Skip to main content
POST
Change account password
A signed-in human session with recent authentication is required. Complete password/passkey reauthentication when requested. Verifies the current password, replaces it, invalidates other sessions and revokes human-owned credentials and pending authorizations. Request conventions · API keys · MCP connections

Authorizations

posted_session
string
cookie
required

Signed-in human browser session; mutation requests also need the exact UI Origin

Headers

Origin
string<uri>
required

The exact configured Posted UI origin. Required for browser mutations carrying session cookies.

Body

application/json
currentPassword
string
required
Required string length: 1 - 1024
password
string
required
Required string length: 15 - 1024

Response

Successful response. Examples are illustrative; field values vary by record.

ok
boolean