> ## Documentation Index
> Fetch the complete documentation index at: https://developers.logicgate.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Retrieve an external access token



## OpenAPI

````yaml GET /api/v1/account/external/token
openapi: 3.1.0
info:
  title: Risk Cloud API (Legacy v1) — Auth
  description: >-
    The Risk Cloud API is a collection of RESTful API endpoints that empower you
    and your team to directly integrate, automate, and build with the Risk
    Cloud. Risk Cloud API endpoint payloads are JSON based, with some endpoints
    supporting exports in CSV and XSLX formats for flexible integration.


    This API documentation showcases our Risk Cloud API v1, containing a variety
    of endpoints with continued support for enabling integrations with the Risk
    Cloud.


    Visit the [LogicGate Risk Cloud Developer
    Portal](https://www.logicgate.com/developer/) to get started with building
    your custom integration with quick start guides, usage guides, release
    notes, and more. Or download the [v1 OpenAPI
    specification](/legacy-openapi.json).


    Explore our [Risk Cloud API v2](https://docs.logicgate.com/v2/index.html)
    endpoints and documentation as well. [Risk Cloud API
    v2](https://docs.logicgate.com/v2/index.html) is our collection of API-First
    endpoints that are tailor made for our developer users, offer concise and
    highly documented details, are supported by a [Postman
    collection](https://www.postman.com/logicgate-postman/workspace/logicgate-risk-cloud-api/collection/29257227-de8d264b-6eeb-4177-bea6-2da0a8cabffc)
    and [v2 OpenAPI specification](https://github.com/LogicGateTech/openapi),
    and contain our latest API endpoint releases.
  contact:
    name: developer-relations@logicgate.com
    email: developer-relations@logicgate.com
  version: v2026.8.2
servers:
  - url: https://{subdomain}.logicgate.com
    description: Your Risk Cloud environment.
    variables:
      subdomain:
        default: your-instance
        description: Your Risk Cloud environment's subdomain (e.g. `qa`).
security:
  - ApiToken: []
  - basic: []
tags:
  - name: Authentication
    description: >-
      Getting Started: How to create an [API Access
      Token](https://www.logicgate.com/developer/risk-cloud-api-authentication/)
      to begin integrating with the Risk Cloud API
  - name: Principal
    description: >-
      Endpoints for the authenticated principal to view and manage their own
      details.
  - name: SCIM
    description: >-
      SCIM (System for Cross-domain Identity Management) endpoints for
      provisioning and managing Users and Groups from an external identity
      provider.
  - name: External User
    description: >-
      Endpoints for creating and managing external (non-employee) users who
      access Risk Cloud via record-scoped tokens rather than standard login.
  - name: Account
    description: >-
      Endpoints for retrieving details about the current Risk Cloud
      account/environment.
externalDocs:
  description: Developer Portal
  url: https://www.logicgate.com/developer/
paths:
  /api/v1/account/external/token:
    get:
      tags:
        - Authentication
      summary: Retrieve an external access token
      operationId: getExternalAccessToken
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/LegacyApiTokenOut'
components:
  schemas:
    LegacyApiTokenOut:
      type: object
      properties:
        access_token:
          type: string
          description: >-
            An API access token to be used within the bearer authorization
            header of subsequent Risk Cloud API requests
        token_type:
          type: string
          description: The token type, expected to be "bearer" for the Risk Cloud API
        expires_in:
          type: integer
          format: int64
          description: The remaining time in seconds until the token expires
        scope:
          type: string
          description: >-
            The privilege scope of the token, expected to be "read write" for
            the Risk Cloud API
      title: Api Token
  securitySchemes:
    ApiToken:
      type: http
      scheme: bearer
      bearerFormat: API Token
      description: Bearer token issued via the Authentication endpoints.
    basic:
      type: http
      scheme: basic
      description: >-
        HTTP Basic auth using base64-encoded Client Key:Secret Key credentials,
        used only to obtain or refresh a bearer token via the Authentication
        endpoints.

````

This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.