---
title: "Obtain an account credential with verified email and password proof"
method: POST
path: "/account-credentials/bootstrap"
tags: ["Account credentials"]
---

# Obtain an account credential with verified email and password proof

`POST /account-credentials/bootstrap`

## Request

- Base URL: `https://app.communicate.so/api/v1`
- URL: `https://app.communicate.so/api/v1/account-credentials/bootstrap`
- Auth: none required

Provide verified account email and current password to obtain an explicit account credential without cookies or Origin. Uses the existing Better Auth password verification and rate limits. No session cookie is returned. The issuer session is kept server-side and bounds credential validity. The secret is returned once; do not put credentials in command arguments or logs.

## Request body

- AccountCredentialBootstrap
  - `name` string, required
  - `password` string, password, required
  - `scopes` string[], required
  - `audience` 'https://app.communicate.so/api/v1' | 'https://app.communicate.so/mcp'
  - `email` string, email, required

## Response `201`

Obtain an account credential with verified email and password proof

- AccountCredentialReceipt
  - `id` string, uuid, required
  - `name` string, required
  - `prefix` string, required
  - `scopes` string[], required
  - `expiresAt` string, date-time, required
  - `token` string, required: One-time credential secret; not present in subsequent metadata reads.

## Other responses

- `400`: Invalid request body or pagination.
- `401`: Session or credential missing, invalid, expired or revoked; fresh password proof failed when required.
- `403`: Email verification, trusted origin or required account scope is missing.
- `429`: Per-user list or password proof rate limit exceeded.
- `500`: Unexpected server failure.
- `503`: Identity service or freshly issued session unavailable.

---

[API](https://skmtc.dev/communicate/apis/communicate-public-rest-api-2.md) · [All operations](https://skmtc.dev/communicate/apis/communicate-public-rest-api-2/llms.txt) · [OpenAPI document](https://skmtc.dev/communicate/apis/communicate-public-rest-api-2/revisions/db6be3d36733?raw)