<!-- Extension API v0 — pre-1.0. Interfaces may change without notice until P2 seals the custom-code format. First-party extensions track HEAD. -->

# `tokens.mint`

Mint an Ajan (propose-only) or Geliştirici (direct) token; the plaintext is returned exactly once.

- **method + path**: `POST /v1/tokens`
- **TR label**: Erişim anahtarı oluşturuldu
- **auth**: authenticated · scope gates: any of `admin` — “Erişim anahtarlarını yalnızca mağaza sahibi yönetebilir”
- **agentPolicy**: `owner` — owner sessions only — never callable by any token and never an MCP tool.
- **effects**: `db`
- **idempotency**: server — the platform derives the key
- **wraps**: [`token.mint`](/reference/commands/token.mint)

Machine-readable body schema: [/schemas/routes/tokens.mint.json](/schemas/routes/tokens.mint.json).

## Body

```json
{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "type": "object",
  "properties": {
    "kind": {
      "type": "string",
      "enum": [
        "agent",
        "developer"
      ]
    },
    "label": {
      "type": "string",
      "minLength": 1,
      "maxLength": 60
    },
    "scopes": {
      "minItems": 1,
      "maxItems": 10,
      "type": "array",
      "items": {
        "type": "string",
        "pattern": "^[a-z]+(:[a-z]+)?$"
      }
    },
    "expiresInDays": {
      "type": "integer",
      "minimum": 1,
      "maximum": 365
    },
    "rateLimitPerMin": {
      "type": "integer",
      "minimum": 10,
      "maximum": 1000
    }
  },
  "required": [
    "kind",
    "label",
    "scopes"
  ],
  "additionalProperties": false
}
```