---
title: "POST /uid-create-child-token"
method: POST
path: "/uid-create-child-token"
tags: ["Authentication"]
---

# POST /uid-create-child-token

`POST /uid-create-child-token`

## Request

- Base URL: `https://api.akeyless.io`
- URL: `https://api.akeyless.io/uid-create-child-token`
- Auth: none declared

## Request body

- UidCreateChildToken: uidCreateChildToken is a command that creates a new child token using Akeyless Universal Identity.
  - `auth-method-name` string: The universal identity auth method name, required only when uid-token is not provided
  - `child-deny-inheritance` boolean: Deny from new child to create their own children
  - `child-deny-rotate` boolean: Deny from new child to rotate
  - `child-ttl` integer: New child token ttl
  - `comment` string: Deprecated - use description
  - `description` string: Description of the object
  - `json` boolean: Set output format to JSON
  - `token` string: Authentication token (see `/auth` and `/configure`)
  - `uid-token` string: The universal identity token, Required only for universal_identity authentication
  - `uid-token-id` string: The ID of the uid-token, required only when uid-token is not provided

## Response `200`

uidCreateChildTokenResponse wraps response body.

- UidCreateChildTokenOutput
  - `token` string

## Other responses

- `default`: errorResponse wraps any error to return it as a JSON object with one "error" field.

---

[API](https://skmtc.dev/akeyless/apis/identity-access.md) - [All operations](https://skmtc.dev/akeyless/apis/identity-access/llms.txt) - [OpenAPI document](https://skmtc.dev/akeyless/apis/identity-access/revisions/6fbc3858ec88?raw)