Skip to main content
POST
Create a session token

Authorizations

Authorization
string
header
required

Secret key (sk_live_...)

Response

Created

A session token for the Auth Component. Expires 30 minutes after its last use, and no later than 24 hours after creation. Scoped to a single component session.

id
string
required

Unique identifier for the session token, prefixed with tok_.

Pattern: ^tok_
Example:

"tok_AbC123xYz456"

object
string
required

Always token.

token
string
required

The token value to pass to <DeckAuthComponent />. Prefixed with tk_. Treat as a bearer secret until it expires.

expires_at
string<date-time>
required

ISO 8601 timestamp at which the token stops being accepted if it is never used. 30 minutes after created_at. Each request made with the token extends the expiry to 30 minutes after that request, up to 24 hours after created_at.

Example:

"2026-08-24T12:00:00Z"

created_at
string<date-time>
required

ISO 8601 timestamp of when the token was created.

Example:

"2026-08-24T12:00:00Z"

request_id
string
required

Unique identifier for the API request. Include this when contacting support.