Create a personal access token
trade/v1/auth/tokensAuthorization
AuthorizationRequiredBearer <token>
Privy identity token from a live browser session. Issued by the web app's Privy SDK; not obtainable via API. Used by operations that require a fresh browser session.
In: header
Request Body
application/jsonRequiredexchangeRequiredstring
Exchange the token's wallet is bound to.
"AGARA"expires_atstring | null
Optional expiry, RFC 3339. Must be in the future; omit for a token that never expires.
"date-time"labelRequiredstring
User-supplied label, 1 to 100 characters. Shown on the token list so you can tell your tokens apart.
scopesRequiredarray<string>
Scopes to grant, at least one. Every name must be one of
portfolio:read, orders:read, orders:place, orders:place_signed,
orders:cancel, orders:cancel_all, positions:split,
positions:merge, batches:submit, account:stream, or
faucet:bulk_fund. batches:submit is only issuable for an AGARA
wallet, and duplicates are rejected. See
Authentication for what each one covers.
Token created. token is the plaintext bearer; shown exactly once.