Skip to main content

mintManagedPlayerToken

ORG TOKEN ONLY. Sign one of your organization's own players in and get its app-scoped gameplay token, the same token mintAppToken returns: hand token (and the URLs) to the player's device, which plays with it exactly as with any app token and refreshes it with refreshAppToken. Call from your server with Authorization: Bearer cko_... (scope players:mint); a request with an Origin header is refused. The player is created on its first sign-in (no email, password or wallet), and each sign-in lasts sessionTtlSeconds (default and maximum: the org's settings): after it the device comes back to you. The app must be one of your organization's apps (and in the token's app list, if it has one). Free tiers grant access automatically; a paid tier needs grantAppAccess. Refused with ORG_LEGAL_ACCEPTANCE_REQUIRED until an admin of the organization has accepted the current Org-Managed Players Addendum. Pass the player's ageYears and country, and its region where the country is checked by region: the player is refused TERRITORY_NOT_SUPPORTED in a country or region Crowded Kingdoms does not serve (or without a region it needs), AGE_REQUIRED without an age once players 13 and over are admitted, and AGE_REQUIREMENT_NOT_MET under 13 or under the app's or the country's minimum age (before it is created); that refusal names no age, the same player is refused it for 24 hours whatever is sent, and a player that exists and is said to be under 13 is deleted as deleteManagedPlayer does; its bracket and country are stored on it, and a refresh is refused once its bracket is wholly below the app's minimum.

mintManagedPlayerToken(
  input: MintManagedPlayerTokenInput!
): AppTokenResponse!

Arguments​

mintManagedPlayerToken.input ● MintManagedPlayerTokenInput! non-null input​

Type​

AppTokenResponse object​

A short-lived, app-scoped gameplay token (Overworld portal). Confined to a single app: usable only against that app's Game API + Buddy realtime surface (plus read-only me and same-app refreshAppToken). It CANNOT perform management operations and CANNOT mint tokens for other apps, so a game stack that receives it never gets the player's full identity session.