Skip to main content
POST
Refresh the tokens
Use each refresh token once. Reusing one revokes every token from that sign-in. The session expires seven days after sign-in, even if you refresh it.

Request

Builder key and refresh token

Response

Error codes

Match the HTTP status and response text to a row below. For guidance on codes shared across endpoints, see Error meanings and recovery.

Authorizations

x-builder-api-key
string
header
required

Your approved builder API key. Keep it on your backend. Gacha and marketplace writes also require wallet action signatures. Redeem also needs a wallet access token, a Bearer token the API issues after the wallet signs a sign-in message.

Body

application/json
refreshToken
string
required
Required string length: 1 - 128

Response

Success

tokenType
enum<string>
required
Available options:
Bearer
accessToken
string
required
refreshToken
string
required
expiresAt
string<date-time>
required
refreshExpiresAt
string<date-time>
required
scopes
string[]
required