Ctrl+K

QR pairing mint

post/api/v2/internal/mobile/qr-pair

Internal endpoint that mints a DPoP-bound access token for the QR pairing flow (ME-2047). Idempotent on pairingId: a retry with the same pairingId and DPoP public key returns the existing token; a retry with a mismatched DPoP key responds with 409.

Request Body

userId string required
Public id of the user being paired.
Min length: >= 1 characters
pairingId string required
Idempotency key for this pairing attempt. Reuse with the same DPoP key returns the same access token.
Min length: >= 1 characters
dpopPublicKey object required
DPoP public key (JWK) the issued token will be sender-constrained to.
kty string required
crv string
x string
y string
n string
e string
alg string
kid string
use string

200 Response

cnf object
jkt string required
pairingId string
id string required
Example: 59cd72485007a239fb00282ed480da1f
Match pattern: ^[0-9a-f]{32}$
isExtensible boolean required
adminScope string
Allowed values: read full
bitgoAdminPermissions array[string]
client string
created string <date-time>
enterprise string
expires string <date-time>
extensionAddress string
ip string <ipv4>
IP address of the client that requested this access token
Example: 127.0.0.1
ipRestrict array[string]
IP addresses or CIDR block of clients that are allowed to use this token
label string
origin string
BitGo environment that issued this token
Example: test.bitgo.com
token string
scope array[string]
Session permissions
Example: ["crypto_compare","user_manage","openid","profile","wallet_create","wallet_manage_all","wallet_approve_all","wallet_spend_all","wallet_edit_all","wallet_view_all"]
unlock object
spendingLimits dictionary<string, object>
allErc20TokensLimit object
expires string <date-time>
time string <date-time>
txCount number
txValue number
txValueLimit number
user string
Example: 59cd72485007a239fb00282ed480da1f
Match pattern: ^[0-9a-f]{32}$
oauth object
oauthRequired boolean
expires string <date-time>
isMobileAccessToken boolean
Flag indicating if this token was created via mobile session endpoint

400 Response

name string
Error code
context object required
Properties that apply to a specific error name
error string required
Human-readable error message
requestId string required
Client request id

401 Response

name string
Error code
context object required
Properties that apply to a specific error name
error string required
Human-readable error message
requestId string required
Client request id

403 Response

name string
Error code
context object required
Properties that apply to a specific error name
error string required
Human-readable error message
requestId string required
Client request id

404 Response

name string
Error code
context object required
Properties that apply to a specific error name
error string required
Human-readable error message
requestId string required
Client request id

409 Response

name string
Error code
context object required
Properties that apply to a specific error name
error string required
Human-readable error message
requestId string required
Client request id

500 Response

name string
Error code
context object required
Properties that apply to a specific error name
error string required
Human-readable error message
requestId string required
Client request id