docs-http-identity · Agent Skills

2 min read

Version: 2.0.0

On this page

The HTTP endpoints in /v1/identity allow clients to generate and manage Spacetime public identities and private tokens.

At a glance

Route	Description
`POST /v1/identity`	Generate a new identity and token.
`POST /v1/identity/websocket-token`	Generate a short-lived access token for use in untrusted contexts.
`GET /v1/identity/public-key`	Get the public key used for verifying tokens.
`GET /v1/identity/:identity/databases`	List databases owned by an identity.
`GET /v1/identity/:identity/verify`	Verify an identity and token.

Create a new identity.

Returns JSON in the form:

{
    "identity": string,
    "token": string
}

Generate a short-lived access token which can be used in untrusted contexts, e.g. embedded in URLs.

Name	Value
`Authorization`	A Spacetime token encoded as Bearer authorization.

Returns JSON in the form:

{
    "token": string
}

The token value is a short-lived JSON Web Token.

Fetches the public key used by the database to verify tokens.

Returns a response of content-type application/pem-certificate-chain.

List all databases owned by an identity.

Name	Value
`:identity`	A Spacetime identity.

Returns JSON in the form:

{
    "identities": array<string>
}

The identities value is an array of zero or more strings, each of which is the identity of a database owned by the identity passed as a parameter.

Verify the validity of an identity/token pair.

Name	Value
`:identity`	The identity to verify.

Name	Value
`Authorization`	A Spacetime token encoded as Bearer authorization.

Returns no data.

If the token is valid and matches the identity, returns 204 No Content.

If the token is valid but does not match the identity, returns 400 Bad Request.

If the token is invalid, or no Authorization header is included in the request, returns 401 Unauthorized.

Last updated Oct 08, 2026