---
title: "Self-serve: issue a FREE API token by email"
method: POST
path: "/auth/token"
---

# Self-serve: issue a FREE API token by email

`POST /auth/token`

## Request

- Base URL: `https://ai-law-tracker.com/api/v1`
- URL: `https://ai-law-tracker.com/api/v1/auth/token`
- Auth: one of:
  - none
  - API key in header `X-API-Key`
  - HTTP bearer

A conventional token endpoint over the same key store as POST /keys. Submit an email; get a free-tier token, emailed once (durable copy) and returned once here. Only ever mints a FREE token (no privilege escalation); the owner/HMAC secret is never exposed. Paid tiers are granted via Polar checkout (POST /checkout). Throttled per IP; one active token per email.

## Request body

- object
  - `email` string, email, required

## Response `201`

Token issued (shown once).

## Other responses

- `400`: Invalid email
- `409`: A token already exists for this email
- `429`: Rate limited

---

[API](https://skmtc.dev/ai-law-tracker/apis/ai-law-tracker-public-laws-api.md) · [All operations](https://skmtc.dev/ai-law-tracker/apis/ai-law-tracker-public-laws-api/llms.txt) · [OpenAPI document](https://skmtc.dev/ai-law-tracker/apis/ai-law-tracker-public-laws-api/revisions/25403268a853?raw)