Creates a new scoped API token for the authenticated partner. Requires Privy authentication (Bearer token). The token secret is returned once at creation — store it securely. Requested scopes must be a subset of the partner’s allowed scopes.
Requires Privy authentication. Pass the token field from the Privy authenticate response (the identity token) in the identity header as Bearer <token>. Do not use privy_access_token. HMAC and API key auth are not accepted for this endpoint.
The secret field is returned once at creation time. Store it securely — it cannot be retrieved again.
Place and cancel orders. Default scope. Required for delegated_signing.
account_creation
Create sub-account profiles under your partner account.
delegated_signing
Server signs orders on behalf of sub-accounts via Privy server wallet. Requires trading.
withdrawal
Withdraw ERC20 funds from a managed server wallet via POST /portfolio/withdraw. Partner-only (must be in your allowedScopes).
If scopes is omitted from the request body, the token is created with ["trading"] only.Requested scopes must be a subset of your partner’s allowedScopes (see Get Partner Capabilities).
After deriving a token, authenticate subsequent requests using HMAC signing with the returned apiKey (token ID) and secret. See HMAC Request Signing for the signing protocol.
Scoped API token with HMAC-SHA256 signing. Requires three headers: lmts-api-key (token ID), lmts-timestamp (ISO-8601), lmts-signature (Base64-encoded HMAC). See Authentication docs for details.
{"docsConfig":{"theme":"mint","$schema":"https://mintlify.com/docs.json","name":"Limitless Exchange","colors":{"primary":"#9AB83A","light":"#DCF58C","dark":"#7A9A1E"},"logo":{"light":"https://mintcdn.com/limitless/r7gW3TwphUtCZ8zM/logo/light.svg?fit=max\u0026auto=format\u0026n=r7gW3TwphUtCZ8zM\u0026q=85\u0026s=0d6f32ed5e8a1f35ba9d1fa2e0b57a4b","dark":"https://mintcdn.com/limitless/r7gW3TwphUtCZ8zM/logo/dark.svg?fit=max\u0026auto=format\u0026n=r7gW3TwphUtCZ8zM\u0026q=85\u0026s=6500e01609e582f758db1a9610b63bd8"},"favicon":"https://mintcdn.com/limitless/r7gW3TwphUtCZ8zM/favicon.svg?fit=max\u0026auto=format\u0026n=r7gW3TwphUtCZ8zM\u0026q=85\u0026s=345f02206803d94b3b1911d2a80bf9c3","api":{"playground":{}},"navbar":{"links":[{"href":"mailto:help@limitless.network","label":"Support"}]},"footer":{"socials":{"x":"https://x.com/trylimitless","discord":"https://discord.com/invite/yb4SscD8RZ"}},"seo":{"metatags":{"twitter:card":"summary_large_image"}},"contextual":{"options":["copy","view","chatgpt","claude","cursor"],"display":"header"},"styling":{"latex":true},"navigation":{"global":{"anchors":[{"anchor":"Limitless Exchange","icon":"arrow-up-right-from-square","href":"https://limitless.exchange"},{"anchor":"Builders Chat","icon":"telegram","href":"https://t.me/LimitlessBuildersChat"},{"anchor":"Discord","icon":"discord","href":"https://discord.com/invite/yb4SscD8RZ"},{"anchor":"Twitter","icon":"x-twitter","href":"https://x.com/trylimitless"}]},"pages":[]}},"deployment":{"deploymentMetadataValue":{"subdomain":"limitless","hasAudioNarration":false,"actualSubdomain":"limitless","customDomains":["docs.limitless.exchange"],"gitSource":{"type":"github","owner":"limitless-labs-group","repo":"limitless-docs","deployBranch":"main","contentDirectory":"","isPrivate":true,"mountPath":"","label":""},"entitlements":{"AI_CHAT":{"status":"DISABLED"},"WEB_MCP":{"status":"DISABLED"},"NARRATION":{"status":"DISABLED"}},"buildId":"6ae2027fd6a250fd1db9a4f3","clientVersion":"0.0.4124","searchFilterCounts":[{"language":"default","tag":"API Reference","count":81},{"language":"default","tag":"For Developers","count":67},{"language":"default","tag":"User Guide","count":26},{"language":"default","tag":"Portfolio","count":14},{"language":"default","tag":"Trading","count":14},{"language":"default","tag":"Getting Started","count":14},{"language":"default","tag":"Go SDK","count":11},{"language":"default","tag":"Python SDK","count":11},{"language":"default","tag":"Rust SDK","count":11},{"language":"default","tag":"TypeScript SDK","count":11}]},"assistantConfig":{"enableAskAiButton":false,"enableStarterQuestions":false,"enableAskAiSearchBar":true},"basePath":"","hasChatPermissions":false,"hasWebMcpPermissions":false,"toggles":[{"name":"kill-isr","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"custom-rbac-roles","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"agent-mintlify-slack","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"agent-integrations-settings","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"rbac-expansion","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automations-pr-grouping","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"custom-prefix","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"analytics-v7","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"user-flows-analytics","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"no-publish-flow","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-onboarding","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"snapshot-serving-live","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