---
title: "Authorize With Email"
method: POST
path: "/v1/targets/{target_id}/email-authorize"
tags: ["targets"]
---

# Authorize With Email

`POST /v1/targets/{target_id}/email-authorize`

## Request

- Base URL: `https://api.cybret.ai` (the document declares no server; this is the origin it was published from)
- URL: `https://api.cybret.ai/v1/targets/{target_id}/email-authorize`
- Auth: HTTP bearer

Authorize from the session principal's IdP email domain.

Body is signer labels only. Missing/blank session domain → 422
``email_domain_required``. Zone mismatch → 422
``email_domain_mismatch``. Success returns the target view (dns/loa).

## Path parameters

- `target_id` string, required

## Request body

- EmailAuthorizeRequest: Optional signer labels only — domain is never client-supplied. ``POST /v1/targets/{id}/email-authorize`` reads the IdP-verified mailbox from the session principal (WorkOS JWT ``email`` / ``email_domain`` / ``hd``). Same contract for Settings and the /runs/new authorization step.
  - `signer_name` string, nullable
  - `signer_role` string, nullable

## Response `200`

Successful Response

- object

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/cybret/apis/api-scanner-control-plane.md) · [All operations](https://skmtc.dev/cybret/apis/api-scanner-control-plane/llms.txt) · [OpenAPI document](https://skmtc.dev/cybret/apis/api-scanner-control-plane/revisions/4c9b522246af?raw)