Tokens are required to use [Moov.js](https://docs.moov.io/moovjs/) and the client-side [TypeScript SDK](https://docs.moov.io/sdks/typescript/). When making requests to Moov from a browser, you can use OAuth with JSON Web Tokens (JWT).

When generating an OAuth2 access token, include the name of the [scope](https://docs.moov.io/api/authentication/scopes/) that covers the type of access needed.

[**Create an access token**\
\
POST\
\
\
/oauth2/token](https://docs.moov.io/api/v2026.04.00/authentication/access-tokens/create/) [**Revoke an access token**\
\
POST\
\
\
/oauth2/revoke](https://docs.moov.io/api/v2026.04.00/authentication/access-tokens/revoke/)