Renew machine AUTHENTICATION: exchange a renewal root credential for a short-lived Work Identity Token. Authenticate with the Agent Identity's dedicated renewal credential (fbzr_...), or with a legacy credential explicitly bound to that Agent Identity during rollout. A Work Identity Token may NOT call this endpoint. The caller cannot choose identity, workspace, actor, membership, grant, scopes, capabilities or any other authority: all of it is derived server-side from the credential binding, so renewal can never become authority mutation. Maximum lifetime is 86400 seconds.

post/identity/token

Request

  • Base URL: https://forbiz.io/api/public/agent
  • URL: https://forbiz.io/api/public/agent/identity/token
  • Auth: HTTP bearer

Request body

ttlSecondsinteger

Requested lifetime in seconds. Clamped server-side to [60, 86400]; the ceiling is never exceeded.

Response

A short-lived Work Identity Token. Use it as the Bearer token for business calls until expires_at, then renew.

access_tokenstring
token_type'Bearer'
expires_atstring date-time
expires_ininteger

Changes

No recorded changes to this operation across all 1 revision of this API.