Mint a one-time agent init token

POST

/tokens/init

const url = 'https://api.flotera.com/api/v1/tokens/init';
const options = {
  method: 'POST',
  headers: {
    cookie: '__Host-erm_session=<__Host-erm_session>',
    'Content-Type': 'application/json'
  },
  body: '{"expected_fingerprint":"example","server_id":"2489E9AD-2EE2-8E00-8EC9-32D5F69181C0","purpose":"example","expires_in_s":3600}'
};

try {
  const response = await fetch(url, options);
  const data = await response.json();
  console.log(data);
} catch (error) {
  console.error(error);
}

curl --request POST \
  --url https://api.flotera.com/api/v1/tokens/init \
  --header 'Content-Type: application/json' \
  --cookie __Host-erm_session=<__Host-erm_session> \
  --data '{ "expected_fingerprint": "example", "server_id": "2489E9AD-2EE2-8E00-8EC9-32D5F69181C0", "purpose": "example", "expires_in_s": 3600 }'

One-time token for agent registration (TTL at most 1 hour). Claimed exactly once by POST /agent/register. The plaintext must not be passed via installer arguments or process list. This is the agent enrollment credential of D-07, not a customer PAT. Adding a server is a fleet mutation: denied while frozen, and refused with 409 server_limit_reached once the plan’s fleet.servers.max is reached — free allows exactly one managed server.

Authorizations

sessionCookie
pat

Parameters

Header Parameters

Idempotency-Key

string

>= 1 characters <= 128 characters /^[\x21-\x7E]{1,128}$/

Idempotency key, 1–128 ASCII, unique per (tenant_id, operation, key) for at least 24 hours. Retrying with the same body replays the stored response; a different body returns 409 idempotency_conflict.

Request Body

application/json

object

expected_fingerprint

Optional expected hardware fingerprint hash (matching hint, not a credential).

string | null

<= 128 characters

server_id

Bind the token to an existing server. When set, registration attaches to exactly that server and the hardware fingerprint is not consulted; when absent, a new server is created (or matched by fingerprint). Reinstall commands issued from a server’s page set this so that a changed fingerprint — a reinstalled OS, a replaced card, a renamed host — cannot silently create a duplicate record. On success every other unused install token bound to that server is revoked: one agent per server.

string | null format: uuid

purpose

string | null

<= 256 characters

expires_in_s

integer

default: 3600 >= 60 <= 3600

Responses

201

Init token minted; plaintext shown once.

application/json

object

required

UUID (v7 for new entities; v4 accepted during migration).

string format: uuid

token

required

One-time init token plaintext — shown exactly once; claimed once by agent register.

string

<= 256 characters

expires_at

required

RFC 3339 UTC with microsecond precision.

string format: date-time

Example

{
  "expires_at": "2026-07-25T10:15:30.123456Z"
}

401

Missing/invalid credentials (code=unauthorized).

application/problem+json

RFC 9457 problem document with a stable machine code.

object

type

required

string format: uri

title

required

string

<= 256 characters

status

required

integer

>= 100 <= 599

code

required

Stable machine-readable error code (03 §2.4).

string

Allowed values: unauthorized forbidden csrf_rejected not_found conflict idempotency_conflict validation_failed rate_limited payload_too_large unsupported_agent_version temporarily_unavailable offline_queue_full online_queue_full plan_required server_limit_reached feature_not_entitled account_in_grace account_frozen payment_pending payment_expired payment_amount_mismatch change_already_pending change_already_applied change_effective reserve_not_covered direction_changed

detail

string

<= 2048 characters

instance

string

<= 512 characters

request_id

UUID (v7 for new entities; v4 accepted during migration).

string format: uuid

errors

Array<object>

<= 100 items

object

path

required

JSON Pointer to the offending field.

string

<= 512 characters

code

required

string

<= 64 characters

Example

{
  "type": "https://ermeon.com/problems/validation",
  "code": "unauthorized"
}

403

Authenticated but not permitted. code=forbidden — role/scope mismatch; code=feature_not_entitled — the plan does not include the capability; code=account_frozen — the account is frozen and this operation is declared x-ermeon-frozen: deny. The three are deliberately distinct: only the last one is fixed by a top-up (13 §5.6).

application/problem+json

RFC 9457 problem document with a stable machine code.

object

type

required

string format: uri

title

required

string

<= 256 characters

status

required

integer

>= 100 <= 599

code

required

Stable machine-readable error code (03 §2.4).

string

detail

string

<= 2048 characters

instance

string

<= 512 characters

request_id

UUID (v7 for new entities; v4 accepted during migration).

string format: uuid

errors

Array<object>

<= 100 items

object

path

required

JSON Pointer to the offending field.

string

<= 512 characters

code

required

string

<= 64 characters

Example

{
  "type": "https://ermeon.com/problems/validation",
  "code": "unauthorized"
}

409

The plan’s managed-server limit is reached (code=server_limit_reached) or the tenant has no plan assignment (code=plan_required).

application/problem+json

RFC 9457 problem document with a stable machine code.

object

type

required

string format: uri

title

required

string

<= 256 characters

status

required

integer

>= 100 <= 599

code

required

Stable machine-readable error code (03 §2.4).

string

detail

string

<= 2048 characters

instance

string

<= 512 characters

request_id

UUID (v7 for new entities; v4 accepted during migration).

string format: uuid

errors

Array<object>

<= 100 items

object

path

required

JSON Pointer to the offending field.

string

<= 512 characters

code

required

string

<= 64 characters

Example

{
  "type": "https://ermeon.com/problems/validation",
  "code": "unauthorized"
}

422

Request failed validation (code=validation_failed), with per-field errors.

application/problem+json

RFC 9457 problem document with a stable machine code.

object

type

required

string format: uri

title

required

string

<= 256 characters

status

required

integer

>= 100 <= 599

code

required

Stable machine-readable error code (03 §2.4).

string

detail

string

<= 2048 characters

instance

string

<= 512 characters

request_id

UUID (v7 for new entities; v4 accepted during migration).

string format: uuid

errors

Array<object>

<= 100 items

object

path

required

JSON Pointer to the offending field.

string

<= 512 characters

code

required

string

<= 64 characters

Example

{
  "type": "https://ermeon.com/problems/validation",
  "code": "unauthorized"
}

429

Rate limit exceeded (code=rate_limited).

application/problem+json

RFC 9457 problem document with a stable machine code.

object

type

required

string format: uri

title

required

string

<= 256 characters

status

required

integer

>= 100 <= 599

code

required

Stable machine-readable error code (03 §2.4).

string

detail

string

<= 2048 characters

instance

string

<= 512 characters

request_id

UUID (v7 for new entities; v4 accepted during migration).

string format: uuid

errors

Array<object>

<= 100 items

object

path

required

JSON Pointer to the offending field.

string

<= 512 characters

code

required

string

<= 64 characters

Example

{
  "type": "https://ermeon.com/problems/validation",
  "code": "unauthorized"
}

Headers

Retry-After

integer

Seconds to wait before retrying.