---
title: "Direct token exchange (SDK)"
method: POST
path: "/auth/token/direct"
tags: ["auth"]
---

# Direct token exchange (SDK)

`POST /auth/token/direct`

## Request

- Base URL: `https://api.thebridge.dev` (the document declares no server; this is the origin it was published from)
- URL: `https://api.thebridge.dev/auth/token/direct`
- Auth: none declared

Exchange a session JWT and tenantUserId for access/refresh/id tokens. SDK mode only.

## Response `200`

Token issuance successful

## Other responses

- `401`: Invalid session, MFA not completed, or tenant user mismatch

---

[API](https://skmtc.dev/thebridge/apis/bridge-api.md) · [All operations](https://skmtc.dev/thebridge/apis/bridge-api/llms.txt) · [OpenAPI document](https://skmtc.dev/thebridge/apis/bridge-api/revisions/290fffcb3d80?raw)