---
title: "Create a connectToken"
method: POST
path: "/connectTokens"
tags: ["ConnectTokens"]
---

# Create a connectToken

`POST /connectTokens`

Creates a new ConnectToken, which is essential for [Corbado Connect](/corbado-connect). ConnectTokens authorize actions that modify user data.

Consult the [Documentation](/corbado-connect/concepts/connect-token) for more details.

## Request body

- ConnectTokenCreateReq
  - `type` 'passkey-append' | 'passkey-delete' | 'passkey-list' | 'passkey-login', required
  - `data` union, required
    - object — Data for `passkey-append`.
      - `displayName` string, required — Display name of the user.
      - `identifier` string, required — Login identifier of the user (here email address).
    - object — Data for `passkey-delete`.
      - `identifier` string, required — Login identifier of the user (here email address).
    - object — Data for `passkey-list`.
      - `identifier` string, required — Login identifier of the user (here email address).
    - object — Data for `passkey-login`.
      - `identifier` string, required — Login identifier of the user (here email address).
  - `maxLifetimeInSeconds` integer — Maximum lifetime of the connectToken in seconds.

## Response `200`

ConnectToken has been created.

- ConnectToken
  - `id` string, required — Unique identifier of the connectToken.
  - `tokenType` 'passkey-append' | 'passkey-delete' | 'passkey-list' | 'passkey-login', required
  - `data` union, required
    - object — Data for `passkey-append`.
      - `displayName` string, required — Display name of the user.
      - `identifier` string, required — Login identifier of the user (here email address).
    - object — Data for `passkey-delete`.
      - `identifier` string, required — Login identifier of the user (here email address).
    - object — Data for `passkey-list`.
      - `identifier` string, required — Login identifier of the user (here email address).
    - object — Data for `passkey-login`.
      - `identifier` string, required — Login identifier of the user (here email address).
  - `connectTokenStatus` 'initial' | 'consumed', required
  - `secret` string — Secret of the connectToken.
  - `expires` integer, required — Unix time of when the connectToken expires (in seconds elapsed since January 1, 1970, 00:00:00 UTC).

## Other responses

- `default` — Error

---

[API](https://skmtc.dev/corbado/apis/corbado-backend-api.md) · [All operations](https://skmtc.dev/corbado/apis/corbado-backend-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/corbado/corbado-backend-api/revisions/1f6143efe426/schema)