> ## Documentation Index
> Fetch the complete documentation index at: https://docs.verify-group.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Tokens

> Access token and refresh token lifetimes, JWT payload structure, and refresh token rotation behavior for the Verify Group Platform API.

| Type          | Lifetime |
| ------------- | -------- |
| Access token  | 1 hour   |
| Refresh token | 30 days  |

## Decoded payload

```json theme={null}
{"sub":"user-uuid","email":"user@example.com","organizationId":"org-uuid","roles":["claims_manager"]}
```

Each refresh token use **rotates** both tokens — the old pair is immediately invalidated.