---
title: "Mint an installation token"
method: POST
path: "/api/apps/installations/{installationId}/access_tokens"
tags: ["Apps"]
---

# Mint an installation token

`POST /api/apps/installations/{installationId}/access_tokens`

## Request

- Base URL: `https://git.cafe`
- URL: `https://git.cafe/api/apps/installations/{installationId}/access_tokens`
- Auth: none required

Returns a 15-minute token that acts as the installation's bot within its approved permissions, optionally narrowed, and its selected repositories.

## Path parameters

- `installationId` string, required

## Request body

- object
  - `client_assertion_type` 'urn:ietf:params:oauth:client-assertion-type:jwt-bearer', required
  - `client_assertion` string, required
  - `permissions` object[]
    - `kind` 'repo' | 'branch' | 'pr' | 'issue' | 'comment' | 'org' | 'team', required
    - `family` string, required
    - `level` 'read' | 'write' | 'admin', required
  - `repositoryIds` RepoId[]

## Response `201`

Response for status 201

- object
  - `token` string, required
  - `expiresAt` string, required
  - `installationId` string, required
  - `actor` string, required
  - `repositorySelection` 'all' | 'selected', required
  - `repositories` string[], required
  - `permissions` object[], required
    - `kind` 'repo' | 'branch' | 'pr' | 'issue' | 'comment' | 'org' | 'team', required
    - `family` string, required
    - `level` 'read' | 'write' | 'admin', required

## Other responses

- `400`: The request is invalid.
- `401`: Authentication is required, or the supplied credential is invalid.
- `403`: The credential does not permit this operation. A `code`, when present, names the refusal.
- `404`: The resource does not exist or is not visible to the caller.
- `409`: The request conflicts with the current state. A `code`, when present, names the refusal; `retryable` says whether the same request can succeed later, and `operationId` names the operation in the way.
- `429`: A rate limit is exhausted. Wait Retry-After seconds; the value is a hint, so back off on a repeat 429.
- `503`: A required service is temporarily unavailable; retry later.

---

[API](https://skmtc.dev/gitcafe/apis/git-cafe-api.md) - [All operations](https://skmtc.dev/gitcafe/apis/git-cafe-api/llms.txt) - [OpenAPI document](https://skmtc.dev/gitcafe/apis/git-cafe-api/revisions/9fa233d2986d?raw)