LINE

LINE Channel Access Token API

The channel-access-token API from LINE — 8 operation(s) for channel-access-token.

Documentation GitHub OpenAPI

Business capability

Developer Identity & Credential Management BC-4270.40

Operations 8

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

POST /oauth2/v3/token Issue a stateless channel access token · Issue stateless channel token #

Ask an LLM

“How do I get a stateless channel access token that isn't capped by the active token limit?”

“How long does a stateless LINE channel access token stay valid?”

Tell an agent

Issue a new stateless channel access token that lasts 15 minutes.

Get me a stateless channel token with no max active token limit.

GET /oauth2/v2.1/tokens/kid List valid channel access token key IDs · Gets all valid channel access token key ids #

Ask an LLM

“Which key IDs belong to my currently valid v2.1 channel access tokens?”

“Can I see the kid of every channel access token still active on my channel?”

Tell an agent

List all valid channel access token key IDs using JWT assertion {client_assertion}.

Get the kids of my live v2.1 tokens with assertion type {client_assertion_type} and assertion {client_assertion}.

POST /oauth2/v2.1/token Issue a v2.1 channel token with a JWT assertion · Issue channel token by JWT #

Ask an LLM

“How do I issue a channel access token with an expiration date I choose?”

“Can I authenticate with a signed JWT to get a v2.1 channel access token?”

Tell an agent

Issue a v2.1 channel access token using signed JWT {client_assertion}.

Request a custom-expiry channel token with grant type {grant_type}, assertion type {client_assertion_type} and JWT {client_assertion}.

GET /oauth2/v2.1/verify Verify a v2.1 channel access token · Verify channel token by JWT #

Ask an LLM

“Is my channel access token with a user-specified expiration still valid?”

“What endpoint checks a v2.1 JWT-issued channel token?”

Tell an agent

Verify v2.1 channel access token {access_token}.

Check whether JWT-issued token {access_token} is still valid.

POST /oauth2/v2.1/revoke Revoke a v2.1 channel access token · Revoke channel token by JWT #

Ask an LLM

“How do I revoke a v2.1 channel access token I issued with a JWT?”

“Does revoking a v2.1 token require my channel ID and channel secret?”

Tell an agent destructive · confirm first

Revoke v2.1 channel access token {access_token} for channel {client_id} with secret {client_secret}.

Invalidate the custom-expiry token {access_token} on channel {client_id} using secret {client_secret}.

POST /v2/oauth/accessToken Issue a short-lived channel access token · Issue channel token #

Ask an LLM

“How can I get a short-lived channel access token from my channel ID and secret?”

“Which grant type issues a short-lived LINE channel token?”

Tell an agent

Issue a short-lived channel access token for channel {client_id} with secret {client_secret}.

Get a short-lived token using grant type {grant_type}, channel {client_id} and secret {client_secret}.

POST /v2/oauth/verify Verify a short-lived or long-lived channel token · Verify channel token #

Ask an LLM

“Can I check if a short-lived or long-lived channel access token is still valid?”

“What does validating a long-lived channel token return?”

Tell an agent

Verify short-lived or long-lived channel token {access_token}.

Tell me if long-lived channel access token {access_token} still works.

POST /v2/oauth/revoke Revoke a short-lived or long-lived channel token · Revoke channel token #

Ask an LLM

“How do I revoke a short-lived or long-lived channel access token?”

“Can I kill a leaked long-lived channel token right away?”

Tell an agent destructive · confirm first

Revoke short-lived or long-lived channel token {access_token}.

Invalidate leaked long-lived channel token {access_token} now.

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this

find_apisBrowse and filter every API in the catalog.
get_api_artifactsOne API's artifacts, grouped by type.
get_openapiThe primary OpenAPI for this API.
find_similar_apisAPIs that look like this one.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This API

curl "https://apis.io/api/v1/apis/line:line-channel-access-token-api"

All apis

curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

openapi: 3.2.0
info:
  title: Channel Access Token API
  version: 0.0.1
  description: This document describes Channel Access Token API.
servers:
- url: https://api.line.me
tags:
- name: channel-access-token
paths:
  /oauth2/v3/token:
    post:
      externalDocs:
        url: https://developers.line.biz/en/reference/messaging-api/#issue-stateless-channel-access-token
      tags:
      - channel-access-token
      operationId: issueStatelessChannelToken
      description: 'Issues a new stateless channel access token, which doesn''t have max active token limit

        unlike the other token types.