"stripTemperatureMiddleware","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"support-platform-pylon-zendesk","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"snapshot-serving","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"instant-rollback","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"granular-notifications-server","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"granular-notifications","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automations-fable","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"fixed-ai-action-pricing","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automation-resolve-merge-conflict","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"scoped-publishing","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"mintql","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"page-level-analytics","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"editor-version-history-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"billing-page-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"full-page-search","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workspace-projects","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"assistant-v5","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"fork-pr-previews","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"revalidation-jwt","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-sso-scim","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"hobby-abuse-scan","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"dashboard-inbox","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-signup","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"turbopuffer-dual-write","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-enabled","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"approve-review-flow","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"editor-metadata","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"sso-setup-deadline-banner","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"turbopuffer-serve","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"live-agents","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"llms-txt-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false}],"googleFontsInlined":false},"customCss":[],"page":{"pagePath":"api-reference/api-tokens/derive-token","slug":"/api-reference/api-tokens/derive-token","pageMetadata":{"title":"Derive Scoped Token","openapi":"POST /auth/api-tokens/derive","description":"Creates a new scoped API token for the authenticated partner. Requires Privy authentication (Bearer token). The token secret is returned once at creation — store it securely. Requested scopes must be a subset of the partner's allowed scopes.","href":"/api-reference/api-tokens/derive-token"},"description":{"compiledSource":"\"use strict\";\nconst {jsx: _jsx} = arguments[0];\nconst {useMDXComponents: _provideComponents} = arguments[0];\nfunction _createMdxContent(props) {\n const _components = {\n p: \"p\",\n ..._provideComponents(),\n ...props.components\n };\n return _jsx(_components.p, {\n children: \"Creates a new scoped API token for the authenticated partner. Requires Privy authentication (Bearer token). The token secret is returned once at creation — store it securely. Requested scopes must be a subset of the partner’s allowed scopes.\"\n });\n}\nfunction MDXContent(props = {}) {\n const {wrapper: MDXLayout} = {\n ..._provideComponents(),\n ...props.components\n };\n return MDXLayout ? _jsx(MDXLayout, {\n ...props,\n children: _jsx(_createMdxContent, {\n ...props\n })\n }) : _createMdxContent(props);\n}\nreturn {\n default: MDXContent\n};\n","frontmatter":{},"scope":{}},"pageType":"default","mdx":{"mdxSource":{"compiledSource":"\"use strict\";const{Fragment:_Fragment,jsx:_jsx,jsxs:_jsxs}=arguments[0];const{useMDXComponents:_provideComponents}=arguments[0];function _createMdxContent(props){const _components={a:`a`,code:`code`,p:`p`,strong:`strong`,tbody:`tbody`,td:`td`,th:`th`,thead:`thead`,tr:`tr`,..._provideComponents(),...props.components},{Heading,Info,Table,Warning}=_components;if(!Heading)_missingMdxReference(`Heading`,true);if(!Info)_missingMdxReference(`Info`,true);if(!Table)_missingMdxReference(`Table`,true);if(!Warning)_missingMdxReference(`Warning`,true);return _jsxs(_Fragment,{children:[_jsx(Info,{children:_jsxs(_components.p,{children:[`Requires `,_jsx(_components.strong,{children:`Privy authentication`}),`. Pass the `,_jsx(_components.code,{children:`token`}),` field from the Privy authenticate response (the identity token) in the `,_jsx(_components.code,{children:`identity`}),` header as `,_jsx(_components.code,{children:`Bearer \u003ctoken>`}),`. Do `,_jsx(_components.strong,{children:`not`}),` use `,_jsx(_components.code,{children:`privy_access_token`}),`. HMAC and API key auth are not accepted for this endpoint.`]})}),`\n`,_jsx(Warning,{children:_jsxs(_components.p,{children:[`The `,_jsx(_components.code,{children:`secret`}),` field is returned `,_jsx(_components.strong,{children:`once`}),` at creation time. Store it securely — it cannot be retrieved again.