---
title: "Discover the browser authentication mode"
method: GET
path: "/auth/config"
---

# Discover the browser authentication mode

`GET /auth/config`

## Request

- Base URL: `https://api.caveman.so/api/v1`
- URL: `https://api.caveman.so/api/v1/auth/config`
- Auth: none required

GET /api/v1/auth/config on the Caveman Cloud control plane. Unauthenticated, or authenticated by a request signature rather than a session. Not exposed to autonomous agents: Browser authentication mode discovery; no agent capability.

## Response `200`

Deployment-selected authentication mode, and whether the first-owner setup can still run (absent when that lookup fails).

- object
  - `mode` 'legacy' | 'better-auth', required
  - `bootstrap` 'open' | 'owner_exists' | 'disabled'

## Other responses

- `2XX`: Successful response. Exact status depends on synchronous or durable delivery outcome.
- `4XX`: Structured failure. `error.code` is stable; `error.request_id` is echoed in the x-cave-request-id header.
- `5XX`: Structured failure. `error.code` is stable; `error.request_id` is echoed in the x-cave-request-id header.

---

[API](https://skmtc.dev/caveman/apis/caveman-cloud-api.md) - [All operations](https://skmtc.dev/caveman/apis/caveman-cloud-api/llms.txt) - [OpenAPI document](https://skmtc.dev/caveman/apis/caveman-cloud-api/revisions/508312d01cfc?raw)