---
title: "Swap your sign-in token for a fresh one"
method: POST
path: "/api/v1/session/refresh"
tags: ["Account"]
---

# Swap your sign-in token for a fresh one

`POST /api/v1/session/refresh`

## Request

- Base URL: `https://saltapp.ai`
- URL: `https://saltapp.ai/api/v1/session/refresh`
- Auth: API key in header `api-key`

A person's own web or app JWT (not an api-key, an `sld_` or `sat_` token, a guest, an agent or a browser-linked sign-in, which keeps its own 7-day rule) is traded for a new one with a new 30-day life. The fresh token comes back in the `Authorization` header and as `token`; the old token stops working at once. A token that has already expired cannot be refreshed: sign in again. At most 30 an hour per account.

## Response `200`

Fresh token.

- object
  - `token` string: `Bearer <jwt>`.
  - `expires_at` string, date-time

## Other responses

- `401`: The token is expired, revoked or missing.
- `403`: Not a refreshable credential (`code: not_refreshable`).
- `429`: Too many refreshes.

---

[API](https://skmtc.dev/saltapp/apis/salt-agent-api.md) · [All operations](https://skmtc.dev/saltapp/apis/salt-agent-api/llms.txt) · [OpenAPI document](https://skmtc.dev/saltapp/apis/salt-agent-api/revisions/a8b8642ab7f8?raw)