> ## Documentation Index
> Fetch the complete documentation index at: https://docs.drssed.app/llms.txt
> Use this file to discover all available pages before exploring further.

# POST /auth/guest — Create a guest session instantly

> Create a guest access token and refresh token without registration. Rate limited to 5 requests per hour. Returns JWT access and refresh tokens.

Call `POST /auth/guest` to instantly create a temporary session without requiring any registration. The endpoint returns a JWT access token and a refresh token you can use right away to make authenticated requests. Guest sessions are suitable for onboarding flows where you want users to explore your app before committing to a full account.

## Endpoint

| Field         | Value         |
| ------------- | ------------- |
| Method        | `POST`        |
| Path          | `/auth/guest` |
| Auth required | No            |
| Rate limit    | 5 per hour    |

## Request body

No request body is required.

## Response fields

**Status: 201 Created**

<ResponseField name="access_token" type="string" required>
  JWT access token. Include this in the `Authorization: Bearer <token>` header on subsequent requests.
</ResponseField>

<ResponseField name="expires_in" type="integer" required>
  Number of seconds until the access token expires.
</ResponseField>

<ResponseField name="refresh_token" type="string" required>
  Token used to obtain a new access token when the current one expires. See [POST /auth/refresh](/api/auth/refresh).
</ResponseField>

## Example

```bash cURL theme={null}
curl --request POST \
  --url https://api.drssed.com/auth/guest
```

```json Response theme={null}
{
  "access_token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...",
  "expires_in": 3600,
  "refresh_token": "drt_a1b2c3d4e5f6..."
}
```

<Note>
  Guest accounts can be upgraded to full registered accounts at any time using [POST /auth/upgrade](/api/auth/upgrade). Upgrading preserves all data created during the guest session.
</Note>