Exchange API key for a short-lived JWT
Exchanges a long-lived API key for a short-lived JWT used by every other
endpoint. This is the only endpoint that accepts an API key directly —
callers should obtain a JWT here, then send it as Authorization: Bearer <token> to all other operations.
The returned JWT carries the caller's subscription tier as a claim and
expires after expires_in seconds. Callers should refresh the token
before expiry (or on a 401 response) by calling this endpoint again.
The answer's scopes say what the key may do. Where a deployment requires scopes, a key
that carries none is refused with 403 and the code apikey_without_scopes: create a key
with at least one scope.
Exchange API key for a short-lived JWT Exchanges a long-lived API key for a short-lived JWT used by every other endpoint. This is the only endpoint that accepts an API key directly — callers should obtain a JWT here, then send it as
Authorization: Bearer <token>to all other operations.The returned JWT carries the caller's subscription
tieras a claim and expires afterexpires_inseconds. Callers should refresh the token before expiry (or on a401response) by calling this endpoint again.The answer's
scopessay what the key may do. Where a deployment requires scopes, a key that carries none is refused with403and the codeapikey_without_scopes: create a key with at least one scope.