---
title: "Start browser-assisted agent login"
method: POST
path: "/v1/auth/device"
tags: ["Authentication"]
---

# Start browser-assisted agent login

`POST /v1/auth/device`

## Request

- Base URL: `https://api.asoskill.com`
- URL: `https://api.asoskill.com/v1/auth/device`
- Auth: none required

Creates a short-lived connection request. The agent opens the returned verification URL, the account owner signs in and approves the requested permissions, and the agent polls the token endpoint. This request does not cost a credit.

## Request body

- DeviceAuthorizationRequest
  - `codeChallenge` string, required
  - `name` string, required
  - `scopes` ApiKeyScope[], required
  - `expiresAt` string, date-time, nullable

## Response `201`

Short-lived browser authorization request

- DeviceAuthorizationResponse
  - `deviceCode` string, required: High-entropy secret retained only by the initiating client
  - `userCode` string, required
  - `verificationUri` string, uri, required
  - `verificationUriComplete` string, uri, required
  - `expiresIn` integer, required
  - `interval` integer, required

## Other responses

- `400`: The request body or parameters are invalid; no credit is consumed
- `429`: Request capacity or a rate allowance was exceeded; no credit is consumed. Respect Retry-After when present, otherwise retry with exponential backoff and jitter.
- `500`: Unexpected processing failure; any reserved credit is restored

---

[API](https://skmtc.dev/asoskill/apis/aso-skill-developer-api.md) · [All operations](https://skmtc.dev/asoskill/apis/aso-skill-developer-api/llms.txt) · [OpenAPI document](https://skmtc.dev/asoskill/apis/aso-skill-developer-api/revisions/c9808e5357cf?raw)