---
title: "Generate Guest Token"
method: POST
path: "/spaces/guest-token"
tags: ["SPACES"]
---

# Generate Guest Token

`POST /spaces/guest-token`

Mint a Superset guest token for one dashboard the tenant owns.

The ownership check below is the embed trust boundary: the UUID comes
from the browser and must never be trusted as-is. A token is minted only
when the dashboard row exists in the caller's tenant schema with
``provider='superset'``.

## Request body

- SpacesGuestTokenRequest
  - `embed_uuid` string, required — Superset dashboard embed UUID (spaces_dashboard.embed_uuid)

## Response `200`

Successful Response

- SpacesGuestTokenResponse
  - `token` string, required

## Other responses

- `422` — Validation Error

---

[API](https://skmtc.net/myaltimate/apis/fastapi.md) · [All operations](https://skmtc.net/myaltimate/apis/fastapi/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/myaltimate/fastapi/versions/aab3fe5c9f05/schema)