---
title: "create token"
method: POST
path: "/users/tokens/create"
tags: ["user"]
---

# create token

`POST /users/tokens/create`

## Request body

- NewToken
  - `label` string
  - `expiration` string, date-time
  - `scopes` string[]
  - `workspace_id` string
  - `read_only` boolean — If true, the token is restricted to read-only HTTP methods (GET/HEAD/OPTIONS). Mutating endpoints and job-run actions are rejected with 403, regardless of the scopes attached.

## Response `201`

token created

---

[API](https://skmtc.net/windmill/apis/windmill-api.md) · [All operations](https://skmtc.net/windmill/apis/windmill-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/windmill/windmill-api/revisions/964225251155/schema)