---
title: "OCI token endpoint (GET)"
method: GET
path: "/v0/auth/oci/token"
tags: ["auth", "oci"]
---

# OCI token endpoint (GET)

`GET /v0/auth/oci/token`

Authenticates via Basic auth and returns a short-lived JWT for OCI operations. Supports three credential types: - `email:api-key-jwt`: user authentication via API token - `email:bencher_user_xxxxx`: user authentication via user API key - `project-slug-or-uuid:bencher_run_xxxxx`: project key authentication

If no Basic auth credentials are provided, issues a public (anonymous) OCI token.

Accepts multiple `scope` query parameters (Docker 29+ / containerd sends these).

## Query parameters

- `service` string, nullable

## Response `default`

## Changes

> 64 revisions in range; 38 could not be searched.

- **2026-03-20** `36c8ad753527` — 1 info
  - added the new optional `query` request parameter `scope`

[Change history](https://skmtc.dev/bencherdev/apis/bencher-api/changes/v0/auth/oci/token/get.md)

---

[API](https://skmtc.dev/bencherdev/apis/bencher-api.md) · [All operations](https://skmtc.dev/bencherdev/apis/bencher-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/bencherdev/bencher-api/revisions/74e9728a444e/schema)