Create a Session Token
Exchange your API key for a short-lived bearer JWT. Send the API key as `Authorization: Bearer <api_key>`; no request body is needed. The returned `sessionJwt` is valid for **15 minutes** (the TTL is not echoed in the response) and must be sent in the `Authorization` header on every subsequent authenticated request. Refresh by calling this endpoint again before expiry.
See [Authentication](/api/authentication) for more details.
Authentication
AuthorizationBearer
Agora access key (cleartext), sent as Authorization: Bearer <accessKey>. Used only by POST /v0/auth/token to mint a session JWT.
Response
OK
sessionJwt
Short-lived session JWT. Send it as Authorization: Bearer <sessionJwt> on every authenticated endpoint.
Errors
401
Unauthorized Error
429
Too Many Requests Error
500
Internal Server Error
503
Service Unavailable Error

