Refresh Access Token

Description

Use the refresh token to refresh the access token.
The refresh token is valid for 90 days and can only be used once.

Endpoint

POST https://api.pleos.ai/v1/auth/token-refresh

Request

curl

curl -X POST "https://api.pleos.ai/v1/auth/token-refresh" \
  -H "Content-Type: application/json" \
  -H "Brand: hyundai" \
  -d '{
    "clientId": "abc14400-1111-3eac-b364-xxxxxxxxxxxx",
    "clientSecret": "o40srr1jr4vl91c8pjn4j9s8lp4sqxxxxxxxxxxxx",
    "refreshToken": "T9F38OE6PA8CT9V52F30KKKSRA6T5SRDA400"
  }'

Header Params

Parameter	Type	Description	Required
Content-Type	string	application/json	Optional
Brand	string	Vehicle brand (hyundai/kia/genesis)	Required

Body Params

Parameter	Type	Description	Required
clientId	string	Enter the Client ID obtained from Pleos Playground > My Project.	Required
clientSecret	string	Enter the Client Secret obtained from Pleos Playground > My Project.	Required
refreshToken	string	Enter the refreshToken received in the response of Create Access Token. For subsequent refreshes, use the refreshToken received in the response of the previous token refresh. This value is valid for 90 days after issuance and can only be used once.	Required

Response

Success

200

{
  "data": {
    "accessToken": "gMhJJYUepuP93SHsHwEILHzHiuXQ5X7kfBIe6L3I1ic1Sble4OHX7hfyUx6C2fR8LOBRcWEFcxhfyQPkif9LZdQefAL07QCQkdQmPUXZ7pkYRBGRfScMyvGSmjcMWsoDv7GthYE4mmpYijzqbTGmsUuctQ2QDc2lqElmbQo8D52qEjlIf5aQIlKu3E7Yt7tvjXhFzHtSsIYWjqyvqxJVFvZEbevPbilomvvSWIpYSfVSHfbHQhR0xErqcgDGLTTVgRXDmpC99goq4UD9fjlLDipRyCKWDt5MvfzW1PiKkkxkAD9Of3mg43LJcsiAx1uxCcmoVB0PyURvyDSurG6CmoW7QY2AcA9fgCXkt4oYuL0IU39B4Fzc1UjoHAr5xmgr89Y4xlP7H54QU0hlKEotUi8vuaqCE7rOXSr1gDkS4Gv8",
    "refreshToken": "T9F38OE6PA8CT9V52F30KKKSRA6T5SRDA400"
  },
  "meta": {
    "code": 200,
    "message": "Success",
    "success": "true",
    "timestamp": "2025-09-01T11:00:00Z",
    "requestId": "835bdbd4-1105-4a8c-b438-a1b2c3d4f5g6"
  }
}

data field	Type	Description
accessToken	string	Token to access the Vehicle Data API. Valid for one hour after access token issuance.
refreshToken	string	Value used for refreshing the token. Valid for 90 days after issuance and can only be used once.

Failure

4002

{
  "error": {
    "code": "4002",
    "message": "Invalid request parameters",
    "details": [],
    "timestamp": "2025-09-01T12:00:00Z",
    "requestId": "835bdbd4-1105-4a8c-b438-a1b2c3d4f5g6"
  }
}

[Error Code]

For a detailed explanation of error code on failure, refer to Error Code.