Overview
POST/auth/tokensauth

Mint an API token (raw value shown once)

Create a record in tokens.

Auth: bearerAuth — calls run as the authenticated user.

Request body

application/json · optional

  • namestring
  • expiresAtoptionalstring?
  • scopeoptionalstring[]

    REST path prefixes the token may reach

Example
{
  "name": "string",
  "expiresAt": "2020-01-01T00:00:00.000Z",
  "scope": [
    "string"
  ]
}
Responses
201

API token + raw value (shown once)

  • idstring
  • namestring
  • prefixstring

    Non-secret leading chars, for display

  • createdAtstring
  • expiresAtstring?
  • lastUsedAtstring?
  • scopeoptionalstring[]?

    REST path prefixes this token may reach (e.g. ["/content/markdown"], optional ":read" suffix, "*" = all). null = legacy curated-only.

  • tokenstring

    The raw token value — shown exactly once

Example
{
  "id": "string",
  "name": "string",
  "prefix": "string",
  "createdAt": "string",
  "expiresAt": "string",
  "lastUsedAt": "string",
  "scope": [
    "string"
  ],
  "token": "string"
}
400

Error

  • erroroptionalobject
Example
{
  "error": {
    "message": "string",
    "code": "string"
  }
}
401

Error

  • erroroptionalobject
Example
{
  "error": {
    "message": "string",
    "code": "string"
  }
}
Code examples
cURL
curl -X POST "https://api.agenticdeveloperhub.com/auth/tokens" \
  -H "Authorization: Bearer YOUR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{
  "name": "string",
  "expiresAt": "2020-01-01T00:00:00.000Z",
  "scope": [
    "string"
  ]
}'
JavaScript
const res = await fetch("https://api.agenticdeveloperhub.com/auth/tokens", {
  method: "POST",
  headers: {
    "Authorization": "Bearer YOUR_TOKEN",
    "Content-Type": "application/json"
  },
  body: "{\n  \"name\": \"string\",\n  \"expiresAt\": \"2020-01-01T00:00:00.000Z\",\n  \"scope\": [\n    \"string\"\n  ]\n}",
});
const data = await res.json();