Skip to main content
POST
Mint a short-lived end-user token

Authorizations

Authorization
string
header
required

Pass your secret key in the Authorization header as a Bearer token: Authorization: Bearer sk_test_... (sandbox) or Bearer sk_live_... (production).

Keys are created in the developer portal and the plaintext secret is shown exactly once at creation. Treat them like passwords — never embed them in mobile apps or front-end code.

Path Parameters

client_id
string
required

Response

A fresh end-user token.

token
string
required

Pass as Authorization: Bearer <token> on end-user-scoped endpoints.

expires_at
string<date-time>
required

When this token stops working. Mint a new one if you need more time.