> ## Documentation Index
> Fetch the complete documentation index at: https://docs.qumo-deploy.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Create an Identity Token

> The raw token value is returned only in this response.



## OpenAPI

````yaml /api-reference/openapi.yaml post /v1/projects/{project_id}/identities/{identity_id}/tokens
openapi: 3.1.0
info:
  title: Qumo Deploy REST API
  description: >
    The Qumo Deploy REST API provides programmatic control over edge relay
    clusters,

    ephemeral Relay Credential issuance, tenant lifecycle, machine identities,
    and billing.

    Authentication is operation-specific: Relay Keys authenticate relay access
    operations,

    while user sessions and Identity Tokens authenticate control-plane
    operations.
  version: 1.0.0
servers:
  - url: https://api.qumo-deploy.com
    description: Production Control Plane
  - url: http://localhost:8080
    description: Local Development / Sandbox
security:
  - BearerAuth: []
paths:
  /v1/projects/{project_id}/identities/{identity_id}/tokens:
    post:
      summary: Create an Identity Token
      description: The raw token value is returned only in this response.
      parameters:
        - in: path
          name: project_id
          required: true
          schema:
            type: string
        - in: path
          name: identity_id
          required: true
          schema:
            type: string
      requestBody:
        required: true
        content:
          application/json:
            schema:
              type: object
              required:
                - scopes
              properties:
                scopes:
                  type: array
                  items:
                    type: string
                expires_at:
                  type: string
                  format: date-time
                  nullable: true
      responses:
        '201':
          description: Created Identity Token
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/IdentityToken'
      security:
        - BearerAuth: []
components:
  schemas:
    IdentityToken:
      type: object
      required:
        - id
        - created_at
        - scopes
      properties:
        id:
          type: string
        value:
          type: string
          description: Returned only once when the token is created.
        created_at:
          type: string
          format: date-time
        expires_at:
          type: string
          format: date-time
          nullable: true
        scopes:
          type: array
          items:
            type: string
  securitySchemes:
    BearerAuth:
      type: http
      scheme: bearer
      bearerFormat: SessionOrIdentityToken
      description: |
        User session or Identity Token. Relay Keys are not accepted.

````