---
"@context": https://schema.org
"@type": TechArticle
"@id": https://www.twilio.com/docs/flex/developer/user-management/flex-token-api#article
headline: Flex User Token API (public beta)
description: Use the Flex User Token API to generate JSON Web Encryption (JWE) tokens that authenticate Flex users and grant secure access to the Flex application.
url: https://www.twilio.com/docs/flex/developer/user-management/flex-token-api
inLanguage: en
dateModified: 2026-08-20T18:09:16.000Z
author:
  "@type": Organization
  name: Twilio Developer Education Team
publisher:
  "@type": Organization
  name: Twilio
---

# Flex User Token API (public beta)

> \[!IMPORTANT]
>
> The Flex User Token API is currently available as a public beta product and the information contained in this document is subject to change. This means that some features are not yet implemented and others may be changed before the product is declared as generally available. Public beta products are not covered by an SLA.

## Flex User Token resource

Flex user tokens are JSON Web Encryption (JWE) tokens issued to authenticate users and grant them secure access to the Flex application.

## Generate a Flex user token

Generate a token for a Flex user by making a `POST` request to the `/Users/{FlexUserSid}/Tokens` endpoint.

### Path parameters

| Name                             | Type   | Description                                              | PII?    |
| -------------------------------- | ------ | -------------------------------------------------------- | ------- |
| InstanceSid <br />**(required)** | String | A 34-character string that identifies the Flex instance. | Not PII |
| FlexUserSid <br />**(required)** | String | A 34-character string that identifies the Flex user.     | Not PII |

Your Flex instance is the container that holds your Flex resources. You can find your Flex instance SID in Console on the [Flex overview](https://console.twilio.com/us1/develop/flex/overview) page.

### Request body parameters

`Encoding type:application/json`

| Name | Type    | Description                                                                 | PII?    |
| ---- | ------- | --------------------------------------------------------------------------- | ------- |
| ttl  | Integer | The time to live of the token in seconds. Default is 3600 seconds (1 hour). | Not PII |

### Flex User Token response schema

| Schema name   | Type   | Description                                | PII?                                                                                          |
| ------------- | ------ | ------------------------------------------ | --------------------------------------------------------------------------------------------- |
| access\_token | String | The Flex JWE token.                        | Not PII                                                                                       |
| token\_info   | Object | JSON blob containing info about the token. | [PII MTL: 30 days](/docs/glossary/what-is-personally-identifiable-information-pii#pii-fields) |

### Example request and response

**`POST` request**

```bash
curl -X POST "https://flex-api.twilio.com/v4/Instances/{InstanceSid}/Users/{FlexUserSid}/Tokens" \
    -u $TWILIO_API_KEY:$TWILIO_API_SECRET \
    -H "Content-Type: application/json" \
    --data-raw '{
      "ttl":3600
          }'
```

**Response**

```json
{
    "access_token": "flex_jwe_token_string_here",
    "token_info": {
        "account_sid": "AC00000000000000000000000000000000",
        "expiration": "2025-10-23T16:22:26Z",
        "flex_instance_sid": "GO00000000000000000000000000000000",
        "flex_user_sid": "FU00000000000000000000000000000000",
        "identity": "Jane",
        "permissions": [
            "FPN9999",
            "FPN0000"
        ],
        "roles": [
            "agent"
        ],
        "username": "Jane"
    }
}
```