---
title: "Authenticate token header"
method: POST
path: "/tokens/authenticate"
tags: ["Tokens"]
---

# Authenticate token header

`POST /tokens/authenticate`

Verify a token header without checking resource access.

## Request body

- AuthenticateTokenRequest
  - `header` string

## Response `200`

OK

- RootVerifiedToken[]
  - `caveats` MacaroonCaveatSet
    - `caveats` object[]
  - `header` string
  - `nonce` MacaroonNonce
    - `kid` integer[]
    - `proof` boolean
    - `rnd` integer[]
  - `permission_token` integer[]

## Other responses

- `400` — Bad Request

---

[API](https://skmtc.net/fly/apis/machines-api.md) · [All operations](https://skmtc.net/fly/apis/machines-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/fly/machines-api/versions/f5ad396d55d7/schema)