---
title: "Request a password-reset code"
method: POST
path: "/auth/forgot-password"
tags: ["Auth"]
---

# Request a password-reset code

`POST /auth/forgot-password`

## Request

- Base URL: `http://localhost:38200`
- URL: `http://localhost:38200/auth/forgot-password`
- Auth: none required

Always returns 200 with a generic message regardless of whether the email is registered (anti-enumeration). A 6-digit code is emailed when the account exists.

## Request body

- object
  - `email` string, email, required

## Response `200`

Generic acknowledgement (does not confirm account existence).

- object
  - `message` string

## Other responses

- `400`: Request body/query failed Zod validation.
- `429`: Rate limit exceeded for this endpoint.

---

[API](https://skmtc.dev/contextq/apis/contextq-api.md) · [All operations](https://skmtc.dev/contextq/apis/contextq-api/llms.txt) · [OpenAPI document](https://skmtc.dev/contextq/apis/contextq-api/revisions/7afc44056a22?raw)