auth

Mail a one-time code to an address the caller wants to verify (Snowflake native app only).

DVT-5182. Starts verifying the address a signed-in user wants dvt to treat as theirs: dvt mails a 6-digit code (valid 15 minutes) through the same transport as "Email me this report now" (SYSTEM$SEND_EMAIL or the SMTP relay), but sent as the app's own identity rather than the caller's session. Confirm it with POST /v1/me/email-verification/confirm. A new request voids any pending code. Snowflake-native only (404 elsewhere). Interactive human sessions only: API keys, MCP and OAuth-client credentials get 403 delegated-credential. Requires data:query, data:export and sheet:read. The request must be same-origin and send Content-Type: application/json (415 / 403 otherwise). At most 5 codes per user per rolling hour (429 email-verification-rate-limited with Retry-After). If the mail cannot be sent the code is retired and the same Problem shapes as the dashboard email send are returned. The address is stored on the pending code row for up to about 48h (a daily sweep deletes rows older than 24h) and in users.verified_email once confirmed; it is never logged.

post/v1/me/email-verification

Request

  • Base URL: http://localhost:8080
  • URL: http://localhost:8080/v1/me/email-verification
  • Auth: one of:
    • API key in cookie dvt_session
    • HTTP bearer

Request body

emailstring required

One bare addr-spec (no display name, no list), at most 254 bytes after trimming.

Response

The code was mailed.

Changes

No recorded changes to this operation across all 1 revision of this API.