Shakehand

Mint an identity token

{ audience, nonce?, scope?, expires_in? } → 201 { id_token, token_type, issuer, audience, sub, jti, scope, expires_in, expires_at }. A single-use ID token for one app, at most 5 minutes. :id is an inbox or an identity without a mailbox. Needs identity:sign. Errors: 400 unknown_audience, 400 invalid_scope, 403 identity_disabled, 403 identity_unavailable (temporary inbox), 429 rate_limited (30 per inbox per minute).

Permission: identity:sign.

post/v1/inboxes/{id}/identity-token

Request

  • Base URL: https://api.agentboxd.com
  • URL: https://api.agentboxd.com/v1/inboxes/{id}/identity-token
  • Auth: HTTP bearer

Path parameters

idstring uuid required

Request body

audiencestring required
noncestring
scopestring
expires_ininteger

Response

OK

object required

Changes

No recorded changes to this operation across all 1 revision of this API.