Skip to main content
POST
Sign in with a password
No signed-in session is required. Endpoint-specific tokens, setup secrets or challenges may still be required. Sets a session cookie after password verification, or returns requiresSecondFactor, challengeId, methods, preferredMethod and recoveryAvailable when a passkey is required. Request conventions · API keys · MCP connections

Body

application/json
email
string<email>
required
Maximum string length: 320
Pattern: ^(?!\.)(?!.*\.\.)([A-Za-z0-9_'+\-\.]*)[A-Za-z0-9_+-]@([A-Za-z0-9][A-Za-z0-9\-]*\.)+[A-Za-z]{2,}$
password
string
required
Required string length: 1 - 1024

Response

Successful response. Examples are illustrative; field values vary by record.

user
object
workspace
object