> ## Documentation Index
> Fetch the complete documentation index at: https://docs.korve.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# Runtime Issue Token

> Issue a short-lived subscribe/publish capability from a deployed server. The runtime token fixes the project and environment; the returned capability fixes one channel, subject, permissions, and replay limit.



## OpenAPI

````yaml /openapi.json post /v1/runtime/realtime/{channelName}/tokens
openapi: 3.1.0
info:
  title: Korve API
  version: 0.1.0
  description: >-
    Typed control plane for deploying applications and explicitly provisioning
    their managed infrastructure.
servers:
  - url: https://api.korve.dev
security: []
paths:
  /v1/runtime/realtime/{channelName}/tokens:
    post:
      tags:
        - realtime
      summary: Runtime Issue Token
      description: >-
        Issue a short-lived subscribe/publish capability from a deployed server.
        The runtime token fixes the project and environment; the returned
        capability fixes one channel, subject, permissions, and replay limit.
      operationId: realtime.runtimeIssueToken
      parameters:
        - name: channelName
          in: path
          required: true
          schema:
            type: string
      requestBody:
        required: true
        x-korve-max-bytes: 16384
        content:
          application/json:
            schema:
              type: object
              properties:
                subject:
                  type: string
                  minLength: 1
                  maxLength: 256
                permissions:
                  type: array
                  items:
                    type: string
                    enum:
                      - subscribe
                      - publish
                      - presence
                  minItems: 1
                  maxItems: 3
                ttlSeconds:
                  type: integer
                  minimum: 30
                  maximum: 3600
                replayLimit:
                  type: integer
                  minimum: 0
                  maximum: 100
              required:
                - subject
                - permissions
              additionalProperties: false
      responses:
        '201':
          description: Short-lived channel capability.
          content:
            application/json:
              schema:
                type: object
                properties:
                  token:
                    type: string
                    description: >-
                      Short-lived channel capability. Keep it out of logs and
                      exchange it only over TLS.
                  websocketUrl:
                    type: string
                    format: uri
                  expiresAt:
                    type: string
                    format: date-time
                required:
                  - token
                  - websocketUrl
                  - expiresAt
                additionalProperties: false
        '401':
          description: Runtime token invalid or outside this environment.
        '404':
          description: No such channel in the runtime environment.
        '409':
          description: Channel is paused or unavailable.
        '422':
          description: Invalid capability request.
      security:
        - appService: []
components:
  securitySchemes:
    appService:
      type: http
      scheme: bearer
      bearerFormat: korve_app_service

````