Create a token (maximum 10 active); requires sign-in within 10 minutes and shows its secret once.

Repeat the same Idempotency-Key for retries; keys are retained for 24 hours.

post/api/v1/me/tokens

Request

  • Base URL: https://portamora.app
  • URL: https://portamora.app/api/v1/me/tokens
  • Auth: API key in cookie __Host-session

Headers

Idempotency-Keystring required
x-amz-content-sha256string required

Lowercase SHA-256 hex of the exact body bytes, including the empty body. The example client adds this automatically; no AWS credentials are needed.

Request body

namestring required
scopesstring[] required
expiresAtstring date-time nullable

Response

Successful private response; Cache-Control: no-store.

idstring required

Case-sensitive token identifier with 10 safe-alphabet characters after the prefix.

secretstring nullable required

Shown only on the first response. An idempotent replay returns null; revoke and create a new token if the secret was lost.

Changes

No recorded changes to this operation across all 1 revision of this API.