# API · Get API token

> API login operation: returns the bearer token that signs every other call.

- kind: api-operation
- status: stable
- api_version: v1
- last_verified: 2026-10-20
- url: https://tilopay.com/en/developers/api/autenticacion/token-api

```http
POST /api/v1/login
```

## What it does [#que-hace]

Returns the security token needed to consume the API services. The API user and password come from [Admin panel · Platform integrations](https://admin.tilopay.com/platform-integrations).

## Authentication [#autenticacion]

It does not require a token: this is the operation that issues it. See [authentication](/en/developers/api/autenticacion).

## Parameters [#parametros]

<Param id="token-api-parametro-apiuser" name="apiuser" type="string" required>
Merchant API user, obtained in Admin panel · Platform integrations.
</Param>

<Param id="token-api-parametro-password" name="password" type="string" required>
Merchant API password, obtained in Admin panel · Platform integrations.
</Param>

## Request example [#request]

The `<...>` values are placeholders: replace them with your own credentials and data.

```json
{
  "apiuser": "<api_user>",
  "password": "<api_password>"
}
```

## Response [#respuesta]

```json
{
  "access_token": "<jwt>",
  "token_type": "bearer",
  "expires_in": 86400
}
```

## Error responses [#respuestas-de-error]

Invalid credentials → HTTP 401:

```json
{
  "error": "Unauthorized"
}
```

To interpret a response that is not a success, see [how to read an error response](/en/developers/api/procesos-operativos/errors).