post
https://api.lodgestory.com/api/wp-crm/token
Exchange your API token and user email for a short-lived JWT.
This is the first call you should make. The returned JWT must be passed as a Bearer token in the Authorization header of all subsequent requests.
Token lifetime: 10 days.
How it works:
- Your organisation is looked up by the
api_token. - The
user_id(email) is verified as a member of that organisation. - A JWT containing an encrypted user payload is returned. The payload is encrypted with your organisation ID as the key, so even if the token is intercepted, the data cannot be read without knowing the org ID.
Recent Requests
Log in to see full request history
| Time | Status | User Agent | |
|---|---|---|---|
Retrieving recent requests… | |||
Loading…
400Bad request — missing or invalid api_token / user_id
404API token invalid or user not found in any organisation matching this token
500Internal server error
