To get token please use forms mentioned in New authorization way. For processing under token token/login is used. Command signature is as follows:

svc=token/login&params={"token":<text>,
                        "operateAs":<text>}

- create new token (token/update command, callmode:create);
- execute token/list command (if tokens already created).

Response is the same as if the user has regularly logged in (core/login) using account that created token. Nevertheless new token-param is added with all token parameters as value:

{
	...,		/* core/login response */
 
	"token":"{\"app\":\"<text>\",\"ct\":<uint>\"at\":<uint>,\"dur\":<uint>,\"fl\":<uint>\"p\":\"<text>\",\"items\":[<long>]}",	
								/* all token settings as escaped json */
	...		/* core/login response */
}