`]})}),`\n`,_jsx(Heading,{level:`3`,id:`scopes`,children:`Scopes`}),`\n`,_jsxs(Table,{children:[_jsx(_components.thead,{children:_jsxs(_components.tr,{children:[_jsx(_components.th,{children:`Scope`}),_jsx(_components.th,{children:`Description`})]})}),_jsxs(_components.tbody,{children:[_jsxs(_components.tr,{children:[_jsx(_components.td,{children:_jsx(_components.code,{children:`trading`})}),_jsxs(_components.td,{children:[`Place and cancel orders. Default scope. Required for `,_jsx(_components.code,{children:`delegated_signing`}),`.`]})]}),_jsxs(_components.tr,{children:[_jsx(_components.td,{children:_jsx(_components.code,{children:`account_creation`})}),_jsx(_components.td,{children:`Create sub-account profiles under your partner account.`})]}),_jsxs(_components.tr,{children:[_jsx(_components.td,{children:_jsx(_components.code,{children:`delegated_signing`})}),_jsxs(_components.td,{children:[`Server signs orders on behalf of sub-accounts via Privy server wallet. Requires `,_jsx(_components.code,{children:`trading`}),`.`]})]}),_jsxs(_components.tr,{children:[_jsx(_components.td,{children:_jsx(_components.code,{children:`withdrawal`})}),_jsxs(_components.td,{children:[`Withdraw ERC20 funds from a managed server wallet via `,_jsx(_components.code,{children:`POST /portfolio/withdraw`}),`. Partner-only (must be in your `,_jsx(_components.code,{children:`allowedScopes`}),`).`]})]})]})]}),`\n`,_jsxs(_components.p,{children:[`If `,_jsx(_components.code,{children:`scopes`}),` is omitted from the request body, the token is created with `,_jsx(_components.code,{children:`[\"trading\"]`}),` only.`]}),`\n`,_jsxs(_components.p,{children:[`Requested scopes must be a subset of your partner’s `,_jsx(_components.code,{children:`allowedScopes`}),` (see `,_jsx(_components.a,{href:`/api-reference/api-tokens/get-capabilities`,children:`Get Partner Capabilities`}),`).`]}),`\n`,_jsx(Heading,{level:`3`,id:`using-the-token`,children:`Using the token`}),`\n`,_jsxs(_components.p,{children:[`After deriving a token, authenticate subsequent requests using HMAC signing with the returned `,_jsx(_components.code,{children:`apiKey`}),` (token ID) and `,_jsx(_components.code,{children:`secret`}),`. See `,_jsx(_components.a,{href:`/developers/authentication#hmac-request-signing`,children:`HMAC Request Signing`}),` for the signing protocol.`]})]})}function MDXContent(props={}){const{wrapper:MDXLayout}={..._provideComponents(),...props.components};return MDXLayout?_jsx(MDXLayout,{...props,children:_jsx(_createMdxContent,{...props})}):_createMdxContent(props)}return{default:MDXContent};function _missingMdxReference(id,component){throw new Error(`Expected `+(component?`component`:`object`)+\" `\"+id+\"` to be defined: you likely forgot to import, pass, or provide it.\")}","frontmatter":{},"scope":{"config":{},"pageMetadata":{"title":"Derive Scoped Token","openapi":"POST /auth/api-tokens/derive","description":"Creates a new scoped API token for the authenticated partner. Requires Privy authentication (Bearer token). The token secret is returned once at creation — store it securely. Requested scopes must be a subset of the partner's allowed scopes.","href":"/api-reference/api-tokens/derive-token"}}},"mdxSourceWithNoJs":null},"mdxExtracts":{"tableOfContents":[{"title":"Scopes","slug":"scopes","depth":3,"children":[]},{"title":"Using the token","slug":"using-the-token","depth":3,"children":[]}],"codeExamples":{}},"jsLinks":[],"openApiReferenceData":{"operation":{"summary":"Derive scoped API token","description":"Creates a new scoped API token for the authenticated partner. Requires Privy authentication (Bearer token). The token secret is returned once at creation — store it securely. Requested scopes must be a subset of the partner's allowed scopes.","operationId":"ApiTokenController_deriveToken","parameters":[],"requestBody":"3ecbe553-cbdf-4a71-b9f1-c0152db53b58","responses":{"201":"22b8829f-10b2-403e-ba5f-1bd481dd9d3f","400":"6cb5cac8-237a-44c0-ad32-7be987c089fe","401":"93c1c8b1-4c73-437c-a4e2-8729127031d8","403":"7f9c8640-0e57-4e55-ae02-099a771cea12"},"security":["391cea3e-c812-4351-97ee-9d02aa9126a9"],"tags":["API Tokens"],"method":"post","type":"path","servers":["09c89b92-1b1b-488d-af55-0f936f286701"],"path":"/auth/api-tokens/derive","baseUrlOptions":["https://api.limitless.exchange"],"title":"Derive scoped API token","codeSamples":[],"requiredOnlyExamples":false,"requestExampleType":"generated","responseExampleType":"generated"},"dependencies":{"parameters":{},"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","properties":{"label":{"type":"string","maxLength":128,"description":"Human-readable label for the token","example":"production-trading-bot","uniqueKey":"label","typeLabel":"string"},"scopes":{"type":"array","items":{"type":"string","enum":["trading","account_creation","delegated_signing"],"uniqueKey":"scopes.items.