---
title: "Verify recovery token"
method: GET
path: "/v1/vault/recover/verify"
tags: ["vault-legacy"]
---

# Verify recovery token

`GET /v1/vault/recover/verify`

## Request

- Base URL: `https://agentlair.dev`
- URL: `https://agentlair.dev/v1/vault/recover/verify`
- Auth: none required

Verify the single-use recovery token from the magic link email.
Returns all encrypted seed blobs for the associated email.
Token is immediately invalidated on use.

## Query parameters

- `token` string, required

## Response `200`

Encrypted seeds returned

- object
  - `recovered` boolean
  - `entries` object[]: v2 vault entries
    - `account_id` string
    - `key` string
    - `ciphertext` string
    - `metadata` object, nullable
    - `version` integer
    - `created_at` string, date-time
  - `legacy_entries` object[]: Legacy seed blobs
    - `vault_id` string
    - `encrypted_seed` string
    - `created_at` string, date-time
  - `note` string

## Other responses

- `400`: Invalid or expired token

---

[API](https://skmtc.dev/agentlair/apis/agentlair-api.md) · [All operations](https://skmtc.dev/agentlair/apis/agentlair-api/llms.txt) · [OpenAPI document](https://skmtc.dev/agentlair/apis/agentlair-api/revisions/fac95ff4995d?raw)