        The newly issued token is only valid for 15 minutes but can not be revoked until it naturally expires.'
      requestBody:
        required: true
        content:
          application/x-www-form-urlencoded:
            schema:
              oneOf:
              - $ref: '#/components/schemas/IssueStatelessChannelTokenByJWTAssertionRequest'
              - $ref: '#/components/schemas/IssueStatelessChannelTokenByClientSecretRequest'
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/IssueStatelessChannelAccessTokenResponse'
              example:
                token_type: Bearer
                access_token: eyJhbGciOiJIUz.....
                expires_in: 899
      summary: Issue stateless channel token
      x-summary-source: derived
  /oauth2/v2.1/tokens/kid:
    get:
      externalDocs:
        url: https://developers.line.biz/en/reference/messaging-api/#get-all-valid-channel-access-token-key-ids-v2-1
      tags:
      - channel-access-token
      operationId: getsAllValidChannelAccessTokenKeyIds
      description: Gets all valid channel access token key IDs.
      parameters:
      - name: client_assertion_type
        in: query
        required: true
        description: '`urn:ietf:params:oauth:client-assertion-type:jwt-bearer`'
        schema:
          type: string
      - name: client_assertion
        in: query
        required: true
        description: A JSON Web Token (JWT) (opens new window)the client needs to create and sign with the private key.
        schema:
          type: string
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ChannelAccessTokenKeyIdsResponse'
              example:
                kids:
                - U_gdnFYKTWRxxxxDVZexGg
                - sDTOzw5wIfWxxxxzcmeQA
                - 73hDyp3PxGfxxxxD6U5qYA
                - FHGanaP79smDxxxxyPrVw
                - CguB-0kxxxxdSM3A5Q_UtQ
                - G82YP96jhHwyKSxxxx7IFA
      summary: Gets all valid channel access token key ids
      x-summary-source: derived
  /oauth2/v2.1/token:
    post:
      externalDocs:
        url: https://developers.line.biz/en/reference/messaging-api/#issue-channel-access-token-v2-1
      tags:
      - channel-access-token
      operationId: issueChannelTokenByJWT
      description: Issues a channel access token that allows you to specify a desired expiration date. This method lets you use JWT assertion for authentication.
      requestBody:
        required: true
        content:
          application/x-www-form-urlencoded:
            schema:
              description: request of the issueChannelTokenByJWT
              type: object
              properties:
                grant_type:
                  type: string
                  description: client_credentials
                client_assertion_type:
                  type: string
                  description: urn:ietf:params:oauth:client-assertion-type:jwt-bearer
                client_assertion:
                  type: string
                  description: A JSON Web Token the client needs to create and sign with the private key of the Assertion Signing Key.
              required:
              - grant_type
              - client_assertion_type
              - client_assertion
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/IssueChannelAccessTokenResponse'
              example:
                access_token: eyJhbGciOiJIUz.....
                token_type: Bearer
                expires_in: 2592000
                key_id: sDTOzw5wIfxxxxPEzcmeQA
      summary: Issue channel token by JWT
      x-summary-source: derived
  /oauth2/v2.1/verify:
    get:
      externalDocs:
        url: https://developers.line.biz/en/reference/messaging-api/#verify-channel-access-token-v2-1
      tags:
      - channel-access-token
      operationId: verifyChannelTokenByJWT
      description: You can verify whether a Channel access token with a user-specified expiration (Channel Access Token v2.1) is valid.
      parameters:
      - name: access_token
        in: query
        required: true
        description: Channel access token with a user-specified expiration (Channel Access Token v2.1).
        schema:
          type: string
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/VerifyChannelAccessTokenResponse'
              example:
                client_id: '1573163733'
                expires_in: 2591659
                scope: profile chat_message.write
      summary: Verify channel token by JWT
      x-summary-source: derived
  /oauth2/v2.1/revoke:
    post:
      externalDocs:
        url: https://developers.line.biz/en/reference/messaging-api/#revoke-channel-access-token-v2-1
      tags:
      - channel-access-token
      operationId: revokeChannelTokenByJWT
      description: Revoke channel access token v2.1
      requestBody:
        required: true
        content:
          application/x-www-form-urlencoded:
            schema:
              description: Request of the revokeChannelTokenByJWT
              type: object
              properties:
                client_id:
                  type: string
                  description: Channel ID
                client_secret:
                  type: string
                  description: Channel Secret
