# Capability Tokens

1// Get token from validation
2const result = await api.validate('file_read', { path: '/data/file.txt' });
3const { token } = result;
4
5// Verify the token (single use)
6const verification = await api.tokens.verify(token);
7
8if (verification.valid) {
9  console.log('Tool:', verification.tool);
10  console.log('Scope:', verification.scope);
11  // Execute the tool
12} else {
13  console.error('Invalid:', verification.error);
14  // Errors: "Token expired", "Token already used", "Invalid signature"
15}

1import { TokenIssuer } from '@solongate/sdk';
2
3const issuer = new TokenIssuer({
4  secret: process.env.TOKEN_SECRET!,
5  ttlSeconds: 30,  // Default: 30 seconds
6});
7
8// Issue a token
9const token = issuer.issue({
10  tool: 'file_read',
11  arguments: { path: '/data/file.txt' },
12  scope: ['read'],
13});
14
15// Verify a token
16const result = issuer.verify(token);
17if (result.valid) {
18  console.log('Token payload:', result.payload);
19}