---
title: "Mint an identity-widget token for the signed-in user (renders the User Security/Profile widget in the console)"
method: POST
path: "/v1/me/widget-token"
tags: ["me"]
---

# Mint an identity-widget token for the signed-in user (renders the User Security/Profile widget in the console)

`POST /v1/me/widget-token`

## Request

- Base URL: `https://api.wavehouse.cloud`
- URL: `https://api.wavehouse.cloud/v1/me/widget-token`
- Auth: one of:
  - API key in cookie `whc_session`
  - HTTP bearer
  - API key in header `X-API-Key`

## Response `200`

OK

- CreateWidgetTokenOutput
  - `token` string, required: Ephemeral identity-widget token (~1h). The console passes it to the widget provider to render the User Security/Profile widget.

## Other responses

- `429`: Rate limited, per client IP, API key or org; a client IP is also refused on every route for a while after repeated authentication failures. A limited operation carries RateLimit-Policy and RateLimit on every response; wait Retry-After seconds before retrying.
- `default`: Error

---

[API](https://skmtc.dev/wavehouse/apis/wavehouse-cloud-api.md) · [All operations](https://skmtc.dev/wavehouse/apis/wavehouse-cloud-api/llms.txt) · [OpenAPI document](https://skmtc.dev/wavehouse/apis/wavehouse-cloud-api/revisions/adea029bf505?raw)