Sapling Logo
Developer quickstarts

Mint short-lived SDK credentials

Sign an HS256 token on your server so a browser client can authenticate without ever receiving your private API key.

Read key management guide Tone checker guides
  • 24 language guides
  • HS256 signed tokens
  • Private key stays server-side
your application server
SIGN sub + exp → signed JWT 
{
  "sub": "your-public-key",
  "exp": now + 3600
}

→  eyJhbGciOiJIUzI1NiJ9…
Popular quickstarts
Choose your stack

JWT generator quickstarts

Choose a server-side language for a short-lived Sapling SDK token example.

24 languages

Building authentication for a browser client?

Compare short-lived JWT credentials with a server-side API proxy, and keep private keys out of public code.

Open API documentation Browse tone checker guides