---
title: "link.access-grant-token@1 · OpenVibe.Services"
canonical: "https://openvibe.services/docs/contracts/link.access-grant-token"
updated: null
---

# link.access-grant-token@1 · OpenVibe.Services

HTML: [link.access-grant-token@1 · OpenVibe.Services](https://openvibe.services/docs/contracts/link.access-grant-token)

# LinkAccessGrantToken `link.access-grant-token@1`

Generated at 2026-11-13 06:25:48 UTC from [`openvibe-contracts v0.419.0`](https://github.com/OpenVibers/OpenVibe.Contracts/tree/v0.419.0) and [`openvibe-sdk v0.161.0`](https://github.com/OpenVibers/OpenVibe.SDK/tree/v0.161.0).

- Version: 1.0.0
- Owner: network
- Visibility: first-party
- Status: active
- Compatibility: backward
- Schema: [`https://openvibe.network/contracts/link/access-grant-token.v1.json`](/docs/contracts/link.access-grant-token.json)

Claims of the signed grant JWT; target is audience, requester is subject.

## Fields

| Field | Type | Required | Description | Constraints |
| --- | --- | --- | --- | --- |
| `iss` | string | yes |  |  |
| `aud` | string | yes |  | - `pattern ^lnk_[0-9A-HJKMNP-TV-Z]{26}$` |
| `sub` | string | yes |  | - `pattern ^lnk_[0-9A-HJKMNP-TV-Z]{26}$` |
| `jti` | string | yes |  | - `pattern ^[a-z]{3}_[A-Za-z0-9_-]{8,80}$` |
| `grant_id` | string | yes |  | - `pattern ^[a-z]{3}_[A-Za-z0-9_-]{8,80}$` |
| `scopes` | array of enum | yes |  | - `minItems 1`<br>- `unique items`<br>- `items: one of "agent", "send", "screen", "desk", "computer", "worker"` |
| `iat` | integer | yes |  |  |
| `exp` | integer | yes |  |  |

## Examples

From the contract's own test fixtures: valid ones validate, rejected ones must fail.

 Valid: example

~~~~
{
  "iss": "https://openvibe.network",
  "aud": "lnk_BBBBBBBBBBBBBBBBBBBBBBBBBB",
  "sub": "lnk_AAAAAAAAAAAAAAAAAAAAAAAAAA",
  "jti": "tok_12345678",
  "grant_id": "grt_12345678",
  "scopes": [
    "agent"
  ],
  "iat": 1794355200,
  "exp": 1794358800
}
~~~~

Rejected: example

~~~~
{}
~~~~

## Validate

~~~~
const contracts = require('openvibe-contracts');
contracts.validate('link.access-grant-token@1', value);   // { valid, errors: [{ path, message }] }
~~~~