---
title: "Create a client token"
method: POST
path: "/client-tokens"
tags: ["client tokens"]
---

# Create a client token

`POST /client-tokens`

Create a client token for secure authentication within Dwolla Drop-in components. Requires a granular permission action and a Customer link to define what operations the end user can perform within the component. Returns a short-lived token for configuring client-side Drop-in components including customer creation, verification, funding source management, and payment processing. Essential for implementing secure, embeddable UI components without exposing application credentials to the frontend.

## Headers

- `Accept` 'application/vnd.dwolla.v1.hal+json', required

## Request body

- object
  - `action` string, required — A granular permission for the Customer performing an action within a drop-in component
  - `_links` object, required
    - `customer` object, required
      - `href` string, uri, required — Link to the Customer performing the action

## Response `200`

Client token created successfully

## Other responses

- `400` — Bad Request
- `403` — Forbidden

## Changes

- **2025-12-03** `32790f685ab9` — 1 info
  - media type `application/json` was changed to a more specific media type `application/vnd.dwolla.v1.hal+json` for the response status `200`
- **2025-07-01** `633b30cf427d` — 1 breaking
  - added the new required `header` request parameter `Accept`
- **2025-06-06** `231d0268586b` — 1 info
  - endpoint added

[Change history](https://skmtc.dev/dwolla/apis/dwolla-api/changes/client-tokens/post.md)

---

[API](https://skmtc.dev/dwolla/apis/dwolla-api.md) · [All operations](https://skmtc.dev/dwolla/apis/dwolla-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/dwolla/dwolla-api/revisions/0e13062ae3be/schema)