---
title: "Verify Device Login"
method: POST
path: "/v1/onboarding/login/device/verify"
tags: ["onboarding"]
---

# Verify Device Login

`POST /v1/onboarding/login/device/verify`

## Request

- Base URL: `https://api.4chems.com` (the document declares no server; this is the origin it was published from)
- URL: `https://api.4chems.com/v1/onboarding/login/device/verify`
- Auth: none required

Poll a device login to token issuance (UC-091, RFC 8628). Anonymous. While
the human has not signed in yet it answers `{"status": "pending",
"retry_after": <seconds>}`: wait `retry_after` seconds and call again with the
same `challenge_id`. On approval it returns Keycloak's token set
(`access_token`, `refresh_token`, `expires_in`, ...) exactly once; pass the
`access_token` as `authorization` ('Bearer <token>') to every other tool.

## Request body

- DeviceVerifyIn: Request body for POST /v1/onboarding/registrations/device/verify (UC-075).
  - `challenge_id` string, uuid, required

## Response `200`

Successful Response

- unknown

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/4chems/apis/platform-api.md) · [All operations](https://skmtc.dev/4chems/apis/platform-api/llms.txt) · [OpenAPI document](https://skmtc.dev/4chems/apis/platform-api/revisions/65e4f7b4dba0?raw)