---
title: "Authenticate with Google OAuth"
method: POST
path: "/v1/auth/google"
tags: ["Authentication"]
---

# Authenticate with Google OAuth

`POST /v1/auth/google`

## Request

- Base URL: `https://api.1claw.co`
- URL: `https://api.1claw.co/v1/auth/google`
- Auth: none required

## Request body

- GoogleAuthRequest
  - `id_token` string, required

## Response `200`

Authenticated

- TokenResponse
  - `access_token` string, required
  - `token_type` string, required
  - `expires_in` integer
  - `refresh_token` string
  - `mfa_required` boolean
  - `mfa_token` string
  - `mfa_method` 'totp' | 'passkey'
  - `agent_id` string, uuid: Agent token exchange only — the resolved agent id.
  - `vault_ids` string[]: Agent token exchange only — vaults the agent is bound to.
  - `entitlements` AgentEntitlements: Returned on agent token exchange. The flags a client needs to decide which tools to offer, as of the moment the token was minted. treasury_signer and has_delegations are derived from the agent's treasury signer rows and active delegations and are not present on the agent profile.
    - `intents_api` boolean, required
    - `execution_intents` boolean, required
    - `execution_require_tee` boolean, required
    - `intents_require_tee` boolean, required
    - `cards` boolean, required
    - `memory` boolean, required
    - `shroud` boolean, required
    - `discoverable` boolean, required
    - `treasury_signer` boolean, required
    - `has_delegations` boolean, required

## Other responses

- `401`: Authentication required or invalid

---

[API](https://skmtc.dev/1claw/apis/1claw-api.md) · [All operations](https://skmtc.dev/1claw/apis/1claw-api/llms.txt) · [OpenAPI document](https://skmtc.dev/1claw/apis/1claw-api/revisions/ae109b496830?raw)