Skip to main content
POST
Get a wallet access token and a refresh token
Send the challengeId, the original message and the wallet signature. The access token lasts 15 minutes. Use the single-use refresh token to renew the session within seven days of sign-in. Keep both tokens out of logs.

Request

Builder key and wallet signature

Response

Error codes

Match the HTTP status and response text to a row below. For guidance on codes shared across endpoints, see Error meanings and recovery.

Authorizations

x-builder-api-key
string
header
required

Your approved builder API key. Keep it on your backend. Gacha and marketplace writes also require wallet action signatures. Redeem also needs a wallet access token, a Bearer token the API issues after the wallet signs a sign-in message.

Body

application/json
challengeId
string<uuid>
required
message
string
required
Required string length: 1 - 8192
signature
string
required
Maximum string length: 132

Response

Success

tokenType
enum<string>
required
Available options:
Bearer
accessToken
string
required
refreshToken
string
required
expiresAt
string<date-time>
required
refreshExpiresAt
string<date-time>
required
scopes
string[]
required