---
title: "Issue a single-use support sign-in link for an existing account"
method: POST
path: "/api/auth/support-link/issue"
tags: ["auth"]
---

# Issue a single-use support sign-in link for an existing account

`POST /api/auth/support-link/issue`

## Request

- Base URL: `https://api.hillstar.ai` (the document declares no server; this is the origin it was published from)
- URL: `https://api.hillstar.ai/api/auth/support-link/issue`
- Auth: none declared

Called by the internal admin console. Pre-session: the request carries the operator's own Google Workspace ID token as a bearer, which api-go verifies before recording that operator on the audit row. There is no dev bypass — use db-cli auth-link locally.

## Headers

- `Authorization` string: Bearer <Google Workspace ID token> of the issuing operator

## Request body

- SupportLinkIssueRequest
  - `$schema` string, uri: A URL to the JSON Schema for this object.
  - `email` string, email, required: Email of the existing active account to issue for
  - `reason` string, required: Support reason and identity-verification context; recorded in the audit row

## Response `200`

OK

- SupportLinkIssueResponse
  - `$schema` string, uri: A URL to the JSON Schema for this object.
  - `audit_id` integer, required: Issuance audit row id; revoke the link by this id
  - `expires_at` string, required: RFC3339 UTC instant the link stops working
  - `link` string, required: One-time sign-in URL. The bearer rides in the fragment and is never recoverable again
  - `target_name` string, required: Display name of the account the link signs in; empty when the account has no name

## Other responses

- `default`: Error

---

[API](https://skmtc.dev/hillstar/apis/rfpai-api-go.md) - [All operations](https://skmtc.dev/hillstar/apis/rfpai-api-go/llms.txt) - [OpenAPI document](https://skmtc.dev/hillstar/apis/rfpai-api-go/revisions/b2532dc47fc6?raw)