Sign in
Auth

Generate a resource-scoped JWT from a direct hash.

Resolves a direct hash link and returns a resource-scoped JWT token. The token grants limited access to specific resource types associated with the direct hash (e.g., aicall for an AI direct hash). This endpoint is unauthenticated — the direct hash acts as the credential.

post/auth/boot

Request body

direct_hashstring required

The direct hash link (e.g., "direct.a1b2c3d4e5f6"). Obtained from resource direct hash endpoints such as POST /ais/{id}/direct_hash_regenerate.

Example request

{
  "direct_hash": "direct.a1b2c3d4e5f6"
}

Response

Resource-scoped JWT generated successfully.

tokenstring

JWT token string for API authentication. Pass as Bearer <token> in the Authorization header.

type'direct'

Token type. Always "direct" for boot tokens.

resource_typestring

The type of resource this token is scoped to (e.g., "ai").

resource_idstring uuid

The UUID of the resource this token is scoped to. Returned from the resource creation endpoint (e.g., POST /ais).

customer_idstring uuid

The UUID of the customer that owns the resource. Returned from the POST /auth/signup response.

expirestring date-time

Token expiry timestamp in ISO 8601 format.

Example response

{
  "token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJjdXN0b21lcl9pZCI6IjU1MGU4NDAwLWUyOWItNDFkNC1hNzE2LTQ0NjY1NTQ0MDAwMCJ9.abc123",
  "type": "direct",
  "resource_type": "ai",
  "resource_id": "550e8400-e29b-41d4-a716-446655440000",
  "customer_id": "660e8400-e29b-41d4-a716-446655440001",
  "expire": "2026-04-07T12:00:00Z"
}

Changes