---
title: "Verify Email Endpoint"
method: POST
path: "/auth/verify-email"
tags: ["internal"]
---

# Verify Email Endpoint

`POST /auth/verify-email`

## Request

- Base URL: `https://api.companydata.dk` (the document declares no server; this is the origin it was published from)
- URL: `https://api.companydata.dk/auth/verify-email`
- Auth: none declared

Verify a user's email address using the token from the verification email.

Magic-link semantics: the single-use, expiring token that just arrived in
the mailbox proves control of it, so the verified user is signed in on the
same response (cookie + access_token) and lands on the continuation
instead of retyping the password chosen a minute earlier. Accounts with
2FA are never auto-signed-in (2FA can only be enabled after a login, so
this only concerns re-verification of an existing account).

## Query parameters

- `token` string, required: Verification token from email

## Response `200`

Successful Response

- AppRoutersAuthVerifyEmailResponse
  - `success` boolean, required
  - `message` string, required
  - `access_token` string, nullable

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/companydata/apis/companydata-dk-api.md) · [All operations](https://skmtc.dev/companydata/apis/companydata-dk-api/llms.txt) · [OpenAPI document](https://skmtc.dev/companydata/apis/companydata-dk-api/revisions/1cc6c361ae64?raw)