Skip to main content
POST
Mint an action token

Authorizations

Authorization
string
header
required

OAuth 2.1 authorization code + PKCE (S256). Tokens are tenant-bound (company_id) and scoped. Discover endpoints via /.well-known/oauth-authorization-server.

Body

application/json

Mint a short-lived load-more action token. The token tenant (companyId) is injected from the OAuth grant; never sent by the client. Additional fields are accepted but ignored (legacy-permissive passthrough).

page
integer
required

Page index the token will authorize (must be a number; the use-case rejects non-numeric values with 400 'Missing required parameters').

batchSize
integer
required

Batch size the token will authorize. Clamped to a maximum of 50 server-side.

jobId
string | null

Optional job id the token is bound to.

Response

The minted load-more action token and its lifetime.

data
object
required

A signed, short-lived load-more action token bound to a per-session cookie.