---
title: "Activate the key from the emailed link"
method: GET
path: "/keys/demo/verify"
tags: ["keys"]
---

# Activate the key from the emailed link

`GET /keys/demo/verify`

## Request

- Base URL: `https://api.cars-data.com/v1`
- URL: `https://api.cars-data.com/v1/keys/demo/verify`
- Auth: none required

Step 2 of 2, and the endpoint the emailed link points at. Mints the
key, returns it **once**, and emails a copy. We store only a hash and
cannot show it again.

The token is burned before the key is minted, so a double click cannot
produce two keys. The link works once and expires after 3 days.

## Query parameters

- `t` string, required

## Response `200`

The key, shown once.

- IssuedKeyEnvelope
  - `data` IssuedKey: Returned once and never again — we store only a hash.
    - `api_key` string
    - `covers` string: The demo set, in words — e.g. "40 cars — Volkswagen: Golf, Transporter · BMW: 3-serie, i3 · …"
    - `full_catalogue` string, uri
    - `note` string
    - `plan` 'demo'
    - `start_here` string, uri
  - `meta` Meta
    - `last_synced_at` string, date-time, required
    - `locale` string
    - `units` 'metric' | 'imperial'

## Other responses

- `400`: RFC 9457 problem document.
- `409`: RFC 9457 problem document.

---

[API](https://skmtc.dev/cars-data/apis/cars-data-com-api.md) · [All operations](https://skmtc.dev/cars-data/apis/cars-data-com-api/llms.txt) · [OpenAPI document](https://skmtc.dev/cars-data/apis/cars-data-com-api/revisions/4aeb6b2b5c5f?raw)