---
title: "Authenticate"
method: POST
path: "/auth/token"
tags: ["auth"]
---

# Authenticate

`POST /auth/token`

Exchange API Key credentials for JWT tokens

## Request body

- object
  - `workspace` string, required — Target workspace
  - `apiKeyId` string, required — API Key id
  - `apiKeySecret` string, required — API Key secret

## Response `200`

Successful response

- object
  - `accessToken` string, required — JSON Web Token used to authenticate requests
  - `expiresInSeconds` number, required — JWT validity period (in seconds)
  - `refreshToken` string, required — Refresh token used to obtain new JWT
  - `refreshExpiresInSeconds` number, required — Refresh token validity period (in seconds)

## Other responses

- `400` — Invalid input data
- `401` — Authorization not provided
- `403` — Insufficient access
- `500` — Internal server error

---

[API](https://skmtc.net/ledgerhq/apis/vault-api.md) · [All operations](https://skmtc.net/ledgerhq/apis/vault-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/ledgerhq/vault-api/revisions/c88faa17bc25/schema)