---
title: "Create short-lived scoped API token"
method: POST
path: "/api/tokens"
tags: ["tokens"]
---

# Create short-lived scoped API token

`POST /api/tokens`

## Request

- Base URL: `https://rstream.io`
- URL: `https://rstream.io/api/tokens`
- Auth: HTTP bearer

## Request body

- CreateAuthTokenParams
  - `expires_in` integer
  - `permissions` string[], nullable, required
  - `resources` object
    - `tunnels` Schema0 (unresolved $ref)

## Response `200`

Successful response.

- CreateAuthTokenResponse
  - `token` string, required

## Other responses

- `400`: Request validation failed.
- `401`: Authentication is required.
- `403`: The token is not authorized.

---

[API](https://skmtc.dev/rstream/apis/rstream-api.md) · [All operations](https://skmtc.dev/rstream/apis/rstream-api/llms.txt) · [OpenAPI document](https://skmtc.dev/rstream/apis/rstream-api/revisions/a840a2c91f22?raw)