---
title: "Create an API token for the current user."
method: POST
path: "/user/token"
tags: ["user"]
---

# Create an API token for the current user.

`POST /user/token`

Required RBAC Policy: user/token/create

## Request body

- CreateUserApiTokenRequest
  - `name` string
  - `read_only` boolean

## Response `201`

- ApiToken
  - `access_token` string
  - `last_active` string, date-time
  - `name` string
  - `read_only` boolean

## Other responses

- `400` — Returned on bad input
- `401` — Return if the caller is not authorized
- `403` — Returned if the caller does not have the needed permission

---

[API](https://skmtc.net/replicated/apis/vendor-api-v3.md) · [All operations](https://skmtc.net/replicated/apis/vendor-api-v3/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/replicated/vendor-api-v3/revisions/6fcf9e54aba4/schema)