---
title: "generate a SAS Token for the given Azure Blob storage account and container."
method: GET
path: "/sas/token/{collectionId}"
tags: ["Shared Access Signature (SAS) Tokens for GeoCatalog Asset Access"]
---

# generate a SAS Token for the given Azure Blob storage account and container.

`GET /sas/token/{collectionId}`

Generate a [SAS Token](https://docs.microsoft.com//azure/storage/common/storage-sas-overview#how-a-shared-access-signature-works)
for the given storage account and container. The storage account and container
must be associated with a Planetary Computer dataset indexed by the STAC API.

## Path parameters

- `collectionId` string, required

## Query parameters

- `api-version` string, required
- `duration` integer

## Response `200`

Successful Response

- SharedAccessSignatureToken — Represents a Shared Access Signature (SAS) token response for accessing Azure Blob Storage.
  - `msft:expiry` string, date-time, required — The expiration date and time of the SAS token in UTC.
  - `token` string, required — The SAS token string used for authentication.

## Other responses

- `default` — An unexpected error response.

---

[API](https://skmtc.net/azure/apis/orbital-microsoft-planetarycomputer.md) · [All operations](https://skmtc.net/azure/apis/orbital-microsoft-planetarycomputer/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/azure/orbital-microsoft-planetarycomputer/versions/42447be18bc5/schema)