---
title: "Issue Access Token"
method: POST
path: "/v1/access-tokens"
tags: ["access"]
---

# Issue Access Token

`POST /v1/access-tokens`

## Request

- Base URL: `https://api.tmcra.com`
- URL: `https://api.tmcra.com/v1/access-tokens`
- Auth: HTTP bearer

## Headers

- `Idempotency-Key` string, required
- `X-TMCRA-On-Behalf-Of-Subject` string, nullable: Trusted subject attribution for server-side control-plane proxies. Requires a tokens:manage API key.

## Request body

- ScopeTokenCreateRequest
  - `expires_in_seconds` integer, required
  - `label` string, required
  - `permissions` string[], required
  - `provisional_delivery_seconds` integer, nullable
  - `scope_names` string[]
  - `scope_prefixes` string[]
  - `subject` string, nullable

## Response `201`

Successful Response

- IssuedScopeTokenView
  - `access_token` string, required
  - `created_at` number, required
  - `created_by_key_id` string, nullable
  - `expires_at` number, required
  - `label` string, required
  - `last_used_at` number, nullable
  - `permissions` string[], required
  - `revoked_at` number, nullable
  - `scope_names` string[], required
  - `scope_prefixes` string[], required
  - `subject` string, nullable
  - `tenant_id` string, required
  - `token_id` string, required

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/tmcra/apis/tmcra-memory-api.md) · [All operations](https://skmtc.dev/tmcra/apis/tmcra-memory-api/llms.txt) · [OpenAPI document](https://skmtc.dev/tmcra/apis/tmcra-memory-api/revisions/597be9dc7a3d?raw)