---
title: "Mint Agent Token"
method: POST
path: "/admin/blog/agent-tokens"
---

# Mint Agent Token

`POST /admin/blog/agent-tokens`

## Request

- Base URL: `https://api-docs.session-exchange.com` (the document declares no server; this is the origin it was published from)
- URL: `https://api-docs.session-exchange.com/admin/blog/agent-tokens`
- Auth: none declared

Mint a blog agent token (the owner authorizes an agent): `{scopes: ["blog:write", "blog:publish"],
label, ttl_days?, user_id?}`. Only a PASTED global-admin token or break-glass (an elevated browser session
is refused: it must not create lasting power, #1114). The token acts as a global-admin PERSON — the one
the minting token is bound to, or `user_id` from AGENT_MDX_GLOBAL_ADMIN_USERS — and stops working the
moment that person leaves the list, the token is revoked, it expires, or its scope's flag goes off.
Shown once; the registry keeps its hash.

## Response `200`

Successful Response

- unknown

---

[API](https://skmtc.dev/session-exchange/apis/a4sx.md) · [All operations](https://skmtc.dev/session-exchange/apis/a4sx/llms.txt) · [OpenAPI document](https://skmtc.dev/session-exchange/apis/a4sx/revisions/abaefc33dfc7?raw)