Issue a personal access token

Issues a new personal access token for the v2 API. The raw value (prefixed sst_pat_) is returned exactly once in the token field - store it in a secrets manager; it cannot be retrieved again, only revoked.

Base URL https://api.sendstreak.com. All v2 endpoints require a bearer token - see Authentication.

Request body

Response

The created token, including the one-time raw value.

Errors

See Errors and rate limits for what error responses look like.

curl --location --request POST 'https://api.sendstreak.com/v2/users/me/tokens' \
--header 'Authorization: Bearer YOUR_API_TOKEN' \
--header 'Content-Type: application/json' \
--data-raw '{
  "name": "Example name",
  "expiresInDays": 30
}'

const res = await fetch('https://api.sendstreak.com/v2/users/me/tokens', {
  method: 'POST',
  headers: {
    Authorization: `Bearer ${process.env.SENDSTREAK_TOKEN}`,
    'Content-Type': 'application/json'
  },
  body: JSON.stringify({
    "name": "Example name",
    "expiresInDays": 30
  })
});

import os, requests

res = requests.post(
    'https://api.sendstreak.com/v2/users/me/tokens',
    headers={'Authorization': f"Bearer {os.environ['SENDSTREAK_TOKEN']}"},
    json={
        "name": "Example name",
        "expiresInDays": 30
    },
)

{
  "_id": "665f0a2b1c9d440012ab34cd",
  "name": "Example name",
  "createDate": "2026-07-07T09:30:00.000Z",
  "expiresAt": "2026-07-07T09:30:00.000Z",
  "lastUsedAt": "2026-07-07T09:30:00.000Z",
  "token": "sst_pat_9f8e7d6c5b4a39281706f5e4d3c2b1a0"
}