---
title: "A one-time code the signed-in page hands to this machine's daemon"
method: POST
path: "/v1/devices/enrollment"
tags: ["devices"]
---

# A one-time code the signed-in page hands to this machine's daemon

`POST /v1/devices/enrollment`

## Request

- Base URL: `https://api.sixminute.ai` (the document declares no server; this is the origin it was published from)
- URL: `https://api.sixminute.ai/v1/devices/enrollment`
- Auth: HTTP bearer

The person's session. Answers a code that works once, for five minutes, at `POST /v1/devices/enroll`, where it issues a device credential for one of this person's devices.

## Response `201`

The code and when it stops working.

- object
  - `code` string, required
  - `expires_at` string, date-time, required

## Other responses

- `401`: No bearer token, or one that does not verify or has expired.
- `403`: The token verified but may not do this: no organisation, not provisioned, wrong role, or a device problem.

---

[API](https://skmtc.dev/sixminute/apis/sixminute-api.md) - [All operations](https://skmtc.dev/sixminute/apis/sixminute-api/llms.txt) - [OpenAPI document](https://skmtc.dev/sixminute/apis/sixminute-api/revisions/605577eadc10?raw)