---
title: "Mint MCP access token"
method: POST
path: "/v1/mcp/token"
tags: ["Authentication"]
---

# Mint MCP access token

`POST /v1/mcp/token`

Mints an org-scoped MCP access token for the caller's active organization so first-party clients can connect to the Den MCP server without a separate browser OAuth flow.

## Request body

- object
  - `scopes` string[]

## Response `200`

MCP access token minted successfully.

- McpTokenResponse
  - `token` string, required
  - `expiresAt` string, date-time, required
  - `organizationId` string, required
  - `scopes` string[], required
  - `resource` string, required

## Other responses

- `400` — The token request was invalid or no active organization is selected.
- `401` — The caller must be signed in to mint an MCP token.
- `403` — API keys cannot mint MCP tokens.

---

[API](https://skmtc.net/openworklabs/apis/den-api.md) · [All operations](https://skmtc.net/openworklabs/apis/den-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/openworklabs/den-api/versions/55ba7d5c7a7b/schema)