Redeem Install Token

Exchange a one-time install token for daemon credentials.

Called by the install script. Token is in the body (not the URL) to avoid exposure in access logs, CDN logs, and browser history.

POST /daemon/redeem-install-token

Redeem Install Token

cURL

curl --request POST \
  --url https://api.hyperspell.com/daemon/redeem-install-token \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --header 'X-As-User: <api-key>' \
  --data '
{
  "install_token": "<string>"
}
'

200

{
  "token": "<string>",
  "app_slug": "<string>",
  "api_url": "<string>",
  "user_key": "<string>",
  "email": "<string>"
}

Authorizations

Authorization · string · header · required

API Key or JWT User Token. If using an API Key, set the X-As-User header to act as a specific user. A JWT User Token is always scoped to a specific user.

X-As-User · string · header · required

Optionally set this header to act as a specific user when using an API Key, equivalent to first exchanging the API Key for a User Token

Body

application/json

install_token · string · required

Response

200

application/json

Successful Response

token · string · required

app_slug · string · required

api_url · string · required

user_key · string · required

email · string · required