> ## Documentation Index > Fetch the complete documentation index at: https://developer.mogl.online/llms.txt > Use this file to discover all available pages before exploring further. # Issue an expiring link so an athlete can connect one social platform > Returns a URL the agent shares with their athlete out of band (ENG-1472). One link covers one platform, matching the per-platform Send Link actions in the Link Social Media modal, and the athlete's page names the platform it was issued for. * * The athlete opens it without an account and without logging in, so the token in the URL is the only credential: it is cryptographically random, expires 24 hours after it is issued, and is consumed by the first successful connect, whichever comes first. Connecting another platform needs another link. Generating a new link does not revoke earlier ones, but removing the athlete from the roster does. * * The URL points at the app, under `/social-link/{token}`. It was briefly going to live on the influencer subdomain, which was reversed on ENG-1478 so the OAuth redirect URIs already registered against the app keep working. The page is still served logged out and is still excluded from indexing and from every sitemap. ## OpenAPI ````yaml /storage/api-docs/api-docs.json post /agent/athletes/{athleteId}/social-link-token openapi: 3.0.0 info: title: MOGL Core API description: >- MOGL Platform Core API — powering athlete NIL deals, brand partnerships, agent management, payments, messaging, and more. * * ## Authentication * - **JWT Bearer Token**: Most endpoints require a Bearer token obtained via `/api/login`. * - **Server-to-Server API Key**: Internal/lambda/cron endpoints use an `X-API-KEY` header. * * ## Rate Limiting * - Registration & login endpoints: 4–15 requests per minute * - Public/influencer endpoints: 200 requests per minute * - Authenticated endpoints: standard Laravel throttle version: 1.0.0 servers: - url: http://localhost/mogl/mogl-backend/api description: Local - url: https://dev-api.mogl.online/api description: Dev - url: https://staging-api.mogl.online/api description: Staging - url: https://api.mogl.online/api description: Production security: - bearerAuth: [] tags: - name: Authentication description: Login, registration, password reset - name: User Registration - Common description: Common user registration & email check - name: User Registration - Athlete description: Athlete registration & onboarding steps - name: User Registration - Partner description: Partner/Brand registration & onboarding steps - name: User Registration - Agent description: Agent registration & onboarding steps - name: User Registration - Fan description: Fan registration & onboarding steps - name: User Profile description: User profile management, settings, social media - name: Athlete description: 'Athlete-specific endpoints: search, details, availability' - name: Athlete - Availability Confirmation description: Post-hiring availability confirmation workflow - name: Athlete - NIL Feed description: Athlete NIL feed and partner search - name: Athlete - AI Assistant description: >- AI-powered job assistant for athletes — chat, conversation history, read state, and clarification drafts - name: Athlete - AI Waitlist description: AI Athlete Assistant waitlist status, social proof, and joining - name: Partner description: Partner/Brand-specific endpoints - name: Partner - External Job description: External job link & applicant management - name: Partner - Deliverable Report description: Deliverable detail reports for brands - name: Partner - Screening Questions description: Screening question reports - name: Partner - Contract Management description: Brand contract management with athletes - name: Partner - Content Library description: Brand content library for deliverable assets - name: Agent description: Agent profile, athlete management, contracts - name: Agent - Athletes description: Agent-athlete relationship management - name: Agent - Stripe description: Agent payment methods & billing via Stripe - name: Agent - Pay description: 'Agent-wide payout feed: money MOGL sends the agent through Stripe Express' - name: Agent - Contracts description: Agent athlete contract management - name: Agent - Availability Confirmation description: Agent managing athlete job availability - name: Agent - Roster Import description: >- CSV client list import through CSVBox (ENG-1619 / ENG-1702): session, CSVBox webhook, progress, row results, retry - name: Agent - Roster Pages description: >- ENG-1685: My Roster Link, public roster directory, public roster page, and roster SEO URL resolution. A roster is the agent's current linked athletes; nothing is stored separately. - name: Jobs description: Job/deal