Create an access token

Exchanges an application's credentials for a signed JWT access token. This endpoint is anonymous: do not send an Authorization header.

The same token is reused for up to 12 hours, so expiresIn is the token's remaining lifetime in seconds and is between about 43200 and 86400. Compute the expiry as now + expiresIn and request a new token shortly before it; do not assume a fixed 24-hour lifetime.

Body Params
uuid
required

The ID of your tenant.

uuid
required

The ID of the application. The application must belong to tenantId.

string
required

The application's secret. Store it securely; never put it in source control or client-side code.

Responses

429

Too many requests. The API allows about 10 requests per second per IP address. No Retry-After header is sent and the body is not JSON; retry with exponential backoff.

Language
LoadingLoading…
Response
Click Try It! to start a request and see the response here! Or choose an example:
application/json