---
title: "mint a frontend SDK token for the raw app editor's preview"
method: POST
path: "/w/{workspace}/apps/preview_sdk_token"
tags: ["app"]
---

# mint a frontend SDK token for the raw app editor's preview

`POST /w/{workspace}/apps/preview_sdk_token`

## Path parameters

- `workspace` string, required

## Request body

- object
  - `path` string, required — App being edited; may not be deployed yet.
  - `scopes` string[], required — Scopes from the policy being edited. Capped by the curated allowlist and by the caller's own scopes, and minted as the caller, so it grants nothing they could not mint themselves.

## Response `200`

the token

---

[API](https://skmtc.net/windmill/apis/windmill-api.md) · [All operations](https://skmtc.net/windmill/apis/windmill-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/windmill/windmill-api/versions/155a35b3caff/schema)