---
title: "Get a management token for one of your Auth accounts"
method: POST
path: "/auth-accounts/{account_id}/token"
tags: ["projects"]
---

# Get a management token for one of your Auth accounts

`POST /auth-accounts/{account_id}/token`

## Request

- Base URL: `https://api.faable.com`
- URL: `https://api.faable.com/auth-accounts/{account_id}/token`
- Auth: one of:
  - OAuth 2 (authorization code, authorization URL `https://faable.auth.faable.link/authorize`, token URL `https://faable.auth.faable.link/oauth/token`)
  - HTTP bearer
  - OAuth 2 (client credentials, token URL `https://faable.auth.faable.link/oauth/token`)
  - HTTP bearer
  - HTTP basic
  - API key in query parameter `apikey`

Short-lived Management API token for the Faable Auth account, issued when the caller is a member of the project that owns it. With a deploy API key, only for a tenant of the key's project and with a narrower set of scopes (read users, logs, sessions, connections, clients; suspend users, end sessions, send password setup; no deletes). 204 when that account has no per-tenant token (the platform account): keep using your own token.

## Path parameters

- `account_id` string, required

## Response `200`

Default Response

- object
  - `access_token` string, required
  - `expires_in` integer, required

## Other responses

- `204`: No per-tenant token for this account (the platform one): use your own token.
- `400`: `validation_error` — The body, query or path failed schema validation. `details.issues` lists each failing field.
- `401`: `unauthorized` — The request carries no valid credentials. `invalid_token` — The bearer token is missing, malformed or expired.
- `403`: `forbidden` — The credentials are valid but do not allow this operation. `project_access_denied` — The caller is not a member of the project named in `x-faable-project`, or the credential belongs to another project. `user_suspended` — The account is suspended. Contact support@faable.com.
- `404`: `auth_account_not_found` — There is no Faable Auth account with that id.
- `429`: `too_many_requests` — Rate limit exceeded. Honour the `Retry-After` header.
- `500`: `internal_error` — Unexpected server error. Retry later; the request id is logged.
- `503`: `tenant_token_unavailable` — Faable Auth could not issue a management token for the account right now. Retry later. `database_unavailable` — Faable cannot reach its database right now. Transient: retry after the `Retry-After` header.

---

[API](https://skmtc.dev/faable/apis/faablecloud-api.md) · [All operations](https://skmtc.dev/faable/apis/faablecloud-api/llms.txt) · [OpenAPI document](https://skmtc.dev/faable/apis/faablecloud-api/revisions/e2fc93da3c49?raw)