---
title: "POST /identities/payment/token"
method: POST
path: "/identities/payment/token"
---

# POST /identities/payment/token

`POST /identities/payment/token`

Generates authentication tokens for payment providers that use vendor-specific authentication mechanisms.

## Request body

- object
  - `workloadIdentityToken` string, password, required — Workload access token for authorization.
  - `resourceCredentialProviderName` string, required — Name of the payment credential provider to use.
  - `paymentTokenRequest` object, required — Vendor-specific token request configuration.
    - `coinbaseCdpTokenRequest` object — The Coinbase CDP token request.
      - `requestMethod` 'GET' | 'POST' | 'PUT' | 'DELETE' | 'PATCH', required — The HTTP method for the payment API request.
      - `requestHost` string — The host for the payment API request. Defaults to "api.cdp.coinbase.com".
      - `requestPath` string, required — The path of the payment API request.
      - `includeWalletAuthToken` boolean — Set to true for wallet write operations (requires walletSecret configured).
      - `requestBody` string — Request body JSON — used to generate wallet auth JWT.
    - `stripePrivyTokenRequest` object — The Stripe Privy token request.
      - `requestHost` string — The host for the Privy API request. Defaults to "api.privy.io".
      - `requestPath` string, required — The path of the Stripe Privy API request.
      - `requestBody` string, password, required — Request body JSON for the Privy API call.
      - `includeAuthorizationSignature` boolean — Set to true to generate privy-authorization-signature.

## Response `200`

Success

- GetResourcePaymentTokenResponse
  - `paymentTokenResponse` object, required — Vendor-specific token response output. Contains all response data in a type-safe, vendor-specific structure.
    - `coinbaseCdpTokenResponse` object — The Coinbase CDP token response.
      - `bearerToken` string, password, required — Bearer Token for Authorization header.
      - `walletAuthToken` string, password — Wallet Auth Token for X-Wallet-Auth header.
    - `stripePrivyTokenResponse` object — The Stripe Privy token response.
      - `authorizationSignature` string, password — Base64-encoded ECDSA P-256 authorization signature (only present when includeAuthorizationSignature is true).
      - `requestExpiry` integer — Unix timestamp in milliseconds when the authorization signature expires.
      - `appId` string, required — The Privy app ID for the privy-app-id header.
      - `basicAuthToken` string, password, required — Base64-encoded Basic Auth token (appId:appSecret) for the Authorization header.

## Other responses

- `480` — UnauthorizedException
- `481` — ValidationException
- `482` — AccessDeniedException
- `483` — ResourceNotFoundException
- `484` — ThrottlingException
- `485` — InternalServerException

---

[API](https://skmtc.net/aws/apis/bedrock-agentcore.md) · [All operations](https://skmtc.net/aws/apis/bedrock-agentcore/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/aws/bedrock-agentcore/versions/79623b33d495/schema)