Skip to main content
POST
cURL

Authorizations

Authorization
string
header
required

A logged-in user session bearer token (WorkOS AuthKit access token from signup/login).

Body

application/json
label
string

Human-readable label for the token. Defaults to Untitled if omitted or empty.

Response

Token created. The raw plain token is returned only in this response.

Returned only at MCP token creation time. The plain field is the raw plaintext token — show it to the user once and never persist it.

token
object

An MCP (Model Context Protocol) authentication token bound to a user and family.

plain
string

Raw plaintext token (prefix phomcp_). Shown once; never stored server-side.