Stax

Stax Ephemeral API

The Ephemeral API from Stax — 1 operation(s) for ephemeral.

Documentation GitHub OpenAPI

Operations 1

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

GET /ephemeral Issue a short-lived authentication token · Ephemeral Authentication Tokens #

Ask an LLM

“Can I exchange my Stax API key for a temporary token that expires in 24 hours?”

“Is it possible to get an ephemeral token scoped to a specific user?”

Tell an agent

Generate an ephemeral auth token from my API key.

Issue a 24-hour ephemeral token for the user with email {user_email}.

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this

find_apisBrowse and filter every API in the catalog.
get_api_artifactsOne API's artifacts, grouped by type.
get_openapiThe primary OpenAPI for this API.
find_similar_apisAPIs that look like this one.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This API

curl "https://apis.io/api/v1/apis/stax:stax-ephemeral-api"

All apis

curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

openapi: 3.2.0
info:
  title: stax-api Ephemeral API
  version: '0.1'
servers:
- url: https://apiprod.fattlabs.com/
security:
- ApiKeyAuth: []
tags:
- name: Ephemeral
paths:
  /ephemeral:
    get:
      summary: Ephemeral Authentication Tokens
      description: This endpoint accepts a request made with an API Key in the Authorization header and issues an ephemeral authentication token (expiring in 24 hours) in response.
      operationId: ephemeral-authentication-tokens-1
      parameters:
      - name: user_id
        in: query
        description: Provide the Stax User ID for whom the ephemeral token should be issued. Leave blank to issue the token for the API Key in the Authorization header.
        schema:
          type: string
      - name: user_email
        in: query
        description: Provide the URL-encoded email of the Stax User for whom the ephemeral token should be issued. Leave blank to issue the token for the API Key in the Authorization header.
        schema:
          type: string
      responses:
        '200':
          description: '200'
          content:
            application/json:
              examples:
                Result:
                  value: "[\n    \"token\": \"emphemeralJWTString\"\n]"
        '422':
          description: '422'
          content:
            application/json:
              examples:
                Invalid API Key:
                  value: "{\n  \"is_api_key\": [\n    \"The bearer token must be an api key\"\n  ]\n}"
              schema:
                type: object
                properties:
                  is_api_key:
                    type: array
                    items:
                      type: string
                      example: The bearer token must be an api key
      deprecated: false
      tags:
      - Ephemeral
components:
  securitySchemes:
    ApiKeyAuth:
      type: http
      scheme: bearer
      bearerFormat: JWT
      description: API key for merchant-level operations. Provides access to merchant-specific endpoints including transactions, payments, customer management, and merchant account settings. This key is scoped to a single merchant account and cannot access partner-level functionality.
    PartnerApiKey:
      type: http
      scheme: bearer
      bearerFormat: JWT
      description: Partner-level API key with elevated privileges. Grants access to all partner operations including merchant management, portfolio oversight, reporting across multiple merchant accounts, and partner-specific administrative functions. Also provides access to all merchant-level operations for accounts under the partner's management.
    EphemeralAuth:
      type: http
      scheme: bearer
      bearerFormat: JWT
      description: Temporary authentication token with limited lifespan. Used for short-term access to specific operations, typically generated for secure one-time actions or time-bounded sessions. Automatically expires after a predefined period for enhanced security.