First thanks for all the help I have had so far.

I currently have a client using direct access to get a grant from KeyCloak via the protocol/openid-connect/token url.

The two direct access requests I need that I am having problems tracking down are;
1) Getting a new grant using the refresh_token
2) Getting a grant for a bearer only client using (I assume the access token).

Chris