# App JWT

Part of [Authentication](https://cursor.com/docs/api/origin/reference/authentication.md) in the Origin API reference.

Sign a short-lived JWT with the Ed25519 private key paired with one of the app's active signing keys. Generate that pair as described in [Generate an app signing key](https://cursor.com/docs/api/origin/reference/generate-an-app-signing-key.md).

JOSE header:

```json
{
  "alg": "EdDSA",
  "kid": "app_01...",
  "typ": "JWT"
}
```

Claims:

```json
{
  "iss": "app_01...",
  "aud": "origin-apps",
  "iat": 1782928800,
  "exp": 1782929100
}
```

Set `iss` and `kid` to the app ID. Use a lifetime of approximately five minutes.

```text
Authorization: Bearer APP_JWT
```

Use an app JWT for app-level operations such as reading app metadata, managing installations, minting installation tokens, and recovering webhook deliveries.


---

## Sitemap

[Origin API docs index](https://cursor.com/docs/api/origin/llms.txt)