---
title: "Issue a source-scoped push token"
method: POST
path: "/v0/connectors/{connector_id}/tokens"
tags: ["Connectors"]
---

# Issue a source-scoped push token

`POST /v0/connectors/{connector_id}/tokens`

## Request

- Base URL: `https://docs.quivr.thevibecompany.co` (the document declares no server; this is the origin it was published from)
- URL: `https://docs.quivr.thevibecompany.co/v0/connectors/{connector_id}/tokens`
- Auth: HTTP bearer

Requires connectors:admin on the instance's Organization and Corpus. Issue a random bearer token for this instance's instance_token routes only (Plugin API 0.12). The secret is shown once in this response with Cache-Control no-store; only its SHA-256 hash and display metadata are stored. Issuance is not replayable. If the response is lost, list tokens, revoke the lost token and issue another. Disabled instances refuse issuance with 409 connector_disabled. No request body is needed.

## Response `201`

New token with its one-time bearer secret.

- ConnectorTokenCreated
  - `token` ConnectorToken, required
    - `token_id` string, required
    - `prefix` string, required: Display prefix only; cannot authenticate.
    - `created_at` string, date-time, required
    - `rotated_at` string, date-time
    - `revoked_at` string, date-time
    - `valid_until` string, date-time: Exclusive expiry of an old token after rotation; absent for an unrotated token.
  - `secret` string, required: One-time bearer secret; never persisted or returned by metadata reads.

## Other responses

- `default`: JSON Error envelope; 401 unauthenticated, 403 without admin permission, 404 out of scope, 409 disabled, 503 unavailable.

---

[API](https://skmtc.dev/thevibecompany/apis/quivr-http-api.md) - [All operations](https://skmtc.dev/thevibecompany/apis/quivr-http-api/llms.txt) - [OpenAPI document](https://skmtc.dev/thevibecompany/apis/quivr-http-api/revisions/4f4e30ba8f4e?raw)