---
title: "Authenticate token header"
method: POST
path: "/v1/tokens/authenticate"
tags: ["Tokens"]
---

# Authenticate token header

`POST /v1/tokens/authenticate`

Verify a token header without checking resource access.

## Request body

- AuthenticateTokenRequest
  - `header` string

## Response `200`

OK

- RootVerifiedToken[]
  - `caveats` MacaroonCaveatSet
    - `caveats` object[]
  - `header` string
  - `nonce` MacaroonNonce
    - `kid` integer[]
    - `proof` boolean
    - `rnd` integer[]
  - `permission_token` integer[]

## Other responses

- `400` — Bad Request

## Changes

- **2026-08-20** `9e6a180c40a3` — 1 warning
  - added the new `name_taken` enum value to the `status` response property for the response status `400`
- **2026-08-12** `f54480c4ce7f` — 1 info
  - endpoint added

[Change history](https://skmtc.dev/machines/apis/machines-api/changes/v1/tokens/authenticate/post.md)

---

[API](https://skmtc.dev/machines/apis/machines-api.md) · [All operations](https://skmtc.dev/machines/apis/machines-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/machines/machines-api/revisions/80746f322f20/schema)