---
search:
  tags:
    - Computers
    - POST
seo:
  description: >-
    Mints a scoped, expiring token (view, control, or an agent scope). The
    secret… Reference for the POST /v1/computers/{id}/tokens endpoint in the
    Webfold API.
sidebar:
  label: Mint a capability token
  badge: POST
title: Mint a capability token
type: openapi-operation
---
Mints a scoped, expiring token (`view`, `control`, or an agent scope). The secret is shown once.

`POST /v1/computers/{id}/tokens`

**Request body** (`application/json`)

- `scope` (string)
- `ttl_secs` (integer)

Request body example:

```json
{
  "scope": "string",
  "ttl_secs": 0
}
```

**Responses**

- `200` — Gateway response, passed through as JSON.
- `400` — Bad request
- `401` — Missing or invalid bearer token
- `403` — Billing or plan entitlement blocked the request
- `404` — No such computer for this account.
- `502` — Upstream service (arXiv, YouTube, web page) failed
- `503` — The backing service is not configured or is busy

Response example, 200:

```json
{}
```