Skip to main content

Create exchange token

POST 
/token-exchange

Creates a short-lived (60 s) HMAC-SHA256-signed token. The Base64URL-encoded payload contains: userId, merchantId, accountSlug, iat (issued-at ms), exp (expiry ms), and nonce. Consuming applications that share the signing secret can verify the signature and trust the payload contents.

Request​

Responses​