Generate a client access token

Generates a temporary JWT access token used to initialize zerohash SDK modules on behalf of one of your end users. The platform authenticates to this endpoint with its own HMAC credentials; the returned JWT is then handed to the end-user client.

Identifying the end user:

  • The Onboarding SDK accepts email to start a fresh onboarding, or participant_code to resume an existing user from where they dropped off. For a retry, send email and participant_code together — zerohash resolves the existing participant and the SDK comes up pre-filled (it is not participant_code alone).
  • All other SDK experiences require participant_code (the user already exists).

Choosing a variant: the request body is an anyOf — pick the variant matching the SDK experience you are launching, set permissions accordingly, and include only that variant’s fields.

💡 Use the schema dropdown / per-variant examples on the request body below to load a ready-made payload for each experience.

Recent Requests
Log in to see full request history
TimeStatusUser Agent
Retrieving recent requests…
LoadingLoading…
Body Params

Client auth token parameters. Select the schema variant that matches the SDK experience being requested; each variant lists the fields that variant accepts.

Headers
string
required

HMAC-SHA256 signature of the request, base64-encoded. See the Authentication guide for the exact signing formula.

string
required

Current Unix timestamp in seconds. Must be within 60 seconds of server time or the request is rejected.

Responses

Language
Credentials
LoadingLoading…
Response
Click Try It! to start a request and see the response here! Or choose an example:
application/json