990-40af-855f-ff8f872b1ec6c",
  "bot_id": "b3414d659-1224-5ty7-6ffr-cc9d8773drt601288f",
  "duplicated_template_id": {},
  "owner": {
    "workspace": true
  },
  "workspace_icon": "https://website.domain/images/image.png",
  "workspace_id": "j565j4d7x3-2882-61bs-564a-jj9d9ui-c36hxfr7x",
  "workspace_name": "Ada's Notion Workspace"
}

For step-by-step instructions on how to use this endpoint to create a public integration, check out the Authorization guide. To walkthrough how to create tokens for Link Previews, refer to the Link Previews guide.

Redirect URI requirements for public integrations

The redirect_uri is a required field in the request body for this endpoint if:

the redirect_uri query parameter was set in the Authorization URL provided to users, or;
there are more than one redirect_uris included in the integration’s settings under OAuth Domain & URIs.

In most cases, the redirect_uri field is required.

This field is not allowed in the request body if:

there is one redirect_uri included in the integration’s settings under OAuth Domain & URIs, and the redirect_uri query parameter was not included in the Authorization URL.

Learn more in the public integration section of the Authorization Guide.

Note: Each Public API endpoint can return several possible error codes. To see a full description of each type of error code, see the Error codes section of the Status codes documentation.

Request

This endpoint expects an object.

codestringRequired

A unique random code that Notion generates to authenticate with your service, generated when a user initiates the OAuth flow.

grant_typestringRequired

A constant string: “authorization_code”

redirect_uristringRequired

The “redirect_uri” that was provided in the OAuth Domain & URI section of the integration’s Authorization settings. Do not include this field if a “redirect_uri” query param was not included in the Authorization URL provided to users. In most cases, this field is required.

Response

200

access_tokenstringOptional

refresh_tokenstringOptional

bot_idstringOptional

duplicated_template_idanyOptional

ownerobjectOptional

workspace_iconstringOptional

workspace_idstringOptional

workspace_namestringOptional

Errors

400

Bad Request Error

Headers

Request

Response

Errors