---
title: "Create an app-scoped API token (no tenant restriction). Requires the `TOKEN_WRITE` privilege on the calling API token. Destructive privileges are opt-in and are never granted by default, so a token without it is refused with 403 (TBP-552)."
method: POST
path: "/account/api-token/app"
tags: ["account"]
---

# Create an app-scoped API token (no tenant restriction). Requires the \`TOKEN_WRITE\` privilege on the calling API token. Destructive privileges are opt-in and are never granted by default, so a token without it is refused with 403 (TBP-552).

`POST /account/api-token/app`

## Request

- Base URL: `https://api.thebridge.dev` (the document declares no server; this is the origin it was published from)
- URL: `https://api.thebridge.dev/account/api-token/app`
- Auth: none declared

## Request body

- CreateAppTokenDto

## Response `201`

---

[API](https://skmtc.dev/thebridge/apis/bridge-api.md) · [All operations](https://skmtc.dev/thebridge/apis/bridge-api/llms.txt) · [OpenAPI document](https://skmtc.dev/thebridge/apis/bridge-api/revisions/290fffcb3d80?raw)