# NetSuite OAuth 2.0 Access Token Refresh Calculator > Source: https://netray.co/tools/netsuite-oauth2-access-token-refresh-calculator > Publisher: Netray (netray.co), AI and integration engineering for ERP and manufacturing systems. > Section: Free Tools ## Short answer Work out how often your integrations refresh NetSuite OAuth 2.0 access tokens and how many API calls each token serves. ## Category developer ## Erp NetSuite ## Audience - Integration developer - NetSuite developer - Security engineer ## Tool **Kind:** calculator **Inputs:** #### Access token lifetime **Key:** lifetime **Type:** number **Default:** 60 **Min:** 5 **Step:** 5 **Unit:** minutes **Help:** Enter the lifetime your account issues. Check your integration record and response expires_in value. #### Refresh safety buffer **Key:** buffer **Type:** slider **Default:** 5 **Min:** 0 **Max:** 30 **Step:** 1 **Unit:** minutes **Help:** Refresh this long before expiry to avoid failed calls. #### API calls per minute per integration **Key:** calls_min **Type:** number **Default:** 30 **Min:** 0 **Step:** 5 **Unit:** calls/min #### Integrations with separate tokens **Key:** integrations **Type:** number **Default:** 4 **Min:** 1 **Step:** 1 **Unit:** integrations **Outputs:** #### Effective token use window **Key:** valid_min **Expr:** max(lifetime - buffer, 1) **Format:** minutes #### Refreshes per day **Key:** refresh_day **Expr:** integrations * ceil(1440 / valid_min) **Format:** integer **Primary:** true #### API calls served per token **Key:** calls_token **Expr:** calls_min * valid_min **Format:** integer #### API calls per day **Key:** calls_day **Expr:** calls_min * 1440 * integrations **Format:** integer #### Token requests as share of traffic **Key:** overhead **Expr:** refresh_day / max(refresh_day + calls_day, 1) * 100 **Format:** percent **Primary:** true **Chart:** #### Refreshes per day vs safety buffer **Type:** line **X:** buffer **From:** 0 **To:** 30 **Steps:** 31 **Series:** - refresh_day **Disclaimer:** Token lifetimes, refresh token validity and grant types differ by flow and account settings. Treat the defaults as placeholders and confirm them in your NetSuite integration record. ## Content **Intro:** OAuth 2.0 access tokens are short lived by design, so every NetSuite integration needs a refresh routine. This calculator shows how much traffic that routine generates and how buffer choices affect it. **Sections:** #### How to use it **Body:** Enter the access token lifetime your account issues, which you can read from the expires_in field of a token response. Choose a safety buffer: the number of minutes before expiry at which your client refreshes. Add the typical API call rate for each integration and the number of integrations that hold their own tokens. The tool returns how often tokens are refreshed per day, how many calls each token serves and what share of requests are token requests. #### The calculation **Body:** The effective window equals the lifetime minus the buffer. Refreshes per integration per day equal 1,440 minutes divided by that window, rounded up. Multiply by the number of integrations for the daily total. A 60 minute token with a 5 minute buffer is refreshed every 55 minutes, which is 27 times a day per integration. Token traffic is tiny compared with API calls, so the point is not cost but correctness: a buffer that is too small is the main source of intermittent authentication failures. **Bullets:** - Window = lifetime - buffer - Refreshes per day = integrations x ceil(1440 / window) - Calls per token = calls per minute x window - Overhead = refreshes / (refreshes + calls) #### Design guidance **Body:** Refresh proactively on a timer or before a call when the token is near expiry, and also handle a 401 by refreshing once and retrying. Store tokens in a secret manager, not in code or a shared file. Remember that refresh tokens also expire or can be revoked, so build an alert and a documented re-authorisation path. Use one token cache per integration so that parallel workers do not each request a new token. #### Common mistakes **Body:** A frequent bug is every worker thread refreshing at once when the token expires, causing a burst of token requests and sometimes invalidating each other. Another is using a clock without allowing for drift between servers. A third is leaving certificates or keys for machine-to-machine flows to expire silently. **Bullets:** - Share one token cache across workers with a lock - Set a buffer larger than your slowest call - Alert before certificate or refresh token expiry - Log expires_in on every token response **Cta:** Netray can help review your NetSuite authentication design, token storage and error handling. **Faq:** #### How long does a NetSuite OAuth 2.0 access token last? **Answer:** Access tokens are short lived, commonly about an hour, and the expires_in value in the token response tells you exactly. Read it at runtime rather than hard coding a number. #### What buffer should I use? **Answer:** Choose a buffer longer than your slowest request plus clock drift. Five minutes is a common starting point for tokens that last an hour. Increase it if your calls can run long. #### Do refresh tokens expire? **Answer:** They can expire or be revoked, depending on the grant type and account settings. Build monitoring so an expired refresh token raises an alert rather than silently stopping the integration. #### Is token based authentication still an option? **Answer:** NetSuite supports both token based authentication and OAuth 2.0. Which is right depends on your integration type and policy. Check current guidance for supported methods on your endpoints. ## Search terms netsuite oauth 2.0 token expiry, netsuite access token refresh, netsuite oauth2 refresh token integration, netsuite token refresh frequency, netsuite rest api oauth 2 authorization, access token lifetime planning --- Talk to an engineer: https://netray.co/contact?intent=erp_ai | Machine catalog: https://netray.co/agent/catalog.json