curl --request POST \
  --url https://api.gigstack.io/v2/teams/{id}/portal-access-token \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "expiresIn": "1h",
  "scopes": [
    "invoices:read"
  ]
}
'

const options = {
  method: 'POST',
  headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
  body: JSON.stringify({expiresIn: '1h', scopes: ['invoices:read']})
};

fetch('https://api.gigstack.io/v2/teams/{id}/portal-access-token', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

import requests

url = "https://api.gigstack.io/v2/teams/{id}/portal-access-token"

payload = {
    "expiresIn": "1h",
    "scopes": ["invoices:read"]
}
headers = {
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

{
  "token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.<payload>.<signature>",
  "url": "https://embeded.gigstack.pro/facturas?t=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.%3Cpayload%3E.%3Csignature%3E",
  "expiresAt": "2026-01-08T00:00:00.000Z"
}

{
  "error": "invalid_expires_in",
  "message": "expiresIn cannot exceed 24h"
}

{
  "error": "forbidden_team",
  "message": "The requested team does not belong to your account"
}

{
  "success": false,
  "error": {
    "code": "resource_not_found",
    "message": "Resource not found"
  },
  "timestamp": 1767225600000
}