POST
/
generate_access_token
{
  "client_id": "client123",
  "duration_secs": 3600,
  "metadata": {
    "user_name": "John Doe",
    "company": "Acme Corp"
  }
}
{
  "access_token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...",
  "expires_in": 3600
}
Use your org-level API key (Bearer fl-xxxxxx) to create a JWT token for a specific client. The token can be used at client-facing endpoints.
{
  "access_token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...",
  "expires_in": 3600
}
{
  "client_id": "client123",
  "duration_secs": 3600,
  "metadata": {
    "user_name": "John Doe",
    "company": "Acme Corp"
  }
}

Authorizations

Authorization
string
header
required

Org-level key (format: Bearer fl-xxxxx) used to manage client tokens.

Body

application/json
client_id
string
required

Identifier for the client

duration_secs
integer
required

Token lifetime in seconds

metadata
object

Optional metadata to store with the token

Response

Returns the newly generated token

access_token
string

The JWT token

expires_in
integer

How long the token remains valid (in seconds)