---
title: "POST /authenticate"
method: POST
path: "/authenticate"
tags: ["api-gateway"]
---

# POST /authenticate

`POST /authenticate`

## Request body

- AuthenticateRequest — Exchange an API key and secret for a bearer token.
  - `api_key` string, required
  - `api_secret` string, required
  - `expiration_seconds` integer, required

## Response `200`

Token generated successfully

- AuthenticateResponse
  - `token` string, required — Strong type for Token with validation

## Other responses

- `400` — 2FA required but not provided
- `401` — Unauthorized

---

[API](https://skmtc.net/architect/apis/ax-api-gateway.md) · [All operations](https://skmtc.net/architect/apis/ax-api-gateway/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/architect/ax-api-gateway/versions/2955c31c524d/schema)