Skip to main content
POST
Mint a signed ad identity for a signed-in fan

Authorizations

Authorization
string
header
required

Organization API key (org_...) sent as Authorization: Bearer <key>. Keys are scoped to one organization; every request operates within that tenant.

Body

application/json
member_external_id
string
Required string length: 1 - 1024
user_id
string<uuid>
Pattern: ^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$

Response

The token and its expiry

identity_token
string
required

Opaque. Pass it unchanged as identity_token on GET /v1/ads/serve; it cannot be read or edited.

expires_at
string<date-time>
required

One hour after minting. Mint a new one before then.