# description
POST /oauth/token — an access token for the linked account. To finish linking, call getApiKey with this access token as the Bearer credential and store the API key it returns; then you can discard the OAuth tokens.

# properties.access_token.description
Bearer credential for the account that authorized you. Short-lived — see expires_in.

# properties.refresh_token.description
Single-use refresh token. Rotating it revokes this one and issues a replacement.

# properties.scope.description
The granted scope. Account-wide today, which is why the recommended pattern is to exchange it for an API key immediately rather than keeping it.