Hanzo
Sign InGet API Key
API Reference

Csrf

Csrf — 1 operations on https://api.hanzo.ai.

The REST reference for Csrf — 1 operations, generated from the OpenAPI document.

All API references → · Six flows, four surfaces →

Base URLhttps://api.hanzo.ai
Operations1
AuthAuthorization: Bearer $HANZO_API_KEY

csrf

IssueCSRFToken mints the anti-CSRF token a browser echoes as X-CSRF-Token on every money write (mint/revoke a key, top up, onboard, and the billing/commerce write verbs).

GET /v1/csrf

IssueCSRFToken mints the anti-CSRF token a browser echoes as X-CSRF-Token on every money write (mint/revoke a key, top up, onboard, and the billing/commerce write verbs). The token is bound to the caller's validated identity and expires, so one minted for one identity cannot authorize a write as another.

It is answered no-store, so it is never cached by a shared proxy. This is the same-origin endpoint the embedded console reads — the Same-Origin Policy is what stops a cross-site page from reading the response and forging a write.

All Hanzo APIs · Interactive reference

How is this guide?

Crm

Package crm is your sales pipeline: the companies, the people, the deals in play.

Dataroom

Package dataroom is a secure document room you share by link and watch page by page.

On this page

csrfIssueCSRFToken mints the anti-CSRF token a browser echoes as X-CSRF-Token on every money write (mint/revoke a key, top up, onboard, and the billing/commerce write verbs).