Vend Amazon access token | Kuudo API Documentation

Use the canonical authorization ID from list identities. Requires an API-key-derived JWT plus live authorization and commercial entitlement. Returns an Amazon access token, not a Kuudo JWT. Keep it server-side and honor expires_at. Responses use Cache-Control: no-store.

Requires every scope: amazon-tokens:vend.

Authentication

AuthorizationBearer

JWT returned by POST /api/auth/token-exchange. Amazon and authorization invitations require API-key-derived tokens.

Path parameters

idintegerRequired1-2147483647

Storage/server/environment resource ID as applicable.

Request

This endpoint expects an object.

providerenumOptional

Allowed values:

profile_idstringOptional

Optional Ads profile ID; profileId is accepted as a compatibility alias.

Response

Success

access_tokenstring

Amazon access token. Keep server-side and never log it.

expires_atdatetime

client_idstring

regionstring

base_urlstringformat: "uri"

providerenum

profileslist of objectsOptional

selling_partner_idstringOptional

selling_partner_typeenumOptional

authorization_marketplaceenumOptional

Errors

400

Bad Request Error

401

Unauthorized Error

403

Forbidden Error

404

Not Found Error

409

Conflict Error

500

Internal Server Error

503

Service Unavailable Error