[INDEX]","typeLabel":"enum\u003cstring>"},"description":"Scopes to grant. Defaults to [\"trading\"] if omitted. Must be a subset of the partner's allowed scopes. `delegated_signing` requires `trading`.","example":["trading","account_creation"],"uniqueKey":"scopes","typeLabel":"enum\u003cstring>[]"}},"uniqueKey":"","typeLabel":"object"},"examples":{"Example":{"title":"Example","value":{"label":"production-trading-bot","scopes":["trading","account_creation"]}}},"exampleType":"generated"}},"exampleType":"generated"},"responses":{"22b8829f-10b2-403e-ba5f-1bd481dd9d3f":{"description":"Token created successfully. The secret is only returned once.","content":{"application/json":{"schema":{"type":"object","properties":{"apiKey":{"type":"string","description":"The token ID, used as the `lmts-api-key` header value for HMAC requests","example":"dGVzdC10b2tlbi0x","isRequired":true,"uniqueKey":"apiKey","typeLabel":"string"},"secret":{"type":"string","description":"Base64-encoded secret for HMAC signing. Returned once — store securely.","example":"c2VjcmV0LWtleS1leGFtcGxlLWJhc2U2NC1lbmNvZGVk","isRequired":true,"uniqueKey":"secret","typeLabel":"string"},"tokenId":{"type":"string","description":"Same as apiKey. The unique token identifier.","example":"dGVzdC10b2tlbi0x","isRequired":true,"uniqueKey":"tokenId","typeLabel":"string"},"createdAt":{"type":"string","format":"date-time","description":"Token creation timestamp","isRequired":true,"uniqueKey":"createdAt","typeLabel":"string\u003cdate-time>"},"scopes":{"type":"array","items":{"type":"string","uniqueKey":"scopes.items.[INDEX]","typeLabel":"string"},"description":"Granted scopes","example":["trading","account_creation"],"isRequired":true,"uniqueKey":"scopes","typeLabel":"string[]"},"profile":{"type":"object","properties":{"id":{"type":"integer","description":"Partner profile ID","example":42,"uniqueKey":"profile.id","typeLabel":"integer"},"account":{"type":"string","description":"Partner wallet address","example":"0x27b4afBD88fE7c88c6897BB0b4ADE338D0401E37","uniqueKey":"profile.account","typeLabel":"string"}},"isRequired":true,"uniqueKey":"profile","typeLabel":"object"}},"required":["apiKey","secret","tokenId","createdAt","scopes","profile"],"uniqueKey":"","typeLabel":"object"},"examples":{"Example":{"title":"Example","value":{"apiKey":"dGVzdC10b2tlbi0x","secret":"c2VjcmV0LWtleS1leGFtcGxlLWJhc2U2NC1lbmNvZGVk","tokenId":"dGVzdC10b2tlbi0x","createdAt":"2023-11-07T05:31:56Z","scopes":["trading","account_creation"],"profile":{"id":42,"account":"0x27b4afBD88fE7c88c6897BB0b4ADE338D0401E37"}}}},"exampleType":"generated"}},"exampleType":"generated"},"6cb5cac8-237a-44c0-ad32-7be987c089fe":{"description":"Invalid scopes or profile not found","content":{"_mintlify/placeholder":{"schema":{"type":"object","description":""}}}},"93c1c8b1-4c73-437c-a4e2-8729127031d8":{"description":"Requires Privy authentication","content":{"_mintlify/placeholder":{"schema":{"type":"object","description":""}}}},"7f9c8640-0e57-4e55-ae02-099a771cea12":{"description":"Token management not enabled or requested scopes not allowed for this partner","content":{"_mintlify/placeholder":{"schema":{"type":"object","description":""}}}}},"security":{"391cea3e-c812-4351-97ee-9d02aa9126a9":{"HmacAuth":{"type":"apiKey","in":"header","name":"lmts-api-key","description":"Scoped API token with HMAC-SHA256 signing. Requires three headers: lmts-api-key (token ID), lmts-timestamp (ISO-8601), lmts-signature (Base64-encoded HMAC). See Authentication docs for details.","scopes":[],"schemeName":"HmacAuth"}}},"servers":{"09c89b92-1b1b-488d-af55-0f936f286701":{"url":"https://api.limitless.exchange","description":"Production API"}},"processedSecurityOptions":[{"schemes":[{"scheme":{"type":"apiKey","in":"header","name":"lmts-api-key","description":"Scoped API token with HMAC-SHA256 signing. Requires three headers: lmts-api-key (token ID), lmts-timestamp (ISO-8601), lmts-signature (Base64-encoded HMAC). See Authentication docs for details.","scopes":[],"schemeName":"HmacAuth"},"schema":{"title":"lmts-api-key","type":"string","description":"Scoped API token with HMAC-SHA256 signing. Requires three headers: lmts-api-key (token ID), lmts-timestamp (ISO-8601), lmts-signature (Base64-encoded HMAC). See Authentication docs for details.","isRequired":true,"typeLabel":"string","deprecated":false},"schemeName":"HmacAuth","name":"lmts-api-key"}],"title":"HmacAuth"}]},"originalFileLocation":"openapi.json"},"subdomain":"limitless","siteName":"Limitless Exchange","title":"Derive Scoped Token - Limitless Exchange","navMaps":{"firstHrefInVersion":{},"firstHrefInLanguage":{}},"lastModified":"2026-10-01T09:55:56.806Z","originalFileLocation":"api-reference/api-tokens/derive-token.mdx"},"headHtml":"\u003cscript data-mint-head>(function(){var d=document.documentElement,p=null;if(!p){try{p=localStorage.getItem(\"isDarkMode\")}catch(e){}if(p==='true')p='dark';else if(p==='false')p='light';if(p!=='light'\u0026\u0026p!=='dark'\u0026\u0026p!=='system')p=\"system\"}var r=p==='system'?(matchMedia(\"(prefers-color-scheme: dark)\").matches?'dark':'light'):p;d.classList.remove(r==='dark'?'light':'dark');d.classList.add(r);d.setAttribute(\"data-theme-preference\",p)})();\u003c/script>\u003cmeta data-mint-head name=\"description\" content=\"Creates a new scoped API token for the authenticated partner. Requires Privy authentication (Bearer token). The token secret is returned once at creation — store it securely. Requested scopes must be a subset of the partner\u0026#x27;s allowed scopes.