---
title: "Mint Universal App Token (UAT)"
method: POST
path: "/partner/app/{appId}/token"
tags: ["Universal App Token"]
---

# Mint Universal App Token (UAT)

`POST /partner/app/{appId}/token`

## Request

- Base URL: `https://partner.gupshup.io`
- URL: `https://partner.gupshup.io/partner/app/{appId}/token`
- Auth: API key in header `Authorization`

Issues a new Universal App Token scoped to a single app.

## Path parameters

- `appId` string, uuid, required

## Request body `application/x-www-form-urlencoded`

- MintAppTokenRequest
  - `name` string, required: Token label. 1 to 128 chars. Unique among this app's currently active UATs.
  - `expiry` integer: Absolute expiry in epoch milliseconds. Omit for the 24h default. If set, must satisfy now + 1h <= expiry <= now + 24h.

## Response `200`

Successful response. Raw JWT returned once.

- MintAppTokenSuccessResponse
  - `status` string
  - `token` string: The raw UAT JWT. Returned only once, at mint time.
  - `id` string: Token row id, usable with the list and revoke APIs.

## Other responses

- `400`: Validation or business error
- `401`: Unauthorized access - missing or invalid authentication (JwtAuthenticationEntryPoint)
- `409`: Active token cap reached or duplicate active token name
- `429`: Rate limit exceeded - more than 10 requests / 60 seconds
- `500`: Internal server error

---

[API](https://skmtc.dev/gupshup/apis/universal-app-token-uat-apis.md) - [All operations](https://skmtc.dev/gupshup/apis/universal-app-token-uat-apis/llms.txt) - [OpenAPI document](https://skmtc.dev/gupshup/apis/universal-app-token-uat-apis/revisions/e2c6e72dd1ea?raw)