Skip to main content
POST
Mint a Tap-on-Phone access token

Authorizations

x-api-key
string
header
required

Company API key for authentication

Body

application/json
company_id
string<uuid>

Optional: an organization may mint a token for one of its own merchants by naming it here; omitted, the token is minted for the authenticated company itself. A company outside your scope answers 404.

Response

The minted access token

access_token
string
required

Pass this to the Tap-on-Phone SDK at initialization.

token_type
enum<string>
required
Available options:
Bearer
expires_in
integer
required

Seconds until the token expires.

Example:

900

expires_at
string<date-time>
required
scope
string
required

The Tap-on-Phone permissions the token carries.

Example:

"tap_on_phone.bootstrap tap_on_phone.config"