Skip to main content
POST
Create an API token

Authorizations

Authorization
string
header
required

Session JWT (browsers receive it as an httpOnly cookie from POST /auth/verify; 15 min, silently renewed via POST /auth/refresh), or a long-lived API token (ss_…) minted at POST /api-tokens. API tokens work on data and trading endpoints and can request WebSocket tickets; token management and admin endpoints accept session JWTs only.

Body

application/json
name
string
required
expires_in_days
integer<int64> | null

Response

API token created; the token value is shown only once

data
object
required