curl -X POST https://app.lunacal.ai/api/mcp/token \
  -H "Authorization: Bearer $AUTH_CODE" \
  -H "Content-Type: application/json" \
  -d '{
    "clientSecret": "YOUR_CLIENT_SECRET"
  }'

const res = await fetch("https://app.lunacal.ai/api/mcp/token", {
  method: "POST",
  headers: {
    Authorization: `Bearer ${authCode}`,
    "Content-Type": "application/json",
  },
  body: JSON.stringify({ clientSecret: process.env.LUNACAL_CLIENT_SECRET }),
});
const tokens = await res.json();

{
  "accessToken": "k3J9xQ...base64url",
  "expiresAt": "2026-10-05T14:00:00.000Z",
  "refreshToken": "p8Lm2R...base64url",
  "refreshTokenExpiresAt": "2027-10-05T13:00:00.000Z"
}