The project API key (public). Embedded in the payload as apikey.
OptionalclaimsExtra custom claims merged into the payload (e.g. participantId, roomId).
OptionalexpiresExpiry. Either a number of seconds, or a duration string such as
"10m", "24h", "7d". Defaults to "24h".
OptionalpermissionsPermission claims. Defaults to ["allow_join", "allow_mod"].
Only relevant for RTC join flows; harmless for management calls.
OptionalrolesRole claims. Defaults to the role the v2 REST APIs require for server-side (management) requests.
The project secret key (private). Used to HS256-sign the token. Never sent over the wire.
OptionalversionToken version. Defaults to 2, which the v2 REST APIs require.
Pass undefined/null via claims only if you deliberately want a versionless token.
Options for generateToken.
The VideoSDK API authenticates server requests with a JWT that is HS256-signed with the project
secretKeyand carries the publicapikeyin its payload. This SDK signs the token locally — no network call.