# POST /api/v1/hosts/enrollment-tokens

Host enrollment token (verified host account)

Operation: `createEnrollmentToken`.

Host enrollment token (verified host account)

One-use 10-minute token plus signed release URL/digest and preflight steps. Rate-limited independently.

## Endpoint

`POST https://amplerun-api.spiry.org/api/v1/hosts/enrollment-tokens`

## Authentication

Use the credential and scope required by this operation. For programmatic renter/host calls: `Authorization: Bearer $AMPLERUN_API_KEY`. A host-agent signature or other specialized proof is required where the description specifies it.

## Parameters

| Name | Location | Presence | Type | Description |
| --- | --- | --- | --- | --- |
| `Idempotency-Key` | header | Required | UUID | UUID scoped to authenticated principal, route and canonical request hash. |

## Responses

### `201`

Enrollment material.

`application/json`
| Field | Type | Presence | Description |
| --- | --- | --- | --- |
| `token` | string | Required |  |
| `expires_at` | Rfc3339Utc | Required |  |
| `release_url` | string | Required |  |
| `release_digest` | Sha256Hash | Required |  |
| `preflight_steps` | array of string | Required |  |

```json
{
  "type": "object",
  "additionalProperties": false,
  "required": [
    "token",
    "expires_at",
    "release_url",
    "release_digest",
    "preflight_steps"
  ],
  "properties": {
    "token": {
      "type": "string"
    },
    "expires_at": {
      "$ref": "#/components/schemas/Rfc3339Utc"
    },
    "release_url": {
      "type": "string"
    },
    "release_digest": {
      "$ref": "#/components/schemas/Sha256Hash"
    },
    "preflight_steps": {
      "type": "array",
      "items": {
        "type": "string"
      }
    }
  }
}
```

### `default`

Error envelope. 401 unauthenticated, 403/404 forbidden, 409 conflict, 422 invalid input, 429 rate limited (code UNAVAILABLE, retryable:true, no Retry-After header), 503 unavailable money/provider state with retryable:true.

`application/json`
| Field | Type | Presence | Description |
| --- | --- | --- | --- |
| `error` | object | Required |  |

```json
{
  "$ref": "#/components/schemas/ErrorEnvelope"
}
```

## Static request outline

Replace path/query placeholders and provide the required JSON body, headers and credential from the sections above. This is a request outline, not a command that chooses an amount or starts a rental for you.

```sh
curl --request POST 'https://amplerun-api.spiry.org/api/v1/hosts/enrollment-tokens' \
  --header "Authorization: Bearer $AMPLERUN_API_KEY"
```

[Schema definitions](https://docs.amplerun.com/reference/schemas.md) · [Download OpenAPI](/openapi.json) · [Authentication](https://docs.amplerun.com/agents/authentication.md) · [Errors and recovery](https://docs.amplerun.com/reference/errors.md)

---
Generated from the AmpleRun API contract.
Canonical: https://docs.amplerun.com/reference/api/create-enrollment-token/