                access_token:
                  type: string
                  description: Channel access token
              required:
              - client_id
              - client_secret
              - access_token
      responses:
        '200':
          description: OK
      summary: Revoke channel token by JWT
      x-summary-source: derived
  /v2/oauth/accessToken:
    post:
      externalDocs:
        url: https://developers.line.biz/en/reference/messaging-api/#issue-shortlived-channel-access-token
      tags:
      - channel-access-token
      operationId: issueChannelToken
      description: Issue short-lived channel access token
      requestBody:
        required: true
        content:
          application/x-www-form-urlencoded:
            schema:
              description: Request of the issueChannelToken
              type: object
              properties:
                grant_type:
                  type: string
                  description: '`client_credentials`'
                  example: client_credentials
                client_id:
                  type: string
                  description: Channel ID.
                client_secret:
                  type: string
                  description: Channel secret.
              required:
              - grant_type
              - client_id
              - client_secret
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/IssueShortLivedChannelAccessTokenResponse'
              example:
                access_token: W1TeHCgfH2Liwa.....
                expires_in: 2592000
                token_type: Bearer
        '400':
          description: Bad Request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
              example:
                error: invalid_request
                error_description: some parameters missed or invalid
      summary: Issue channel token
      x-summary-source: derived
  /v2/oauth/verify:
    post:
      externalDocs:
        url: https://developers.line.biz/en/reference/messaging-api/#verify-channel-access-token
      tags:
      - channel-access-token
      operationId: verifyChannelToken
      description: Verify the validity of short-lived and long-lived channel access tokens
      requestBody:
        required: true
        content:
          application/x-www-form-urlencoded:
            schema:
              description: request of the verifyChannelToken
              type: object
              properties:
                access_token:
                  description: A short-lived or long-lived channel access token.
                  type: string
              required:
              - access_token
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/VerifyChannelAccessTokenResponse'
              example:
                client_id: '1350031035'
                expires_in: 3138007490
                scope: P CM
      summary: Verify channel token
      x-summary-source: derived
  /v2/oauth/revoke:
    post:
      externalDocs:
        url: https://developers.line.biz/en/reference/messaging-api/#revoke-longlived-or-shortlived-channel-access-token
      tags:
      - channel-access-token
      operationId: revokeChannelToken
      description: Revoke short-lived or long-lived channel access token
      requestBody:
        required: true
        content:
          application/x-www-form-urlencoded:
            schema:
              description: Request of the revokeChannelToken.
              type: object
              properties:
                access_token:
                  description: A short-lived or long-lived channel access token.
                  type: string
              required:
              - access_token
      responses:
        '200':
          description: OK
      summary: Revoke channel token
      x-summary-source: derived
components:
  schemas:
    IssueStatelessChannelTokenByJWTAssertionRequest:
      externalDocs:
        url: https://developers.line.biz/en/reference/messaging-api/#issue-stateless-channel-access-token
      description: Request body to issue a new token with JWT assertion
      type: object
      required:
      - grant_type
      - client_assertion
      - client_assertion_type
      properties:
        grant_type:
          type: string
          enum:
          - client_credentials
          description: client_credentials
        client_assertion_type:
          type: string
          enum:
          - urn:ietf:params:oauth:client-assertion-type:jwt-bearer
          description: URL-encoded value of `urn:ietf:params:oauth:client-assertion-type:jwt-bearer`
        client_assertion:
          type: string
          description: A JSON Web Token the client needs to create and sign with the private key of the Assertion Signing Key.
    IssueShortLivedChannelAccessTokenResponse:
      externalDocs:
        url: https://developers.line.biz/en/reference/messaging-api/#issue-shortlived-channel-access-token
      description: Issued short-lived channel access token
      required:
      - access_token
      - expires_in
      - token_type
      type: object
      properties:
        access_token:
          type: string
          description: 'A short-lived channel access token. Valid for 30 days.

