---
title: "Mint an ephemeral session token"
method: POST
path: "/v1/session"
---

# Mint an ephemeral session token

`POST /v1/session`

## Request

- Base URL: `https://nullcone.ai/api`
- URL: `https://nullcone.ai/api/v1/session`
- Auth: none declared

Requires master API key (X-API-Key). Returns a short-lived token bound to the caller's IP address. Pass it as X-Session-Token on subsequent requests. Expires automatically; revoke early via DELETE /v1/session/{token}.

## Response `200`

Successful Response

- SessionCreateResponse
  - `token` string, required
  - `expires_in` integer, required
  - `bound_ip` string, required

---

[API](https://skmtc.dev/nullcone/apis/nullcone-api.md) · [All operations](https://skmtc.dev/nullcone/apis/nullcone-api/llms.txt) · [OpenAPI document](https://skmtc.dev/nullcone/apis/nullcone-api/revisions/c00983c87271?raw)