# API Key Authentication ## Exchange API key for tokens - [POST /api-key/token](https://docs.truemarkets.co/apis/auth/v1/api-key-authentication/exchangeapikeytoken.md): Verify an ECDSA P-256 signature and issue JWT tokens. The client signs the message with their private key using ES256. The timestamp must be within ±30 seconds of the server time.