---
title: "Mint a terminal identity token"
method: POST
path: "/account/terminal-token"
tags: ["Token"]
---

# Mint a terminal identity token

`POST /account/terminal-token`

Mints a short-lived identity attestation for DIME Terminal:
an ES256 JWT (typ "terminal+JWT", aud "dime-terminal", sub =
the account address) signed with a dedicated key published in
the JWKS. It proves account identity to the terminal and
grants nothing on Paradex itself — no Paradex endpoint
accepts it. Requires an interactive session authenticated
with the account's own key: readonly/API tokens, RPC tokens
and subkey-scoped tokens are rejected. Sub-accounts and vault
operators mint attestations for their own address.

## Response `200`

Terminal token minted

- ResponsesAuthResp
  - `jwt_token` string — Authentication token

## Other responses

- `401` — Unauthorized
- `403` — Not an interactive session with the account's own key

---

[API](https://skmtc.net/tradeparadex/apis/paradex-rest-api-2.md) · [All operations](https://skmtc.net/tradeparadex/apis/paradex-rest-api-2/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/tradeparadex/paradex-rest-api-2/revisions/e8fca3e578c7/schema)