---
title: "Mint Smoke Shortlist Token"
method: POST
path: "/api/internal/cron/smoke-shortlist-token"
tags: ["Internal Cron"]
---

# Mint Smoke Shortlist Token

`POST /api/internal/cron/smoke-shortlist-token`

## Request

- Base URL: `https://api.ruzora.com` (the document declares no server; this is the origin it was published from)
- URL: `https://api.ruzora.com/api/internal/cron/smoke-shortlist-token`
- Auth: none declared

Mint a fresh shortlist magic-link token for the pinned smoke lead.

Used by the weekly prod-smoke workflow (.github/workflows/prod-smoke.yml):
shortlist tokens expire after 14 days, so the suite mints one per run
instead of pinning a token that goes stale.

SMOKE_SHORTLIST_LEAD_ID must point at a DEDICATED smoke-fixture lead —
issue_token revokes the lead's prior active token, so pointing this at a
real lead would kill the link that lead received by email.

## Headers

- `x-cron-token` string, nullable

## Response `200`

Successful Response

- unknown

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/ruzora/apis/ruzora-candidate-crm-api.md) · [All operations](https://skmtc.dev/ruzora/apis/ruzora-candidate-crm-api/llms.txt) · [OpenAPI document](https://skmtc.dev/ruzora/apis/ruzora-candidate-crm-api/revisions/f9b8223f3ac4?raw)