---
title: AppToken Object
url: https://docs.kaltura.com/docs/getting-started/authentication/app-tokens-object
---

## AppToken Object (KalturaAppToken)

| Field | Type | Description |
|-------|------|-------------|
| `id` | string | Unique token identifier (used in `startSession`) |
| `token` | string | The secret value (used for HMAC hashing — keep server-side only) |
| `partnerId` | int | Account partner ID |
| `status` | int | `1`=DISABLED, `2`=ACTIVE, `3`=DELETED |
| `sessionType` | int | `0`=USER, `2`=ADMIN |
| `sessionDuration` | int | Max session duration in seconds (0 = account default) |
| `sessionPrivileges` | string | Comma-separated privileges baked into the token |
| `sessionUserId` | string | Fixed userId for sessions created from this token |
| `hashType` | string | Hash algorithm: `MD5`, `SHA1` (default), `SHA256`, `SHA512` |
| `expiry` | int | Token expiry as Unix timestamp (0 = never expires) |
| `description` | string | Human-readable description |
| `createdAt` | int | Unix timestamp of creation |
| `updatedAt` | int | Unix timestamp of last update |

> `sessionPrivileges` and `sessionUserId` are enforced at creation time and locked into every session minted from this token. Configure them at token creation.