Create an Auth Token | Vercel REST API

APIs & SDKs

Create an Auth Token

POSThttps://api.vercel.com/v3/user/tokens

Creates and returns a new authentication token for the currently authenticated User. The bearerToken property is only provided once, in the response body, so be sure to save it on the client for use with API requests.

https://api.vercel.com/v3/user/tokens

const response = await fetch('https://api.vercel.com/v3/user/tokens?teamId=string&slug=string', {
  method: 'POST',
  headers: {
    'Authorization': 'Bearer YOUR_ACCESS_TOKEN',
    'Content-Type': 'application/json',
  },
  body: JSON.stringify({
    "name": "Example Name",
    "expiresAt": "123",
    "projectId": "example_id"
  }),
});

const data = await response.json();
console.log(data);

Response

{
  "bearerToken": "uRKJSTt0L4RaSkiMj41QTkxM",
  "token": {
    "activeAt": "1632816536002",
    "createdAt": "1632816536002",
    "expiresAt": "1632816536002",
    "id": "5d9f2ebd38ddca62e5d51e9c1704c72530bdc8bfdd41e782a6687c48399e8391",
    "leakedAt": "1632816536002",
    "leakedUrl": "https://example.com",
    "name": "Example Name",
    "origin": "github",
    "prefix": "vcp_",
    "revokedAt": "1632816536002",
    "scopes": [
      {
        "createdAt": "123",
        "expiresAt": "123",
        "origin": "app",
        "sudo": {
          "expiresAt": "123",
          "origin": "email-otp",
          "verifiedAt": "123"
        },
        "type": "user"
      }
    ],
    "suffix": "abc123",
    "type": "oauth2-token"
  }
}

Authentication

AuthorizationbearerToken

Default authentication mechanism

Query parameters

teamIdstringOptional

The Team identifier to perform the request on behalf of.

slugstringOptional

The Team slug to perform the request on behalf of.

Body

application/json

namestringRequired

expiresAtnumberOptional

projectIdstringOptional

The ID of the project to scope this token to

Response

200Successful response.

bearerTokenstringRequired

The authentication token's actual value. This token is only provided in this response, and can never be retrieved again in the future. Be sure to save it somewhere safe!

tokenobjectRequired

Authentication token metadata.

Errors

400One of the provided values in the request body is invalid.

401The request is not authorized.

403You do not have permission to access this resource.

404Error

410Error

Cross-link map: Create an Auth Token (/docs/rest-api/authentication/create-an-auth-token)

From the Vercel docs graph (built 2026-10-09T15:41:22.984Z), spanning vercel.com docs + KB, nextjs.org, ai-sdk.dev, and other Vercel documentation sites. Full graph as JSON: https://vercel.com/docs/graph.json

Semantically closest pages

List Auth Tokens — GET /v6/user/tokens — Retrieve a list of the current User's authentication tokens.
Get Auth Token Metadata — GET /v5/user/tokens/{tokenId} — Retrieve metadata about an authentication token belonging to the currently authenticated
Delete an authentication token — DELETE /v3/user/tokens/{tokenId} — Invalidate an authentication token, such that it will no longer be valid for future H
Get a Connect token — POST /v1/connect/token/{connector} — Get an access token for a connector identified by the path parameter and scoped to
Authentication — Endpoints in the authentication group of the Vercel REST API Reference.

This page links to (1)

Vercel REST API Reference — Interact programmatically with your Vercel account using the SDK or direct HTTP requests.

Pages that link here (5)

By site: vercel-kb (2) · vercel-docs (3)

From vercel-kb

How do I use a Vercel API Access Token? — Create a Vercel API access token, scope it to your account, a team, or a project, and use it to authenticate Vercel REST
How to build a honeypot with Vercel Web Application Firewall — Learn how to build a honeypot with Vercel Web Application Firewall \(WAF\) that catches bots ignoring your robots.txt. C

From vercel-docs

Access tokens — Create and scope Vercel access tokens to your full account, a team, or a single project, then use them to authenticate A
Vercel REST API Reference — Interact programmatically with your Vercel account using the SDK or direct HTTP requests.
Authentication — Endpoints in the authentication group of the Vercel REST API Reference.

https://api.vercel.com/v3/user/tokens

const response = await fetch('https://api.vercel.com/v3/user/tokens?teamId=string&slug=string', {
  method: 'POST',
  headers: {
    'Authorization': 'Bearer YOUR_ACCESS_TOKEN',
    'Content-Type': 'application/json',
  },
  body: JSON.stringify({
    "name": "Example Name",
    "expiresAt": "123",
    "projectId": "example_id"
  }),
});

const data = await response.json();
console.log(data);

Response

{
  "bearerToken": "uRKJSTt0L4RaSkiMj41QTkxM",
  "token": {
    "activeAt": "1632816536002",
    "createdAt": "1632816536002",
    "expiresAt": "1632816536002",
    "id": "5d9f2ebd38ddca62e5d51e9c1704c72530bdc8bfdd41e782a6687c48399e8391",
    "leakedAt": "1632816536002",
    "leakedUrl": "https://example.com",
    "name": "Example Name",
    "origin": "github",
    "prefix": "vcp_",
    "revokedAt": "1632816536002",
    "scopes": [
      {
        "createdAt": "123",
        "expiresAt": "123",
        "origin": "app",
        "sudo": {
          "expiresAt": "123",
          "origin": "email-otp",
          "verifiedAt": "123"
        },
        "type": "user"
      }
    ],
    "suffix": "abc123",
    "type": "oauth2-token"
  }
}

OpenAPI Specification