Skip to navigation

Create a Session Token

Exchange your API key for a short-lived bearer JWT. Send the API key as Authorization: Bearer <api_key>; no request body is needed. The returned sessionJwt is valid for 15 minutes (the TTL is not echoed in the response) and must be sent in the Authorization header on every subsequent authenticated request. Refresh by calling this endpoint again before expiry.

See Authentication for more details.

Authentication

AuthorizationBearer

Agora access key (cleartext), sent as Authorization: Bearer <accessKey>. Used only by POST /v0/auth/token to mint a session JWT.

Response

OK
sessionJwtstring

Short-lived session JWT. Send it as Authorization: Bearer <sessionJwt> on every authenticated endpoint.

Errors

401
Unauthorized Error
429
Too Many Requests Error
500
Internal Server Error
503
Service Unavailable Error