---
title: "Create Session Token"
method: POST
path: "/auth/session_token"
tags: ["auth"]
---

# Create Session Token

`POST /auth/session_token`

Creates a short-lived session token that can be used to authenticate WebSocket connections. Session tokens are useful for client-side applications where you don't want to expose your API key.

## Headers

- `Authorization` string, required

## Request body

- CreateSessionTokenRequest
  - `ttl_seconds` integer — Time-to-live for the session token in seconds.
  - `conversation_ids` string[] — Restricts the token to these conversations. A restricted token can read only their live audio and transcript, and cannot open the STS WebSocket or create an STS session. Omit it and the token can read any live conversation in the org. Pass it whenever the token will reach an end user's browser.

## Response `200`

Success response

- AuthCreateSessionTokenResponse200
  - `session_token` string, required — The session token to use for authentication.
  - `expires_at` string, date-time, required — When the session token expires.

## Other responses

- `400` — Invalid parameters
- `401` — Unauthorized (authentication missing or invalid)
- `403` — Forbidden (only API keys can create session tokens)
- `500` — Internal server error

---

[API](https://skmtc.net/phonic/apis/api-reference.md) · [All operations](https://skmtc.net/phonic/apis/api-reference/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/phonic/api-reference/revisions/7f8c81a5a990/schema)