Skip to main content
POST
Get Token

Body

application/json
client_id
string
required

Credential ID obtained from /internal/credentials/create.

client_secret
string
required

Client secret paired with the credential.

agent_type
string
default:credential

Logical agent type encoded into the JWT claims. Defaults to "credential" when omitted.

expires_in
number

Optional JWT lifetime in seconds (default 86400 = 24 hours).

Response

Token issued.

token
string
required

Signed JWT. Decode the payload to inspect claims: tenant_id, agent_type, scopes (array of "read" | "admin" | "full"), sub, iat, exp, and credential_id identifying the credential used.