Mint a subject token

POST

/subjects/{subject}/tokens

Mint a short-lived bearer token (utfs_…) scoped to exactly this
subject. Refused (with the SAME error shape GET/PATCH on
/subjects/{subject} above uses) when the subject is suspended,
under moderation, or tombstoned — minting a new live credential for
a subject not in good standing is never allowed, even though reading
or managing that same subject through the endpoints above still is.

Request

Authorization

API Key

Add parameter in header

x-api-key

Example:

x-api-key: ********************

Bearer Token

Provide your bearer token in the

Authorization

header when making requests to protected resources.

Example:

Authorization: Bearer ********************

Path Params

Body Params application/json

Examples

Responses

🟢201Created

application/json

A subject token was minted.

Bodyapplication/json

🟠400Bad Request

🟠401Unauthorized

🟠403Forbidden

🟠404Record Not Found

🟠413

🟠429

Request Example

Shell

JavaScript

Java

Swift

curl --location 'https://upload.tf/api/v1/subjects/ext:end-user-42/tokens' \
--header 'x-api-key: <api-key>' \
--header 'Content-Type: application/json' \
--data '{
    "cap": [
        "site:read"
    ],
    "ttlSeconds": 1,
    "pag": "string"
}'

Response Example

201 - Example 1

{
    "success": true,
    "data": {
        "token": "string",
        "expiresAt": 0,
        "ttlSeconds": 0,
        "subjectId": "68460e63-0717-47f9-8fd8-d28f152cb30b",
        "capabilities": [
            "site:read"
        ]
    }
}

Modified at 2026-08-18 09:08:48

Delete (tombstone) a subject

Revoke a subject's tokens