---
title: "Mint an aggregator webhook token"
method: POST
path: "/v1/discovery/webhooks/tokens"
tags: ["Discovery"]
---

# Mint an aggregator webhook token

`POST /v1/discovery/webhooks/tokens`

Mints a webhook token bound to an existing aggregator connection and returns the raw token plus its provider-facing webhook URL ONCE. Only the token's SHA-256 hash is stored.

## Request body

- MintRequest
  - `connection_config_name` string, required — Config name of the existing aggregator connection the token binds to
  - `vendor` 'pluggy' | 'belvo', required — Aggregator vendor the token is minted for: pluggy (Pluggy) or belvo (Belvo)

## Response `201`

Created

- MintResponse
  - `token` string, required — Raw bearer token, surfaced exactly once; only its SHA-256 hash is stored server-side
  - `vendor` 'pluggy' | 'belvo', required — Aggregator vendor the token is bound to
  - `webhook_url` string, required — Fully-formed provider-facing receiver URL embedding the raw token in its path segment; configure this in the vendor dashboard

## Other responses

- `default` — Error

---

[API](https://skmtc.net/lerian/apis/identity-plugin.md) · [All operations](https://skmtc.net/lerian/apis/identity-plugin/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/lerian/identity-plugin/versions/25daba385532/schema)