---
title: "Registry token"
method: GET
path: "/api/registry/token"
tags: ["containers"]
---

# Registry token

`GET /api/registry/token`

Mints a short-lived EdDSA JWT for the HuggingFace container registry, verifiable via the JWK at `/api/keys/jwt`.

## Query parameters

- `service` string, required — Registry service identifier — placed in the JWT `aud` claim.
- `scope` union — Docker Distribution scope(s), e.g. `repository:org/img:push,pull`. May be repeated.
  - string
  - string[]

## Response `200`

Docker Distribution v2 token response — see https://distribution.github.io/distribution/spec/auth/jwt/

- object
  - `token` string, required — EdDSA JWT signed by the moon JWT key, carrying `access[]`.
  - `access_token` string, required — Identical to `token` — Docker Distribution v2 accepts either field.
  - `expires_in` integer, required — JWT lifetime in seconds.
  - `issued_at` string, date-time, required — ISO-8601 timestamp at which the JWT was minted.

## Changes

- **2026-09-18** `74f2b0d17636` — 2 info
  - api tag `containers` added
  - api tag `container` removed
- **2026-09-08** `bd17546f47b8` — 1 info
  - the `issued_at` response's property pattern was changed from `^((\d\d[2468][048]|\d\d[13579][26]|\d\d0[48]|[02468][048]00|[13579][26]00)-02-29|\d{4}-((0[13578]|1[02])-(0[1-9]|[12]\d|3[01])|(0[469]|11)-(0[1-9]|[12]\d|30)|(02)-(0[1-9]|1\d|2[0-8])))T([01]\d|2[0-3]):[0-5]\d:[0-5]\d(\.\d+)?(Z)$` to `^(?:(?:\d\d[2468][048]|\d\d[13579][26]|\d\d0[48]|[02468][048]00|[13579][26]00)-02-29|\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\d|30)|(?:02)-(?:0[1-9]|1\d|2[0-8])))T(?:(?:[01]\d|2[0-3]):[0-5]\d:[0-5]\d(?:\.\d+)?(?:Z))$` for the status `200`

[Change history](https://skmtc.dev/huggingface/apis/hub-api-endpoints/changes/api/registry/token/get.md)

---

[API](https://skmtc.dev/huggingface/apis/hub-api-endpoints.md) · [All operations](https://skmtc.dev/huggingface/apis/hub-api-endpoints/llms.txt) · [OpenAPI document](https://skmtc.dev/huggingface/apis/hub-api-endpoints/revisions/ea15a26e9ab3?raw)