CRUD, search, invitations, hiring, deliverables - name: Deals description: Deal listing, my deals, bulk operations - name: Deal Folder description: >- Deal folder file workflow — uploads, replacements, approvals, revisions, comments. Accessible by athlete, partner/brand, agent, and iOS clients (per-action authorisation enforced server-side). - name: Deal Folder iOS API description: >- iOS-only direct-to-S3 multipart upload endpoints for deal folder files (initiate/complete for new uploads and replacements). Web clients should use the standard `Deal Folder` upload/replace endpoints instead. - name: Chat description: Messaging, chat contacts, notifications - name: Notifications description: Notification preferences, in-app notifications - name: Payments description: Stripe payments, payment history, cards, bulk pay - name: Subscription description: Brand subscription plans & management - name: Public Pages description: Public content endpoints (no auth required) - name: Public - Influencer/SEO description: Public influencer discovery, sitemaps, directories - name: Services description: Athlete service marketplace - name: iOS Device description: iOS device tokens, live activities - name: Onboarding Tutorial description: Onboarding tutorial progress - name: MOGL Rosters description: Roster management & display - name: Internal / Cron description: Server-to-server and cron job endpoints - name: Internal / AI Assistant Tools description: >- Server-to-server Athlete Assistant tool gateway used by mogl-ai-service. Eight Laravel tools share POST /internal/ai-assistant/tools/{tool}. search_kb is Python-local and is not in this path enum. - name: Internal / QA Scenario Lab description: >- Feature-flagged DEV/STAGING-only endpoints called by the authorized Back Office QA Scenario Lab. - name: Affiliate description: Athlete affiliate links & tracking - name: Internal description: Internal - name: Public - Social Linking description: Public - Social Linking paths: /agent/athletes/{athleteId}/social-link-token: post: tags: - Agent - Athletes summary: Issue an expiring link so an athlete can connect one social platform description: >- Returns a URL the agent shares with their athlete out of band (ENG-1472). One link covers one platform, matching the per-platform Send Link actions in the Link Social Media modal, and the athlete's page names the platform it was issued for. * * The athlete opens it without an account and without logging in, so the token in the URL is the only credential: it is cryptographically random, expires 24 hours after it is issued, and is consumed by the first successful connect, whichever comes first. Connecting another platform needs another link. Generating a new link does not revoke earlier ones, but removing the athlete from the roster does. * * The URL points at the app, under `/social-link/{token}`. It was briefly going to live on the influencer subdomain, which was reversed on ENG-1478 so the OAuth redirect URIs already registered against the app keep working. The page is still served logged out and is still excluded from indexing and from every sitemap. operationId: agentGenerateSocialLinkToken parameters: - name: athleteId in: path description: Athlete user id. Must be on the authenticated agent's roster. required: true schema: type: integer example: 28550 requestBody: required: true content: application/json: schema: required: - platform properties: platform: description: The platform this link asks the athlete to connect. type: string enum: - instagram - tiktok - twitter example: instagram type: object responses: '200': description: Link issued content: application/json: schema: properties: data: properties: url: description: >- Share this with the athlete. Treat it as a secret. Built from the configured app URL, so it is the dev or staging host on those environments. type: string example: https://app.mogl.online/social-link/6f1c...9ab2 platform: type: string enum: - instagram - tiktok - twitter example: instagram expires_at: type: string format: date-time example: '2026-09-25 10:31:04' type: object type: object '400': description: The agent is not approved, or does not represent this athlete. content: application/json: schema: properties: message: type: string example: You can only manage athletes you represent. error_code: type: string enum: - AGENT_NOT_APPROVED - ATHLETE_NOT_LINKED example: ATHLETE_NOT_LINKED type: object '422': description: platform missing or not one of the supported values. security: - bearerAuth: [] components: securitySchemes: bearerAuth: type: http description: >- JWT Bearer token authentication. Use the /api/login endpoint to obtain a token. scheme: bearer bearerFormat: JWT ```` This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.