---
title: "POST /v1alpha1/{+appPackage}/{+token}:verify"
method: POST
path: "/v1alpha1/{+appPackage}/{+token}:verify"
tags: ["apps"]
---

# POST /v1alpha1/{+appPackage}/{+token}:verify

`POST /v1alpha1/{+appPackage}/{+token}:verify`

Verify an API token by asserting the app and persona it belongs to. The verification is a protection against client-side attacks and will fail if the contents of the token don't match the provided values. A token must be verified before it can be used to manipulate user tags.

## Path parameters

- `appPackage` string, required
- `token` string, required

## Request body

- VerifyTokenRequest — Request message for VerifyToken.
  - `persona` string — Required. Persona represented by the token. Format: personas/{persona}

## Response `200`

Successful response

---

[API](https://skmtc.dev/google/apis/playgrouping.md) · [All operations](https://skmtc.dev/google/apis/playgrouping/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/google/playgrouping/revisions/622c679770d6/schema)