---
title: "Register a device push token"
method: POST
path: "/me/push-tokens"
tags: ["account-access"]
---

# Register a device push token

`POST /me/push-tokens`

## Request

- Base URL: `https://eu.bisibility.com/api/v1`
- URL: `https://eu.bisibility.com/api/v1/me/push-tokens`
- Auth: one of:
  - HTTP bearer
  - OAuth 2 (authorization code, authorization URL `/api/auth/oauth2/authorize`, token URL `/api/auth/oauth2/token`, scopes: `api:read`)

Idempotent. A token belongs to one user: registering it from another account moves it there. Tokens are deleted when the push service reports them unregistered and when the account is deleted.

## Headers

- `Bisibility-API-Version` 'v1'
- `Idempotency-Key` string
- `X-Bisibility-Source` 'sdk' | 'cli' | 'mcp'

## Request body

- DevicePushTokenRegister
  - `bundle_id` string, required: App bundle identifier, for example com.bisibility.app.
  - `environment` 'production' | 'sandbox', required: APNs environment of the build: sandbox for development builds.
  - `token` string, required: APNs device token as hexadecimal.

## Response `200`

JSON response

- DevicePushToken
  - `bundle_id` string, required
  - `created_at` string, date-time, required
  - `environment` 'production' | 'sandbox', required
  - `id` string, required
  - `last_seen_at` string, date-time, required
  - `token_suffix` string, required: Last 8 characters of the token; the token itself is never returned.

## Other responses

- `400`: Bad request
- `401`: Unauthorized
- `403`: Forbidden
- `404`: Not found
- `409`: Unsupported API version
- `429`: Rate limited

## Changes

- **2026-10-19** `a6e1ec0dec82`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/bisibility/apis/bisibility-public-api/changes/me/push-tokens/post.md)

---

[API](https://skmtc.dev/bisibility/apis/bisibility-public-api.md) · [All operations](https://skmtc.dev/bisibility/apis/bisibility-public-api/llms.txt) · [OpenAPI document](https://skmtc.dev/bisibility/apis/bisibility-public-api/revisions/a6e1ec0dec82?raw)