            Note: Channel access tokens cannot be refreshed.

            '
        expires_in:
          type: integer
          format: int32
          description: Time until channel access token expires in seconds from time the token is issued.
        token_type:
          type: string
          default: Bearer
          description: Token type. The value is always `Bearer`.
    IssueChannelAccessTokenResponse:
      externalDocs:
        url: https://developers.line.biz/en/reference/messaging-api/#issue-channel-access-token-v2-1
      description: Issued channel access token
      required:
      - access_token
      - expires_in
      - token_type
      - key_id
      type: object
      properties:
        access_token:
          type: string
          description: 'Channel access token.

            '
        expires_in:
          type: integer
          format: int32
          description: Amount of time in seconds from issue to expiration of the channel access token
        token_type:
          type: string
          default: Bearer
          description: A token type.
        key_id:
          type: string
          description: Unique key ID for identifying the channel access token.
    ChannelAccessTokenKeyIdsResponse:
      externalDocs:
        url: https://developers.line.biz/en/reference/messaging-api/#get-all-valid-channel-access-token-key-ids-v2-1
      description: Channel access token key IDs
      required:
      - kids
      type: object
      properties:
        kids:
          description: Array of channel access token key IDs.
          type: array
          items:
            type: string
    IssueStatelessChannelTokenByClientSecretRequest:
      externalDocs:
        url: https://developers.line.biz/en/reference/messaging-api/#issue-stateless-channel-access-token
      description: Request body to issue a new token with `client_id` and `client_secret`
      type: object
      required:
      - grant_type
      - client_id
      - client_secret
      properties:
        grant_type:
          type: string
          enum:
          - client_credentials
          description: '`client_credentials`'
        client_id:
          type: string
          description: Channel ID.
        client_secret:
          type: string
          description: Channel secret.
    IssueStatelessChannelAccessTokenResponse:
      externalDocs:
        url: https://developers.line.biz/en/reference/messaging-api/#issue-stateless-channel-access-token
      description: Issued stateless channel access token
      required:
      - access_token
      - expires_in
      - token_type
      type: object
      properties:
        access_token:
          type: string
          description: 'A stateless channel access token.

            The token is an opaque string which means its format is an implementation detail

            and the consumer of this token should never try to use the data parsed from the token.

            '
        expires_in:
          type: integer
          format: int32
          description: Duration in seconds after which the issued access token expires
        token_type:
          type: string
          default: Bearer
          description: Token type. The value is always `Bearer`.
    ErrorResponse:
      externalDocs:
        url: https://developers.line.biz/en/reference/messaging-api/#error-responses
      description: Error response of the Channel access token
      type: object
      properties:
        error:
          description: Error summary
          type: string
        error_description:
          description: Details of the error. Not returned in certain situations.
          type: string
    VerifyChannelAccessTokenResponse:
      externalDocs:
        url: https://developers.line.biz/en/reference/messaging-api/#verify-channel-access-token-v2-1
      description: Verification result
      required:
      - client_id
      - expires_in
      type: object
      properties:
        client_id:
          type: string
          description: The channel ID for which the channel access token was issued.
        expires_in:
          type: integer
          format: int64
          description: Number of seconds before the channel access token expires.
        scope:
          type: string
          description: Permissions granted to the channel access token.

LINE Channel Access Token API

Operations 8

Documentation

Specifications

Other Resources

Work with this as data

MCP server

Tools for apis

Call it yourself

Get an API key

OpenAPI Specification