---
title: "Exchange Session"
method: POST
path: "/api/internal-operations/v1/session"
tags: ["internal authentication"]
---

# Exchange Session

`POST /api/internal-operations/v1/session`

## Request

- Base URL: `https://api.brumby.com` (the document declares no server; this is the origin it was published from)
- URL: `https://api.brumby.com/api/internal-operations/v1/session`
- Auth: none declared

Retain the existing bearer exchange, bounded by the access-token expiry.

Only previously registered Internal Ops sessions can be exchanged. An opaque
cookie replaces the legacy JWT cookie; this exchange never needs KMS or a
refresh token and never creates staff identities or grants.

## Response `201`

Successful Response

- unknown

---

[API](https://skmtc.dev/brumby/apis/brumby-platform-api.md) - [All operations](https://skmtc.dev/brumby/apis/brumby-platform-api/llms.txt) - [OpenAPI document](https://skmtc.dev/brumby/apis/brumby-platform-api/revisions/fe185e20813e?raw)