# Create user event token

HTTP API `POST` `/auth/user-event-token`

Mints the `event_token` a partner application's frontend sends to `createUserEvent` and `userEvents`, so it can record and read events about one user under the event type prefix TNID granted the company (e.g. `hoozit.*`).

Call it from your backend, authenticated as your company, with the TNID id of the signed-in user. The token is valid for an hour, for any number of requests made with that user's session; a request made as anyone else is refused. A company whose user events are not enabled by TNID is refused with a 400.

## Request

```json
{
  "user_id": "00000000-0000-4000-8000-000000000001"
}
```

## Response

**HTTP Response Code:** 200

```json
{
  "event_token": "eyJERAMPLE.PAYLOAD1.SIGNATURE",
  "expires_at": "2026-01-15T09:00:00Z"
}
```