---
title: "Create A2A Caller Token"
method: POST
path: "/api/agents/a2a/caller-tokens"
tags: ["agents"]
---

# Create A2A Caller Token

`POST /api/agents/a2a/caller-tokens`

## Request

- Base URL: `https://app.thinqos.com` (the document declares no server; this is the origin it was published from)
- URL: `https://app.thinqos.com/api/agents/a2a/caller-tokens`
- Auth: none declared

Mint a caller token for this identity. The secret is shown exactly once.

The token grants nothing the identity does not already have: every A2A/MCP
call it authenticates still passes the per-agent exposure gate, the
entitlement check, and the connection policy at turn time.

## Headers

- `x-impersonate-identity-id` string, nullable

## Request body

- A2ACallerTokenCreate
  - `name` string, required

## Response `201`

Successful Response

- A2ACallerTokenCreated: Returned exactly once, at creation - the only time the secret exists.
  - `id` string, uuid, required
  - `name` string, required
  - `key_prefix` string, required
  - `created_at` string, date-time, nullable
  - `token` string, required

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/thinqos/apis/thinqos-api.md) · [All operations](https://skmtc.dev/thinqos/apis/thinqos-api/llms.txt) · [OpenAPI document](https://skmtc.dev/thinqos/apis/thinqos-api/revisions/5387b4ded614?raw)