Generate Bearer Token
Credits: Free — authentication endpoint.
Issues a short-lived Bearer JWT from valid API Key or Basic credentials. The token can then be sent as Authorization: Bearer <access_token> on subsequent requests instead of resending your long-lived API Key. Useful for handing access to a downstream client without sharing your primary credentials.
Auth: API Key (x-api-key) or HTTP Basic. Bearer tokens cannot issue new tokens (no token chaining).
Body: entirely optional. Send {} to get a token with default lifetime.
Lifetime: controlled by expireAfter (seconds). When omitted, the gateway uses its configured default (currently 3600). When present, it must be between 1 and the configured maximum (currently 3600). Values outside that range are rejected with OUT_OF_RANGE.
Revocation: tokens are stateless and self-expiring. There is no revocation endpoint — if a token is compromised, rotate the underlying API Key. The next snapshot reload propagates the rotation across all gateway instances within ~5 minutes.
Body
Response
Token generated successfully.