AppAIGatewayDocs
API referenceApplication authentication

Exchange a client proof for a gateway token

POST
/v1/apps/{app}/auth/token

App Attest clients send key_id, assertion, and challenge; the assertion is verified here whatever the application's verify_on, and the answer's verify_on says whether requests sent with the token must also carry X-AppAttest-Proof. Issuer-backed API-key clients send api_key and issuer_token. The verified issuer claim is always the resulting user identity.

Path Parameters

app*string

Request Body

application/json

TypeScript Definitions

Use the request body type in TypeScript.

Response Body

application/json

application/json

application/json

application/json

application/json

application/json

application/json

application/json

curl -X POST "https://example.com/v1/apps/string/auth/token" \  -H "Content-Type: application/json" \  -d '{    "key_id": "string",    "assertion": "string",    "challenge": "string"  }'
{  "access_token": "string",  "expires_in": 0,  "verify_on": "every_request"}

Register an App Attest key

Register an App Attest key (POST /v1/apps/{app}/auth/register) in the App AI Gateway API.

Get the current user's limits, spend and block state

Get the current user's limits, spend and block state (GET /v1/apps/{app}/me) in the App AI Gateway API. Accepts a gateway token or an app API key.