Sign-in
How humans get a session token (under /api/auth, not /v1): magic links, passkeys, email + password, and their sessions. Agents use API keys instead.
| Method | Path | What it does |
|---|---|---|
| POST | /api/auth/magic-link | Email a magic link |
| POST | /api/auth/magic-link/peek | See what a magic link does |
| POST | /api/auth/magic-link/verify | Sign in with a magic link |
| POST | /api/auth/verify-email | Email a link to confirm your email |
| POST | /api/auth/passkeys/sign-in/options | Start a passkey sign-in |
| POST | /api/auth/passkeys/sign-in | Sign in with a passkey |
| POST | /api/auth/passkeys/register/options | Start adding a passkey |
| POST | /api/auth/passkeys/register | Add a passkey |
| GET | /api/auth/passkeys | List your passkeys |
| POST | /api/auth/passkeys/{id}/rename | Rename a passkey |
| POST | /api/auth/passkeys/{id}/delete | Remove a passkey |
| GET | /api/auth/methods | How you sign in |
| POST | /api/auth/password | Set or change your password |
| GET | /api/auth/sessions | List your sessions |
| POST | /api/auth/sessions/revoke-others | Sign out your other sessions |
| POST | /api/auth/sessions/{id}/revoke | Sign out a session |
| POST | /api/auth/sign-up/email | Create an account with a password |
| POST | /api/auth/sign-in/email | Sign in with a password |
| POST | /api/auth/sign-out | Sign out |