---
title: "Changes to Issues a namespace-scoped JWT. Requires the admin token, even when the deployment allows unauthenticated requests."
method: POST
path: "/auth/tokens"
---

# Changes to Issues a namespace-scoped JWT. Requires the admin token, even when the deployment allows unauthenticated requests.

`POST /auth/tokens`

> Every recorded change to this operation, newest first.

## Timeline

Changed in 2 of 95 revisions.

- **2026-10-31** `aa8d1a8a5d14`: 6 breaking, 11 info
- **2026-09-23** `cf75c79633e3`: 1 info

## Changes

- **2026-10-31** `aa8d1a8a5d14`: 6 breaking, 11 info
  - removed the enum value `runner` of the request property `grants/items/resource`
  - removed the enum value `runner_config` of the request property `grants/items/resource`
  - the `duration` request property's min was increased to `1.00`
  - the `grants` request property's minItems was increased to `1`
  - the `grants/items/operations` request property's minItems was increased to `1`
  - added the pattern `^[a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?$` to the request property `namespace`
  - the endpoint scheme security `rivet_token_header` was added to the API
  - added the new `node` enum value to the request property `grants/items/resource`
  - added the new `pool` enum value to the request property `grants/items/resource`
  - added the non-success response with the status `400`
  - added the non-success response with the status `401`
  - added the non-success response with the status `403`
  - added the non-success response with the status `404`
  - added the non-success response with the status `415`
  - added the non-success response with the status `422`
  - added the non-success response with the status `500`
  - added the non-success response with the status `503`
- **2026-09-23** `cf75c79633e3`: 1 info
  - endpoint added

---

[Operation](https://skmtc.dev/rivet-dev/apis/rivet-api-public/docs/auth/tokens/post.md) - [API](https://skmtc.dev/rivet-dev/apis/rivet-api-public.md) - [Page](https://skmtc.dev/rivet-dev/apis/rivet-api-public/changes/auth/tokens/post)