---
title: "Create agent bootstrap token"
method: POST
path: "/v1/agent/bootstrap_tokens"
---

# Create agent bootstrap token

`POST /v1/agent/bootstrap_tokens`

## Request

- Base URL: `https://api.turos.app`
- URL: `https://api.turos.app/v1/agent/bootstrap_tokens`
- Auth: HTTP bearer

Issue a short-lived, single-use sponsor token for agent bootstrap under the current organization.

## Request body

- object
  - `label` string, nullable: Optional label carried into the issued agent API key.
  - `scopes` string[]: Optional requested scopes; self-serve sponsor tokens are limited to read:sec.
  - `ttlSeconds` integer: Optional lifetime in seconds. The service clamps the effective value to 60 through 86,400 seconds.

## Response `201`

Sponsor token issued. The secret is returned once.

- object
  - `object` 'agent_bootstrap_token', required
  - `id` string, required
  - `orgId` string, required
  - `actorPrincipalId` string, required
  - `label` string, nullable, required
  - `tokenPrefix` string, required
  - `scopes` string[], required
  - `livemode` boolean, required
  - `expiresAt` string, date-time, required
  - `usedAt` string, date-time, nullable, required
  - `usedByPrincipalId` string, nullable, required
  - `createdAt` string, date-time, required
  - `updatedAt` string, date-time, required
  - `secret` string, required: One-time sponsor-token secret. Store only long enough to send it to the bootstrap agent.
  - `requestId` string, required

## Other responses

- `default`: Contract-aware error response

---

[API](https://skmtc.dev/turos/apis/turos-api.md) · [All operations](https://skmtc.dev/turos/apis/turos-api/llms.txt) · [OpenAPI document](https://skmtc.dev/turos/apis/turos-api/revisions/a68d3ec80a56?raw)