---
title: "Create Session Endpoint"
method: POST
path: "/v1/auth/session"
tags: ["auth"]
---

# Create Session Endpoint

`POST /v1/auth/session`

Create a session by verifying a signed challenge.

The challenge must have been requested within the last 60 seconds
and the signature must be valid for the challenge message.

Rate limited to 5 requests per minute per IP to prevent brute force.

## Request body

- SessionRequest
  - `hotkey` string, required — SS58 hotkey address
  - `challenge` string, required — Challenge that was signed
  - `signature` string, required — Hex-encoded signature

## Response `200`

Successful Response

- SessionResponse
  - `session_token` string, required — Session token for authenticated requests
  - `expires_at` integer, required — Unix timestamp when session expires
  - `role` string, required — User role (miner, validator, admin)

## Other responses

- `422` — Validation Error

---

[API](https://skmtc.dev/oroagents/apis/oro-api.md) · [All operations](https://skmtc.dev/oroagents/apis/oro-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/oroagents/oro-api/revisions/38ef86138115/schema)