---
title: "OCI token endpoint (GET)"
method: GET
path: "/v0/auth/oci/token"
tags: ["auth", "oci"]
---

# OCI token endpoint (GET)

`GET /v0/auth/oci/token`

Authenticates via Basic auth and returns a short-lived JWT for OCI operations. Supports three credential types: - `email:api-key-jwt`: user authentication via API token - `email:bencher_user_xxxxx`: user authentication via user API key - `project-slug-or-uuid:bencher_run_xxxxx`: project key authentication

If no Basic auth credentials are provided, issues a public (anonymous) OCI token.

Accepts multiple `scope` query parameters (Docker 29+ / containerd sends these).

## Query parameters

- `service` string, nullable

## Response `default`

---

[API](https://skmtc.net/bencherdev/apis/bencher-api.md) · [All operations](https://skmtc.net/bencherdev/apis/bencher-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/bencherdev/bencher-api/revisions/84086e99e6cd/schema)