Exchange auth intent for JWT
Exchange a settled auth intent for a JWT access token.
Use Idempotency-Key on every production call. Without one, a dropped
response can consume the auth intent and force the merchant to create a
replacement challenge.
Authentication
AuthorizationBearer
Merchant API key (`sk_m_*`).
```
Authorization: Bearer sk_m_abc123def456...
```
Path parameters
auth_intent_id
Auth intent ID from create response
Headers
Idempotency-Key
Client-generated UUID v4 for safe retries. Requests with the same key return the original response.
Response headers
X-Request-Id
Unique request identifier for debugging and support
Response
Token issued
access_token
RS256-signed JWT.
token_type
Allowed values:
expires_in
principal
session
account
Errors
401
Unauthorized Error
402
Payment Required Error
403
Forbidden Error
404
Not Found Error
409
Conflict Error
429
Too Many Requests Error