---
title: "Create a hosted sign-in return code"
method: POST
path: "/v1/auth/sign-in/code"
tags: ["Auth"]
---

# Create a hosted sign-in return code

`POST /v1/auth/sign-in/code`

## Request

- Base URL: `https://api.configure.dev`
- URL: `https://api.configure.dev/v1/auth/sign-in/code`
- Auth: HTTP bearer

Configure-hosted pages call this with an approved agent token. The returned code is single-use and expires after five minutes.

## Request body

- SignInCodeRequest
  - `return_to` string, required
  - `state` string

## Response `200`

Short-lived sign-in code.

- SignInCodeResponse
  - `code` string, required
  - `state` string, nullable
  - `returnTo` string, required
  - `expiresIn` integer, required
  - `tokenUse` 'sign_in_code', required

## Other responses

- `400`: Request shape is invalid.
- `403`: Forbidden. Common causes include secret_key_required, token_wrong_type, approval_required, or access_denied.

---

[API](https://skmtc.dev/configure/apis/configure-http-api.md) · [All operations](https://skmtc.dev/configure/apis/configure-http-api/llms.txt) · [OpenAPI document](https://skmtc.dev/configure/apis/configure-http-api/revisions/ec760a9533d2?raw)