\">\u003cmeta data-mint-head name=\"application-name\" content=\"Limitless Exchange\">\u003cmeta data-mint-head name=\"generator\" content=\"Mintlify\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"192x192\" href=\"/mintlify-assets/_mintlify/favicons/limitless/eKG_O-mKVQpNZHIN/_generated/favicon/android-chrome-192x192.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"apple-touch-icon\" type=\"image/png\" sizes=\"180x180\" href=\"/mintlify-assets/_mintlify/favicons/limitless/eKG_O-mKVQpNZHIN/_generated/favicon/apple-touch-icon.png\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"16x16\" href=\"/mintlify-assets/_mintlify/favicons/limitless/eKG_O-mKVQpNZHIN/_generated/favicon/favicon-16x16.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"32x32\" href=\"/mintlify-assets/_mintlify/favicons/limitless/eKG_O-mKVQpNZHIN/_generated/favicon/favicon-32x32.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"shortcut icon\" type=\"image/x-icon\" href=\"/mintlify-assets/_mintlify/favicons/limitless/eKG_O-mKVQpNZHIN/_generated/favicon/favicon.ico\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"192x192\" href=\"/mintlify-assets/_mintlify/favicons/limitless/eKG_O-mKVQpNZHIN/_generated/favicon-dark/android-chrome-192x192.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"16x16\" href=\"/mintlify-assets/_mintlify/favicons/limitless/eKG_O-mKVQpNZHIN/_generated/favicon-dark/favicon-16x16.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"32x32\" href=\"/mintlify-assets/_mintlify/favicons/limitless/eKG_O-mKVQpNZHIN/_generated/favicon-dark/favicon-32x32.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"shortcut icon\" type=\"image/x-icon\" href=\"/mintlify-assets/_mintlify/favicons/limitless/eKG_O-mKVQpNZHIN/_generated/favicon-dark/favicon.ico\" media=\"(prefers-color-scheme: dark)\">\u003cmeta data-mint-head property=\"og:title\" content=\"Derive Scoped Token - Limitless Exchange\">\u003cmeta data-mint-head property=\"og:description\" content=\"Creates a new scoped API token for the authenticated partner. Requires Privy authentication (Bearer token). The token secret is returned once at creation — store it securely. Requested scopes must be a subset of the partner\u0026#x27;s allowed scopes.\">\u003cmeta data-mint-head property=\"og:site_name\" content=\"Limitless Exchange\">\u003cmeta data-mint-head property=\"og:url\" content=\"https://docs.limitless.exchange/api-reference/api-tokens/derive-token\">\u003cmeta data-mint-head property=\"og:type\" content=\"website\">\u003cmeta data-mint-head property=\"og:image\" content=\"https://limitless.mintlify.site/_mintlify/api/og/v2?division=API+Tokens\u0026amp;title=Derive+Scoped+Token\u0026amp;description=Creates+a+new+scoped+API+token+for+the+authenticated+partner.+Requires+Privy+authentication+%28Bearer+token%29.+The+token+secret+is+returned+once+at+creation+%E2%80%94+stor\u0026amp;theme=888cee6df57f640d9a30d0c6\u0026amp;signature=1e2efc8b830e94187cd49bfb48ffe7493f5c41f52c22ec25f614d66240fceb5a\">\u003cmeta data-mint-head property=\"og:image:width\" content=\"1200\">\u003cmeta data-mint-head property=\"og:image:height\" content=\"630\">\u003cmeta data-mint-head name=\"twitter:card\" content=\"summary_large_image\">\u003cmeta data-mint-head name=\"twitter:title\" content=\"Derive Scoped Token - Limitless Exchange\">\u003cmeta data-mint-head name=\"twitter:description\" content=\"Creates a new scoped API token for the authenticated partner. Requires Privy authentication (Bearer token). The token secret is returned once at creation — store it securely. Requested scopes must be a subset of the partner\u0026#x27;s allowed scopes.\">\u003cmeta data-mint-head name=\"twitter:image\" content=\"https://limitless.mintlify.site/_mintlify/api/og/v2?division=API+Tokens\u0026amp;title=Derive+Scoped+Token\u0026amp;description=Creates+a+new+scoped+API+token+for+the+authenticated+partner.+Requires+Privy+authentication+%28Bearer+token%29.+The+token+secret+is+returned+once+at+creation+%E2%80%94+stor\u0026amp;theme=888cee6df57f640d9a30d0c6\u0026amp;signature=1e2efc8b830e94187cd49bfb48ffe7493f5c41f52c22ec25f614d66240fceb5a\">\u003cmeta data-mint-head name=\"twitter:image:width\" content=\"1200\">\u003cmeta data-mint-head name=\"twitter:image:height\" content=\"630\">\u003cmeta data-mint-head name=\"msapplication-config\" content=\"/mintlify-assets/_mintlify/favicons/limitless/eKG_O-mKVQpNZHIN/_generated/favicon/browserconfig.xml\">\u003cmeta data-mint-head name=\"apple-mobile-web-app-title\" content=\"Limitless Exchange\">\u003cmeta data-mint-head name=\"msapplication-TileColor\" content=\"#9AB83A\">\u003clink data-mint-head rel=\"canonical\" href=\"https://docs.limitless.exchange/api-reference/api-tokens/derive-token\">\u003clink data-mint-head rel=\"alternate\" type=\"application/xml\" href=\"/sitemap.xml\">\u003clink data-mint-head rel=\"alternate\" type=\"text/markdown\" href=\"/api-reference/api-tokens/derive-token.md\">\u003cscript data-mint-head