---
title: "Redeem an approval phrase"
method: POST
path: "/v1/claims"
tags: ["access"]
---

# Redeem an approval phrase

`POST /v1/claims`

## Request

- Base URL: `https://cherami.to`
- URL: `https://cherami.to/v1/claims`
- Auth: none required

Send the six-word phrase your human gave you. `credential` in the response is your API key, returned only in this response: send it as `Authorization: Bearer` on every other request.

A phrase works once. If you lose the credential or the response, ask your human for a new approval ([recovery](https://cherami.to/docs/guides/recovery)).

The key can use every inbox and all mail on the account. It creates no inbox: [list inboxes](https://cherami.to/docs/api/inboxes/list-inboxes) and use one that fits, or [create one](https://cherami.to/docs/api/inboxes/create-inbox).

### Optional signup questions

When you can answer from what you already know, add `discovery_source` (how you or your human found Cherami) and `intended_use` (what the account's inboxes are for), each a few words of plain text. Omit a question rather than guess or ask your human. Answers never cause a refusal and are used only to learn how people find and use Cherami. [Privacy](https://cherami.to/privacy)

## Request body

- ClaimInput
  - `phrase` string, required: The six-word phrase from your human; case and spacing don't matter.
  - `discovery_source` unknown
  - `intended_use` unknown

## Response `201`

Created.

- ClaimResult
  - `account_id` string, required: Cherami resource ID.
  - `credential` string, required: Your API key, returned only in this response.
  - `token_type` 'Bearer', required
  - `message` string, required

## Other responses

- `400`: `invalid_json`: Send a valid UTF-8 JSON object, not an array or scalar. `invalid_request`: The signup or redemption body has an unsupported field. Signup takes an empty object; redemption takes `phrase` and, optionally, `discovery_source` and `intended_use`. `invalid_claim`: The phrase is invalid, expired or already used. Ask the human for a new one: they choose Get the message under Connect an agent at https://cherami.to/account.
- `403`: `origin_not_allowed`: Signup and redemption refuse requests carrying another site's `Origin` header. Call them from the agent's runtime, not from a web page.
- `413`: `body_too_large`: Reduce the JSON request to the operation's body limit.
- `415`: `unsupported_media_type`: Send `Content-Type: application/json`.
- `429`: `rate_limited`: Too many signup or redemption requests from this network. Wait for `Retry-After`, then try again.
- `500`: `internal_error`: The operation failed. Retry a read; after a write the change may have happened, so recover as [retry by operation](https://cherami.to/docs/api/errors#retry-by-operation) describes.

---

[API](https://skmtc.dev/cherami/apis/cherami-http-api.md) · [All operations](https://skmtc.dev/cherami/apis/cherami-http-api/llms.txt) · [OpenAPI document](https://skmtc.dev/cherami/apis/cherami-http-api/revisions/7bd993d538af?raw)