Identity
Refresh Token
Refresh an expired MCP Identity Token
POST
Refresh Token
Refresh an expired MCP Identity Token (MIT) using a refresh token.Request
Headers
string
required
Your MCP Rank API key
Body Parameters
string
required
The refresh token from the original token response
Response
string
New MCP Identity Token (JWT)
string
New refresh token (old one is invalidated)
integer
Seconds until the new access token expires (typically 3600)
string
Always
BearerToken Rotation Security
MCP Identity implements refresh token rotation for security:- Each refresh token can only be used once
- Using a refresh token returns a new refresh token
- The old refresh token is immediately invalidated
- If a refresh token is reused (potential attack), all user tokens may be revoked
Error Responses
Error Response