Exchange a refresh token for a new access token

curl --request POST \
  --url https://mcp.echozero.app/api/auth/refresh \
  --header 'Content-Type: application/json' \
  --data '
{
  "refreshToken": "550e8400-e29b-41d4-a716-446655440000"
}
'

{
  "success": true,
  "data": {
    "accessToken": "<string>"
  }
}

{
  "success": false,
  "error": {
    "code": "NOT_FOUND",
    "message": "Resource not found"
  }
}

POST

api

auth

refresh

curl --request POST \
  --url https://mcp.echozero.app/api/auth/refresh \
  --header 'Content-Type: application/json' \
  --data '
{
  "refreshToken": "550e8400-e29b-41d4-a716-446655440000"
}
'

{
  "success": true,
  "data": {
    "accessToken": "<string>"
  }
}

{
  "success": false,
  "error": {
    "code": "NOT_FOUND",
    "message": "Resource not found"
  }
}

Headers

x-signature

string

HMAC-SHA256 signature: HMAC-SHA256(secretKey, timestamp + METHOD + path + body). Required for API-key authenticated requests (JWT/OAuth session auth is exempt).

x-timestamp

string

Request timestamp in epoch milliseconds. Required with x-signature for API-key auth. Rejected if drift exceeds 5 minutes.

Body

application/json

OpenAPI schema McpRefreshTokenBodyDto.

refreshToken

string

required

Refresh token previously returned from /auth/verify or /auth/social/verify.

Example:

"550e8400-e29b-41d4-a716-446655440000"

Response

New access token issued.

success

boolean

required

Example:

true

data

object

required

Endpoint-specific payload

Show child attributes

Health

Auth

API Keys

User

Developer

Developer dashboard

Developer signal corpus

Trade Signals

Developer Agents (Marketplace)

Inbound Agent Signals

Trade

Token

Strategy

Agent

AI

Wallet

Notification

OAuth

Statics

Earn

Activity

Feed

Misc

Sandbox

MCP Protocol

Exchange a refresh token for a new access token

Headers

Body

Response