auth

Mint an anonymous sandbox token with no human in the loop

Anonymous (per-IP rate limited, 10/hr). The ONLY mint path that needs no human approval: every other token comes from the device-code flow, which ends at a Clerk sign-in. Returns a sandbox token scoped to events:read_upcoming and nothing else, valid 24h, tied to no member and not renewable. That scope reads upcoming/live events — the same data /api/events/upcoming and /api/events/get already serve with no token at all, so the token is for exercising the auth shape, not for reaching anything new. GET the same path for a self-describe contract without spending from the rate budget. For member-scoped access use POST /api/agent/signup/start.

post/api/agent/sandbox/mint

Request

  • Base URL: https://www.immersivecommons.com
  • URL: https://www.immersivecommons.com/api/agent/sandbox/mint
  • Auth: none required

Response

Sandbox token minted. The plaintext token is surfaced ONCE.

okboolean required
tokenstring required

Plaintext bearer token, surfaced ONCE. Send as Authorization: Bearer <token>.

token_typestring required

Always "Bearer".

sandboxboolean required

Always true. WRITE verbs simulate instead of mutating.

scopesstring[] required

Always exactly ["events:read_upcoming"].

expires_ininteger required

Seconds until the token stops working (86400).

usagestring
surfacesobject

MCP / A2A / REST base URLs to try the token against.

notestring

Changes

No recorded changes to this operation across all 1 revision of this API.