tokens.mint

Mint an Ajan (propose-only) or Geliştirici (direct) token; the plaintext is returned exactly once.

• method + path: POST /v1/tokens
• TR label: Erişim anahtarı oluşturuldu
• auth: authenticated · scope gates: any of admin — “Erişim anahtarlarını yalnızca mağaza sahibi yönetebilir”
• agentPolicy: owner — owner sessions only — never callable by any token and never an MCP tool.
• effects: db
• idempotency: server — the platform derives the key
• wraps: token.mint

Machine-readable body schema: /schemas/routes/tokens.mint.json.

Body

{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "type": "object",
  "properties": {
    "kind": {
      "type": "string",
      "enum": [
        "agent",
        "developer"
      ]
    },
    "label": {
      "type": "string",
      "minLength": 1,
      "maxLength": 60
    },
    "scopes": {
      "minItems": 1,
      "maxItems": 10,
      "type": "array",
      "items": {
        "type": "string",
        "pattern": "^[a-z]+(:[a-z]+)?$"
      }
    },
    "expiresInDays": {
      "type": "integer",
      "minimum": 1,
      "maximum": 365
    },
    "rateLimitPerMin": {
      "type": "integer",
      "minimum": 10,
      "maximum": 1000
    }
  },
  "required": [
    "kind",
    "label",
    "scopes"
  ],
  "additionalProperties": false
}