curl --request POST \
  --url https://api.turnkey.com/public/v1/submit/mint_jwt \
  --header 'Accept: application/json' \
  --header 'Content-Type: application/json' \
  --header "X-Stamp: <string> (see Authorizations)" \
  --data '{
    "type": "ACTIVITY_TYPE_MINT_JWT",
    "timestampMs": "<string> (e.g. 1746736509954)",
    "organizationId": "<string> (Your Organization ID)",
    "parameters": {
        "profile": "<JWT_PROFILE_HTTP_AUTHZ_V1>",
        "audience": "<string>",
        "httpAuthzV1": {
            "method": "<string>",
            "path": "<string>",
            "query": "<string>",
            "headerNames": [
                "<string>"
            ],
            "headerDigest": [
                "<string>"
            ],
            "bodyDigest": "<string>",
            "subject": "<string>",
            "timeToLiveSeconds": "<string>",
            "issuedAt": "<string>"
        }
    }
}'

import { Turnkey } from "@turnkey/sdk-server";

const turnkeyClient = new Turnkey({
  apiBaseUrl: "https://api.turnkey.com",
  apiPublicKey: process.env.API_PUBLIC_KEY!,
  apiPrivateKey: process.env.API_PRIVATE_KEY!,
  defaultOrganizationId: process.env.ORGANIZATION_ID!,
});

const response = await turnkeyClient.apiClient().mintJwt({
  profile: "<JWT_PROFILE_HTTP_AUTHZ_V1>" // profile field,
  audience: "<string> (Origin of the receiving service, as `https://<lowercase host>[:port]` with no default port, path, query, or fragment. At most 256 characters. Becomes the `aud` claim.)",
  httpAuthzV1: { // httpAuthzV1 field,
    method: "<string> (HTTP method of the bound request. One of `GET`, `HEAD`, `POST`, `PUT`, `PATCH`, or `DELETE`.)",
    path: "<string> (Path of the bound request, starting with `/`.)",
    query: "<string> (Query of the bound request without the leading `?`, or empty for no query.)",
    headerNames: ["<string>"] // Lowercase names of the bound request headers, in order. At most 32 unique names of at most 64 characters each. Cannot include `authorization` or hop-by-hop headers (`proxy-authorization`, `connection`, `keep-alive`, `proxy-connection`, `te`, `transfer-encoding`, `upgrade`).,
    headerDigest: ["<string>"] // SHA-256 digest of each bound header value, as `sha-256=:<base64>:`. One entry per entry in `header_names`.,
    bodyDigest: "<string> (SHA-256 digest of the bound request body, as `sha-256=:<base64>:`. For a request with no body, the digest of empty content.)",
    subject: "<string> (ID of a user in the organization, as a lowercase UUID. Becomes the `sub` claim.)",
    timeToLiveSeconds: "<string> (Lifetime of the JWT in seconds, from 1 to 300. `exp` is `issued_at + time_to_live_seconds`.)",
    issuedAt: "<string> (Unix time in seconds. Becomes the `iat` claim.)",
  }
});

{
  "activity": {
    "id": "<activity-id>",
    "status": "ACTIVITY_STATUS_COMPLETED",
    "type": "ACTIVITY_TYPE_MINT_JWT",
    "organizationId": "<organization-id>",
    "timestampMs": "<timestamp> (e.g. 1746736509954)",
    "result": {
      "activity": {
        "id": "<string>",
        "organizationId": "<string>",
        "status": "<string>",
        "type": "<string>",
        "intent": {
          "mintJwtIntent": {
            "profile": "<JWT_PROFILE_HTTP_AUTHZ_V1>",
            "audience": "<string>",
            "httpAuthzV1": {
              "method": "<string>",
              "path": "<string>",
              "query": "<string>",
              "headerNames": [
                "<string>"
              ],
              "headerDigest": [
                "<string>"
              ],
              "bodyDigest": "<string>",
              "subject": "<string>",
              "timeToLiveSeconds": "<string>",
              "issuedAt": "<string>"
            }
          }
        },
        "result": {
          "mintJwtResult": {
            "jwt": "<string>",
            "signingKeyJwk": "<string>"
          }
        },
        "votes": "<array>",
        "fingerprint": "<string>",
        "canApprove": "<boolean>",
        "canReject": "<boolean>",
        "createdAt": "<string>",
        "updatedAt": "<string>"
      }
    }
  }
}