---
title: "Revoke the account API keys and OAuth access and refresh tokens, then show a new full-access key once in the HTML page. The POST needs the csrf nonce from the GET page. A POST without that nonce does not mint a key. The key is not emailed and is not stored. A second POST does not show the key. An expired link does not mint a key."
method: POST
path: "/api/v1/recover/confirm"
tags: ["Auth"]
---

# Revoke the account API keys and OAuth access and refresh tokens, then show a new full-access key once in the HTML page. The POST needs the csrf nonce from the GET page. A POST without that nonce does not mint a key. The key is not emailed and is not stored. A second POST does not show the key. An expired link does not mint a key.

`POST /api/v1/recover/confirm`

## Request

- Base URL: `https://cooperemail.com`
- URL: `https://cooperemail.com/api/v1/recover/confirm`
- Auth: none required

## Response `200`

HTML page. The new key is included once.

---

[API](https://skmtc.dev/cooperemail/apis/cooper-email-api.md) · [All operations](https://skmtc.dev/cooperemail/apis/cooper-email-api/llms.txt) · [OpenAPI document](https://skmtc.dev/cooperemail/apis/cooper-email-api/revisions/6d800a7b3e33?raw)