Create an access token

The host domain for OAuth endpoints is login.pinecone.io.

curl "https://login.pinecone.io/oauth/token" \ # Note: Base URL is login.pinecone.io
	-H "X-Pinecone-Api-Version: 2025-10" \
	-H "Content-Type: application/json" \
	-d '{
		"grant_type": "client_credentials",
		"client_id": "YOUR_CLIENT_ID",
		"client_secret": "YOUR_CLIENT_SECRET",
		"audience": "https://api.pinecone.io/"
	}'

{
    "access_token":"YOUR_ACCESS_TOKEN",
    "expires_in":86400,
    "token_type":"Bearer"
}

POST /oauth/token

• X-Pinecone-Api-Version (header, string, required) — Required date-based version header

• client_id (body, string, required) — The service account's client ID.
• client_secret (body, string, required) — The service account's client secret.
• grant_type (body, string, required) — The type of grant to use.
• audience (body, string, required) — The audience for the token.

• 200 — A response that contains the access token.
• 400 — Invalid request.
• 401 — Unauthorized.
• 403 — Forbidden.
• 429 — Too many requests.
• 500 — Internal server error.
• 501 — Not implemented.
• 503 — Service unavailable.