Skip to main content
POST
Create a mobile token

Body

application/json
code
string

Hack Club OAuth authorization code (exchanged server-side).

redirect_uri
string

Redirect URI used in the OAuth code exchange.

code_verifier
string

PKCE code verifier, if PKCE was used.

session_token
string

Signed session token (used when code is absent).

device_name
string

Human-readable device label, stored on the token.

Response

Token issued.

token
string
Example:

"mt_live_abc123"

expires_at
string<date-time>
user
object