---
title: "Mint an investor-scoped JWT"
method: POST
path: "/v0/investor-tokens/"
tags: ["Investor tokens"]
---

# Mint an investor-scoped JWT

`POST /v0/investor-tokens/`

## Request

- Base URL: `https://distributor-api.spiko.io`
- URL: `https://distributor-api.spiko.io/v0/investor-tokens/`
- Auth: HTTP basic
- TypeScript: <https://skmtc.dev/spiko/apis/spiko-distributor-api/docs/v0/investor-tokens/post.ts> (a function with typed inputs; its response is checked against the schema)

Create a short-lived, single-use JWT for the investor to place orders directly from the distributor frontend.

## Request body

- object
  - `investorId` string, uuid, required: a Universally Unique Identifier
  - `operation` 'subscription' | 'deposit' | 'withdrawal', required

## Response `200`

Success

- object
  - `token` string, required
  - `expiresAt` string, required

## Other responses

- `400`: The request did not match the expected schema
- `401`: Authentication failed. Two bodies are possible: the schema below when the API rejects the credentials, and `{ "error": { "code", "status", "request", "message" } }` when the API gateway rejects them first. Only the former carries a `_tag`.
- `403`: Forbidden
- `404`: NotFound
- `503`: The investor is undergoing a scheduled upgrade, access is temporarily paused to ensure data safety.

---

[API](https://skmtc.dev/spiko/apis/spiko-distributor-api.md) - [All operations](https://skmtc.dev/spiko/apis/spiko-distributor-api/llms.txt) - [OpenAPI document](https://skmtc.dev/spiko/apis/spiko-distributor-api/revisions/dd06889f4c79?raw)