Create a service token

Create a service token for machine-to-machine authentication. Accepts API key or bearer token. Optionally apply restrictions.

POST /tokens

JavaScript

JavaScript

import Smithery from '@smithery/api';

const client = new Smithery({
  apiKey: process.env['SMITHERY_API_KEY'], // This is the default and can be omitted
});

const createTokenResponse = await client.tokens.create();

console.log(createTokenResponse.token);

200

{
  "token": "<string>",
  "expiresAt": "2024-01-01T01:00:00.000Z"
}

Authorizations

Authorization · string · header · required

Smithery API key as Bearer token

Body

application/json

policy · object[]

Constraint objects to restrict the token. Each constraint may include a ttl field (max 24 hours). Default TTL is 1 hour. Maximum is 24 hours.

Minimum array length: 1

Show child attributes

organizationId · string

Optional organization ID to scope the token to. When provided, the token is minted with org context. The authenticated user must be an admin or owner of the organization.

Example:

"org_01H1234567890"

Response

200

application/json

Token created successfully

token · string · required

The signed service token.

expiresAt · string · required

ISO 8601 timestamp when the token expires.

Example:

"2024-01-01T01:00:00.000Z"