Skip to main content
POST
Generate bearer token
Call this endpoint from your server only. Anyone holding your API key can move money on your account.
See Authentication for a token cache that refreshes before expiry.

Authorizations

api-key
string
header
required

Your secret API key. Used only to generate a bearer token.

Body

application/json
publicKey
string
required

Your public key from Developers → API keys in the dashboard.

Example:

"pk_live_xxxxxxxxxxxxxxxx"

Response

Token issued.

success
boolean
token
string

Bearer token (JWT).

expiresAt
integer

Expiry as a Unix timestamp in seconds.