Sign in

v21

latestOpenAPI 3.1.0raw.githubusercontent.com2026-08-042830148.8 KB
Portfolio Connect

Generate Access Token

Generate a short-lived access token from your API key.

Use this endpoint from your backend to create tokens that can be safely passed to frontend/SDK.

Legacy path: /v1/access-token (still supported)

Access tokens:

  • Are prefixed with at_ for easy identification
  • Valid for up to 60 minutes
  • Can be used in place of API keys on all v4 endpoints
  • Cannot be used to generate other access tokens
post/v1/token

Request body

expiry_minutesinteger

Token validity in minutes (max 60)

Example request

{
  "expiry_minutes": 60
}

Response

Access token generated successfully

access_tokenstring

The at_ prefixed access token

expires_ininteger

Token validity in seconds

token_typestring

Always "api_key" - token is a drop-in replacement for x-api-key header

Example response

{
  "access_token": "at_eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...",
  "expires_in": 3600,
  "token_type": "api_key"
}