type=\"application/ld+json\">{\"@context\":\"https://schema.org\",\"@graph\":[{\"@type\":\"Organization\",\"@id\":\"https://docs.limitless.exchange/#organization\",\"name\":\"Limitless Exchange\",\"url\":\"https://docs.limitless.exchange\",\"logo\":{\"@type\":\"ImageObject\",\"url\":\"https://mintcdn.com/limitless/r7gW3TwphUtCZ8zM/logo/light.svg?fit=max\u0026auto=format\u0026n=r7gW3TwphUtCZ8zM\u0026q=85\u0026s=0d6f32ed5e8a1f35ba9d1fa2e0b57a4b\"}},{\"@type\":\"WebSite\",\"@id\":\"https://docs.limitless.exchange#website\",\"name\":\"Limitless Exchange\",\"url\":\"https://docs.limitless.exchange\",\"publisher\":{\"@id\":\"https://docs.limitless.exchange/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https://docs.limitless.exchange/api-reference/api-tokens/derive-token#webpage\",\"url\":\"https://docs.limitless.exchange/api-reference/api-tokens/derive-token\",\"name\":\"Derive Scoped Token\",\"description\":\"Creates a new scoped API token for the authenticated partner. Requires Privy authentication (Bearer token). The token secret is returned once at creation — store it securely. Requested scopes must be a subset of the partner's allowed scopes.\",\"dateModified\":\"2026-10-01T09:55:56.806Z\",\"isPartOf\":{\"@id\":\"https://docs.limitless.exchange#website\"},\"breadcrumb\":{\"@id\":\"https://docs.limitless.exchange/api-reference/api-tokens/derive-token#breadcrumb\"}},{\"@type\":\"BreadcrumbList\",\"@id\":\"https://docs.limitless.exchange/api-reference/api-tokens/derive-token#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"API Tokens\",\"item\":\"https://docs.limitless.exchange/api-reference/api-tokens/get-capabilities\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Derive Scoped Token\",\"item\":\"https://docs.limitless.exchange/api-reference/api-tokens/derive-token\"}]},{\"@type\":[\"TechArticle\",\"APIReference\"],\"@id\":\"https://docs.limitless.exchange/api-reference/api-tokens/derive-token#apireference\",\"headline\":\"Derive Scoped Token\",\"name\":\"Derive Scoped Token\",\"description\":\"Creates a new scoped API token for the authenticated partner. Requires Privy authentication (Bearer token). The token secret is returned once at creation — store it securely. Requested scopes must be a subset of the partner's allowed scopes.\",\"url\":\"https://docs.limitless.exchange/api-reference/api-tokens/derive-token\",\"mainEntityOfPage\":{\"@id\":\"https://docs.limitless.exchange/api-reference/api-tokens/derive-token#webpage\"},\"dateModified\":\"2026-10-01T09:55:56.806Z\",\"publisher\":{\"@id\":\"https://docs.limitless.exchange/#organization\"},\"isPartOf\":{\"@id\":\"https://docs.limitless.exchange#website\"}}]}\u003c/script>\u003cscript data-mint-head type=\"application/ld+json\">{\"@context\":\"https://schema.org\",\"@type\":\"WebSite\",\"name\":\"Limitless Exchange\",\"publisher\":{\"@type\":\"Organization\",\"name\":\"Limitless Exchange\"},\"provider\":{\"@type\":\"Organization\",\"name\":\"Mintlify\",\"url\":\"https://mintlify.com\"}}\u003c/script>","agentPointerHref":"/api-reference/api-tokens/derive-token.md","siteName":"Limitless Exchange","nav":{"global":{"anchors":[{"anchor":"Limitless Exchange","icon":"arrow-up-right-from-square","href":"https://limitless.exchange"},{"anchor":"Builders Chat","icon":"telegram","href":"https://t.me/LimitlessBuildersChat"},{"anchor":"Discord","icon":"discord","href":"https://discord.com/invite/yb4SscD8RZ"},{"anchor":"Twitter","icon":"x-twitter","href":"https://x.com/trylimitless"}]},"tabs":[{"tab":"User Guide","pages":[{"title":"User Guide","href":""}]},{"tab":"For Developers","pages":[{"title":"For Developers","href":"/developers/introduction"}]},{"tab":"API Reference","groups":[{"group":"Overview","pages":[{"title":"API Reference","href":"/api-reference/introduction"}]},{"group":"System","pages":[{"title":"Maintenance Status","openapi":"GET /maintenance/status","href":"/api-reference/system/maintenance-status"}]},{"group":"Authentication","pages":[{"title":"User Logout","openapi":"POST /auth/logout","href":"/api-reference/auth/logout"},{"title":"Create API Key","openapi":"POST /auth/api-keys","href":"/api-reference/auth/create-api-key"},{"title":"Get Active API Key","openapi":"GET /auth/api-keys","href":"/api-reference/auth/get-api-key"},{"title":"Revoke API Key","openapi":"DELETE /auth/api-keys","href":"/api-reference/auth/revoke-api-key"}]},{"group":"Markets","pages":[{"title":"Browse Active Markets","openapi":"GET /markets/active","href":"/api-reference/markets/browse-active"},{"title":"Browse Active Markets by Category","openapi":"GET /markets/active/{categoryId}","href":"/api-reference/markets/browse-active-category"},{"title":"Get Category Counts","openapi":"GET /markets/categories/count","href":"/api-reference/markets/category-count"},{"title":"Get Active Market Slugs","openapi":"GET /markets/active/slugs","href":"/api-reference/markets/active-slugs"},{"title":"Market Timeline","href":"/api-reference/markets/timeline"},{"title":"Get Market Details","openapi":"GET /markets/{addressOrSlug}","href":"/api-reference/markets/get-market"},{"title":"Resolve Stable Slug","openapi":"GET /markets/stable/{slug}","href":"/api-reference/markets/resolve-stable-slug"},{"title":"Get Oracle Candlesticks","openapi":"GET /markets/{addressOrSlug}/oracle-candles","href":"/api-reference/markets/oracle-candles"},{"title":"Get Feed Events","openapi":"GET /markets/{slug}/get-feed-events","href":"/api-reference/markets/feed-events"},{"title":"Search Markets","openapi":"GET /markets/search","href":"/api-reference/markets/search"}]},{"group":"Packs","pages":[{"title":"List Packs","openapi":"GET /parlay/packs","href":"/api-reference/packs/list-packs"},{"title":"Search Active Packs","openapi":"GET /parlay/packs/search","href":"/api-reference/packs/search-packs"},{"title":"Get Pack","openapi":"GET /parlay/packs/{id}","href":"/api-reference/packs/get-pack"},{"title":"Quote Partner Pack","openapi":"POST /parlay/partner/quote","href":"/api-reference/packs/quote-pack"},{"title":"Buy Partner Pack","openapi":"POST /parlay/partner/buy","href":"/api-reference/packs/buy-pack"},{"title":"List Partner Pack Positions","openapi":"GET /parlay/partner/positions","href":"/api-reference/packs/list-positions"},{"title":"Get Partner Pack Position","openapi":"GET /parlay/partner/positions/{id}","href":"/api-reference/packs/get-position"},{"title":"Claim Partner Pack","openapi":"POST /parlay/partner/positions/{id}/claim","href":"/api-reference/packs/claim-position"},{"title":"Confirm Partner Pack Claim","openapi":"POST /parlay/partner/positions/{id}/claim/confirm","href":"/api-reference/packs/confirm-claim"}]},{"group":"Trading","pages":[{"title":"Create Order","openapi":"POST /orders","href":"/api-reference/trading/create-order"},{"title":"Get Order Status (Batch)","openapi":"POST /orders/status/batch","href":"/api-reference/trading/order-status-batch"},{"title":"Cancel Order (Combined)","openapi":"POST /orders/cancel","href":"/api-reference/trading/cancel"},{"title":"Batch Cancel Orders (Combined)","openapi":"POST /orders/batch-cancel","href":"/api-reference/trading/batch-cancel"},{"title":"Cancel and Replace Order","openapi":"POST /orders/cancel-replace","href":"/api-reference/trading/cancel-replace"},{"title":"Cancel and Replace Orders (Batch)","openapi":"POST /orders/cancel-replace/batch","href":"/api-reference/trading/cancel-replace-batch"},{"title":"Cancel Order","openapi":"DELETE /orders/{orderId}","href":"/api-reference/trading/cancel-order"},{"title":"Cancel Orders (Batch)","openapi":"POST /orders/cancel-batch","href":"/api-reference/trading/cancel-batch"},{"title":"Cancel All Orders","openapi":"DELETE /orders/all/{slug}","href":"/api-reference/trading/cancel-all"},{"title":"Market Maker Heartbeat","openapi":"POST /heartbeats","href":"/api-reference/trading/heartbeats"},{"title":"Get Orderbook","openapi":"GET /markets/{slug}/orderbook","href":"/api-reference/trading/orderbook"},{"title":"Get Historical Prices","openapi":"GET /markets/{slug}/historical-price","href":"/api-reference/trading/historical-price"},{"title":"Get User Orders","openapi":"GET /markets/{slug}/user-orders","href":"/api-reference/trading/user-orders"},{"title":"Get Market Events","openapi":"GET /markets/{slug}/events","href":"/api-reference/trading/market-events"}]},{"group":"Portfolio","pages":[{"title":"Get Current Profile","openapi":"GET /profiles/me","href":"/api-reference/portfolio/get-current-profile"},{"title":"Get Your Profile","openapi":"GET /profiles/{account}","href":"/api-reference/portfolio/get-profile"},{"title":"Get Trades","openapi":"GET /portfolio/trades","href":"/api-reference/portfolio/trades"},{"title":"Get Positions","openapi":"GET /portfolio/positions","href":"/api-reference/portfolio/positions"},{"title":"Redeem Resolved Positions","href":"/api-reference/portfolio/redeem"},{"title":"Split Collateral Into Outcome Set","href":"/api-reference/portfolio/split"},{"title":"Merge Outcome Set Into Collateral","href":"/api-reference/portfolio/merge"},{"title":"Withdraw From Server Wallet","href":"/api-reference/portfolio/withdraw"},{"title":"Add Withdrawal Address","href":"/api-reference/portfolio/add-withdrawal-address"},{"title":"Delete Withdrawal Address","href":"/api-reference/portfolio/delete-withdrawal-address"},{"title":"Get PnL Chart","openapi":"GET /portfolio/pnl-chart","href":"/api-reference/portfolio/pnl-chart"},{"title":"Get History","openapi":"GET /portfolio/history","href":"/api-reference/portfolio/history"},{"title":"Get Points Breakdown","openapi":"GET /portfolio/points","href":"/api-reference/portfolio/points"},{"title":"Get Trading Allowance","openapi":"GET /portfolio/trading/allowance","href":"/api-reference/portfolio/allowance"}]},{"group":"Market Pages \u0026 Navigation","pages":[{"title":"Get Navigation Tree","openapi":"GET /navigation","href":"/api-reference/navigation/get-navigation"},{"title":"Get Market Page by Path","openapi":"GET /market-pages/by-path","href":"/api-reference/navigation/get-page-by-path"},{"title":"List Markets for a Page","openapi":"GET /market-pages/{id}/markets","href":"/api-reference/navigation/list-page-markets"},{"title":"List Property Keys","openapi":"GET /property-keys","href":"/api-reference/navigation/list-property-keys"},{"title":"Get Property