Access
post/tokens

Request

  • Base URL
    https://api.hedra.com/v3
  • Auth
    • API key in header Authorization
    • or HTTP bearer

Request body

ttl_secondsinteger nullable

Seconds until the token expires; omitted means the service default.

scopesApiKeyScope[] nullable

Scopes granted to the token. Omitted means every scope of the minting key except the opt-in sandboxes:read, sandboxes:write and sandboxes:exec, which a token holds only by listing them; an explicit subset narrows the grant, and requesting beyond the key's scopes is a 403.

Response

Successful Response

tokenstring required

The ephemeral token — a valid Bearer credential until it expires. Shown exactly once.

expires_atstring date-time nullable

ISO-8601 instant the token stops authenticating.

Changes

    • info

      added the new sandboxes:exec enum value to the request property //

    • info

      added the new sandboxes:read enum value to the request property //

    • info

      added the new sandboxes:write enum value to the request property //

    • info

      endpoint added