Key","openapi":"GET /property-keys/{id}","href":"/api-reference/navigation/get-property-key"},{"title":"List Property Options","openapi":"GET /property-keys/{id}/options","href":"/api-reference/navigation/list-property-options"}]},{"group":"API Tokens","pages":[{"title":"Get Partner Capabilities","openapi":"GET /auth/api-tokens/capabilities","description":"Returns the partner capability configuration for the authenticated user, including whether token management is enabled and which scopes are allowed for self-service token derivation. Requires Privy authentication (Bearer token).","href":"/api-reference/api-tokens/get-capabilities"},{"title":"Derive Scoped Token","openapi":"POST /auth/api-tokens/derive","href":"/api-reference/api-tokens/derive-token"},{"title":"List Active Tokens","openapi":"GET /auth/api-tokens","description":"Lists all active (non-revoked) API tokens for the authenticated partner. Requires token management to be enabled for the partner.","href":"/api-reference/api-tokens/list-tokens"},{"title":"Revoke Token","openapi":"DELETE /auth/api-tokens/{tokenId}","href":"/api-reference/api-tokens/revoke-token"}]},{"group":"Partner Accounts","pages":[{"title":"Create Partner Sub-Account","openapi":"POST /profiles/partner-accounts","href":"/api-reference/partner-accounts/create-partner-account"},{"title":"List Partner Sub-Accounts","openapi":"GET /profiles/partner-accounts","href":"/api-reference/partner-accounts/list-partner-accounts"},{"title":"Check Partner Account Allowances","openapi":"GET /profiles/partner-accounts/{profileId}/allowances","href":"/api-reference/partner-accounts/check-allowances"},{"title":"Retry Partner Account Allowances","openapi":"POST /profiles/partner-accounts/{profileId}/allowances/retry","href":"/api-reference/partner-accounts/retry-allowances"}]},{"group":"Public Portfolio","pages":[{"title":"Get User Traded Volume","openapi":"GET /portfolio/{account}/traded-volume","href":"/api-reference/public-portfolio/traded-volume"},{"title":"Get User Positions (Public)","openapi":"GET /portfolio/{account}/positions","href":"/api-reference/public-portfolio/positions"},{"title":"Get Realized PnL (Public)","openapi":"GET /portfolio/{account}/realized-pnl","href":"/api-reference/public-portfolio/realized-pnl"},{"title":"Get PnL Chart (Public)","openapi":"GET /portfolio/{account}/pnl-chart","href":"/api-reference/public-portfolio/pnl-chart"},{"title":"Get User History (Public)","openapi":"GET /portfolio/{account}/history","href":"/api-reference/public-portfolio/history"},{"title":"Get User Accuracy (Public)","openapi":"GET /user-stats/accuracy/{account}","href":"/api-reference/public-portfolio/accuracy"},{"title":"Get User Pack Positions (Public)","openapi":"GET /parlay/{account}/positions","href":"/api-reference/public-portfolio/pack-positions"}]},{"group":"Feed","pages":[{"title":"Get Trading Activity Feed","openapi":"GET /feed/trading","href":"/api-reference/feed/trading-feed"}]},{"group":"Referral","pages":[{"title":"Get My Referral Stats","openapi":"GET /referral/usdc/me","href":"/api-reference/referral/my-stats"},{"title":"Get My Referred Users","openapi":"GET /referral/usdc/referrals","href":"/api-reference/referral/my-referrals"},{"title":"Get Referral Leaderboard","openapi":"GET /referral/usdc/leaderboard","href":"/api-reference/referral/leaderboard"},{"title":"Get Friends Leaderboard","openapi":"GET /referral/usdc/leaderboard/friends","href":"/api-reference/referral/leaderboard-friends"}]},{"group":"Leaderboard","pages":[{"title":"Unrealized PnL Leaderboard by Market","openapi":"GET /leaderboard/pnl/unrealized/markets/{marketId}","href":"/api-reference/leaderboard/unrealized-pnl-market"},{"title":"Biggest Open Positions","openapi":"GET /leaderboard/pnl/unrealized/biggest-positions","href":"/api-reference/leaderboard/biggest-positions"}]}]},{"tab":"Changelog","pages":[{"title":"Changelog","href":"/changelog"}]}]},"basePath":"","title":"Derive Scoped Token - Limitless Exchange","buildId":"dpl_8hoxaqFTU7hTr6A2fUraxAyjuiZo","deploymentId":"dpl_8hoxaqFTU7hTr6A2fUraxAyjuiZo","dynamics":["c2aa737661","2b790eda92","b0f84f53ff","a9bb46feb3"],"chunks":["OpenApiReferenceProvider-CDiBsYGW.js","utils-KF9rPlmF.js","cloneDeep-izs3Hzxb.js","_Uint8Array-BVIqJ90l.js","isObjectLike-C8vmzPEN.js","isArray-Dcu1dQ5t.js","utils-C26urKTX.js","toString-BX-iyh8G.js","isSymbol-CSH9U2Gm.js","addUniqueKeysToSchema-BdjmJAC1.js","snippetPresets-3IpDBjt3.js","style-to-object-BY3JEAdk.js","v4-DIgz8zy6.js","conditional-requirements-CFM0id0Q.js","ApiExamples-D4x_2vvo.js","isEqual-BfaiBbcl.js","usePlaygroundInputsStore-BIWdc5Pa.js","shallow-LQqfiMNd.js","getApiPlaygroundDisplay-DryzlOZG.js","CodeSnippet-tcJujU4r.js","CodeSnippets-BHp0nVLL.js","Page-1CZdsdAn.js","getPastedJson-DU-1ayUv.js","icon-CZK2hPr4.js","MethodPill-DOaqmTFC.js","DuplicateIcon-B5-nUxxl.js","createIcon-CDP_U77G.js","DynamicMarkdown-GHvayGOn.js","SectionHeading-BYvpkmUD.js","axios-vUo_bRtp.js","Markdown-uxhlayGT.js","clsx-B35qUV0p.js","lib-DuNMoZ05.js","lib-B8HbPgcC.js","html-void-elements-mCSPHezU.js","dist-BvrGG8gU.js","katex-YMM-FMeD.js","marked.esm-CZWythHk.js","AssistantPageLink-CAf0yVYe.js"]}